Manage the configuration and basic settings of your security process orchestration in SMC. Administer all important settings such as data classification criteria, sensitive data criteria, sensitive data exposure and transaction thresholds, role mapping and many more centrally.

Additionally, you can integrate your existing SIEM (Security Information and Event Management System) and configure notification workflows in case of Security Events & Incidents within the organization.

In the service configuration part, a role-based access control module defines what user is getting what access in the security center. In order to align the reporting results of activated data security solutions, all threat scenarios and use cases are mapped in SMC. It contains various notification processes to promptly inform the necessary departments in the company.

In the inventory section, the objects containing sensitive data, the data categorization, and grouping correlations are registered. The inventory data consists of systems, databases, and applications containing sensitive data for the structured data and contains scanned folders and files with sensitive data results for unstructured ones.

The service mapping area defines which applications, databases, files, etc. are to be considered for the security measures. Specifically, the activation of individual data security cases per application is managed here to determine where the focus of the measures should be set in the day-to-day business.

All alerts are created in the Security Monitor Center (SMC) and made available for analysis, evaluation, and triggering of any protective measures. The different tasks, such as the allocation of tickets (e.g. to employees of the Security Operations Center), the triggering of notification emails using standardized templates, the commenting on incidents, and the automated processing of security use cases are included in the SMC.

Detected events can be escalated at any time and the necessary measures can be initiated. The events created in SMC can also be transferred to third-party systems, such as an existing log & event management (e.g. Splunk) or SOAR system via interface and thus boost the quality of the logged events.