Sumo Logic Releases ServiceNow Security Incident Response Integration

Author: Dan Kobialka • September 7, 2021

Sumo Logic, a security information and event management (SIEM) solution provider working with MSSP, launched an integration that combines its Cloud SIEM Enterprise solution with the ServiceNow security incident response platform.

The two companies said that this integration allows security analysts to use Cloud SIEM Insights as a platform for ingesting and transforming security incidents into ServiceNow. It also ensures that risk scores, configuration items, Cloud SIEM Insight descriptors, and other observables are automatically standardized to maintain consistency in data organization and workflow.

In addition, the two companies stated that Sumo Logic provides local network hook integration for ServiceNow ITOM, ITSM, and security incident response. These integrations can help IT and security operations teams manage incidents and security incidents at scale.

Sumo logic security update

Previously, Sumo Logic released a beta version of its ServiceNow integration at the Virtual Modern SOC Summit in June 2021. The company also issued several other security bulletins during the event, including:

• Sumo Logic Cloud SOAR: Allow MSSP to use Sumo Logic Cloud SOAR to automate repetitive tasks, establish repeatable incident response workflows, and measure and optimize the performance of security operations and incident response programs.
• Sumo Logic Cloud SIEM powered by Amazon Web Services (AWS): Provide insights into AWS multi-cloud and hybrid cloud environments to help MSSP eliminate security blind spots.
• Cloud security monitoring and analysis applications: Use AWS Cloud Trail, AWS VPC Flows, Palo Alto Networks Firewall, Windows and Linux as data sources to gain insight into the organization’s security status and analysis to help security and IT teams solve security issues.

Sumo Logic focuses on continuous intelligence. It provides a partnership program that enables MSSP to provide security intelligence and SIEM solutions.