This forum uses cookies
This forum makes use of cookies to store your login information if you are registered, and your last visit if you are not. Cookies are small text documents stored on your computer; the cookies set by this forum can only be used on this website and pose no security risk. Cookies on this forum also track the specific topics you have read and when you last read them. Please confirm whether you accept or reject these cookies being set.

A cookie will be stored in your browser regardless of choice to prevent you being asked this question again. You will be able to change your cookie settings at any time using the link in the footer.

Thread Rating:
  • 0 Vote(s) - 0 Average
  • 1
  • 2
  • 3
  • 4
  • 5
Asset Management Integration Vs Asset Context Integration
Hi Rob,
Under Technology Domain - SIEM Tooling, may I know what are the differences between Asset Management Integration and Asset Context Integration?
Because to me, they are the same thing.
Do you have any good examples?

Asset management integration:
Integration into the asset management process for automated adding of assets to the SIEM for monitoring

Asset context integration:
Integration of asset management information into the SIEM (asset owner, asset location, etc.)

Hi Darren,

The initial idea to differentiate between these was that asses management integration purely means that new assets in the CMDB are automatically connected to the SIEM system to enable security monitoring.

Asset context means that the context of those assets, such as the mentioned features of ownership, location, and also classification is available to the security monitoring system as well. This context can subsequently be used in correlations or to determine the risk of events (assets with higher classification carry a higher risk).

With a proper integration, you will get both. But this is not neccessarily the case. Hence, the differentation.


Forum Jump:

Users browsing this thread: 1 Guest(s)