[NERC CIP Requirement] Cyber Security – Physical Security of BES Cyber Systems [AlienVault USM Capabilities] Asset Discovery and Inventory Vulnerability Assessment Network Intrusion Detection (IDS) Host Intrusion Detection (HIDS) File Integrity Monitoring (FIM) SIEM / event correlation Behavioral Monitoring Log Management Situational Awareness
Built-in and automated asset discovery will identify all IP-enabled physical security systems (keycard / proximity card devices) AlienVault’s Logger will record all physical security access events logged by proximity card systems for correlation with other logical systems (access to servers in data center)