GDPR

[Anon_Soc]

We use ESM to monitor a system that must comply with the GDPR. Some of the logs we receive in ESM may contain personal data of the users. According to the regulation, these logs stored in the ESM must be encrypted. If Mcafee has a solution for encrypting ESM database or there is a document that confirmed that ESM meet the GDPR requirement for personal data privacy.

[ninov_n]

Hi,

I could not find exact statement about ESM in regards to GDPR compliance but I think it has options for raising it to acceptable or higher levels. This should be helpful:

https://www.mcafee.com/enterprise/en-us/assets/solution-briefs/sb-gdpr-your-data-protection-transfor...

https://www.mcafee.com/enterprise/en-us/assets/faqs/faq-gdpr.pdf

[lratcliffe]

At present McAfee SIEM does not encrypt data at rest on the appliances.  My understanding of the GDPR is that it does not require disk encryption, but it identifies that this may be a useful tool in helping to maintain the security of protected data.

Direct access to the appliance disks is limited to the root (NGCP) user and ssh access can be disabled and controlled with an ACL. 

If this is a feature you need to see in future then please raise a product idea to help our product management prioritise new features.