Security Incident and Event Monitoring (SIEM) system

We are seeking to put in place a single central system that monitors all areas of Council IT systems and infrastructure. This will allow all teams within IT to have a solution that monitors activity and identifies any potential system risk. The solution will provide alerting to allow a more responsive capability to the IT service to protect Council services and data. In some cases, it may be possible to have an "early warning" to a potential attack or misuse of Council IT systems and use the information provided to take evasive action to prevent any or further damage to IT systems or data loss.