Cyber security threat monitoring

The Jisc–Splunk partnership

CSTM combines sector insight from Jisc with Splunk’s industry-leading SIEM technology. It provides enterprise grade analytics and scalable cloud performance, configured and run by Jisc, using more than 35 years of experience and unique Janet Network visibility. You get an enterprise class solution, optimised for your needs, at lower cost.

The Janet advantage

The Janet Network provides threat visibility that commercial vendors can’t match. By monitoring at network level and correlating intelligence from across the sector, CSTM reveals threats hidden elsewhere.

Janet enables:

• Early threat detection before attacks reach your infrastructure
• Faster sector-wide defence deployment
• Cross-institutional intelligence to spot attacker patterns
• Meaningful context, grounded in how education traffic behaves

Tailored for education and research

• Purpose-built for education and research
• Developed with Splunk and sector members
• Addresses sector-specific security challenges

Seamless and scalable security management

• Cloud-based SIEM solution for scalable threat monitoring
• Continuous service improvement based on user feedback
• Adaptable to emerging threats and evolving sector needs
• Works with existing security tools (antivirus, endpoint detection)
• Single dashboard for all security logs with prioritised event highlighting
• Filterable detection rules to reduce noise and improve efficiency

Service eligibility

Designed for education and research institutions looking to enhance their security posture with a comprehensive and scalable SIEM solution to bolster the security services and benefits included with their Janet connection.

Pre-requisites include a Janet IP connection. An EDR solution is highly recommended but not mandatory.

Cyber security threat monitoring vs security operations centre (SOC)

Cyber security threat monitoring (CSTM), in combination with the services included with your Janet connection, provides continuous expert monitoring, triage, and alerting of potential malicious activity across your IT environment, and support via Jisc CSIRT should you require it— empowering your internal team to respond faster and with more peace of mind.

If you would prefer an end-to-end managed service, where threats are not only detected but also contained and mitigated on your behalf in accordance with pre-defined criteria, the Jisc security operations centre (SOC) would better suit your needs and further reduce the burden on your internal operations.

Our project partners