Any security company worth their salt has been bombarding companies looking at the situation vis-à-vis Her Majesty’s Revenue and Customs (HMRC) and wondering about their security procedures and technology.

In the Labs we’ve just set up a system from log data management and compliance vendor LogLogic, which looks tailor made to address problems like those currently putting HMRC in the spotlight. We have a LogLogic LX 2010 appliance which is collecting and collating log event data from our numerous systems. This then passes them on to an ST 3010 appliance which archives the logs and creates a searchable data archive, which should make it easy for system admins and even tech journalists to spot and alert on policy breaches. Like for instance, somebody copying a database and putting it un-encrypted onto a CD and ‘protecting’ said data with just a password.

I presume LogLogic marketing managers will be quietly confident that their systems might get an extra boost from the shenanighans currently plaguing public sector IT. We’ll put putting out a full review of the system, hopefully before Santa sets Rudolph out on his one year mission to disappoint your kids.

29 Nov 2007