LogRhythm
Founded in Glasgow, MMS was the first law firm in Scotland with a specifically commercial practice, and has since expanded to London, Edinburgh and Aberdeen. On advice from its auditor, MMS recognised a need to improve the way that audit log data was harvested. Though the requirement was simply to collect this data across its live IT estate, MMS sought overall network visibility and to help the company add context to the vast amount of data made daily.
MMS worked with Bridgeway Security Solutions, a consultative information security reseller, to identify vendors. Together, the companies coordinated trial installations of LogRhythm and two competing products – however, the competitors proved unable to meet the specific needs of MMS as it specifically sought an easy-to-use product on a Windows platform, with SIEM capabilities that would integrate into existing IT.
Crawford Hawley-Groat, Director of IT at MMS, said: “During the trial phase, we found that LogRhythm was the only vendor to tick all of our boxes – with a user-friendly interface and strong data analytics built into the product. The sensitivity of the data that we handle means we must be able to verify and validate data protection best practise. The platform gives us all of the capabilities required to meet the requirements set out by our auditors, and more. We are particularly pleased with the additional SIEM functionality that LogRhythm delivers – as our ultimate aim was to go beyond check-box compliance and find a solution that would offer continuous protection for the data within our network.”
Since its installation, the IT security product has enabled MMS to satisfy its auditing criteria, as well as to improve change management across its key servers. The company is looking at options to expand the reach of the platform across the business.
“With LogRhythm, log data is not only harvested across the live estate – it is converted into actual business intelligence that gives us unparalleled insight into all activity across our network,” added Hawley-Groat. “We can now understand all log-on and log-off data, and any anomalous events, configuration changes or account modifications can be instantly identified and remediated if they point to a broader attack on the system. In this respect, LogRhythm’s solution is much more powerful and comprehensive than we ever expected.”
Ross Brewer, vice president and managing director International Markets, LogRhythm, said: “MMS is a great example of a business that strives to go the extra mile in order to ensure the utmost protection of confidential data. While many enterprises may be inclined to install the most basic security tools just to achieve compliance in certain areas of the business, MMS has demonstrated a great sense of responsibility in selecting a feature-rich platform that will go much deeper into its network, and offer constant insight into security threats affecting the entire IT environment. With security threats evolving at such a rapid pace, this is becoming the only way to keep data protected now – and well into the future.”
