IBM Resilient Incident Response Platform empowers cyber security teams to transform their security posture
IBM Canada Ltd. Software Announcement A16-0438June 14, 2016
ENUSA16-0438.PDF| Table of contents | ||||||||||||||||||||||||
| ||||||||||||||||||||||||
The Title, Overview, Description, and Ordering information sections are revised.
Back to top
 |
| Overview |
 |
IBM® Resilient Systems Incident Response Platform is one of the leading platforms for orchestrating and automating incident response processes. Resilient Incident Response Platform, a product that was acquired from Resilient Systems Inc, an IBM company, can quickly and easily integrate with your organization's existing security and IT investments to:
- Make security alerts ready for use near-instantly.
- Provide valuable intelligence and incident context.
- Enable security teams to help eliminate or streamline critical steps.
Resilient Incident Response Platform offers a robust response to the daily events that can require actions from your security teams. This a growing challenge that is shared globally by organizations of all sizes and across all industries. Responding effectively in the face of a cyber crisis becomes harder as the stakes have gotten higher and the actors more sophisticated.
Resilient Incident Response Platform provides dynamic action plans for more than 18 different types of incidents and best practices for responding to virtually all incident types, which include malware, distributed denial-of-service (DDoS), and lost devices. This extensive knowledge base can help lead your team through the most effective response, while capable of being customized to your standard operating procedures. Team members can quickly access data from more than a dozen cyber threat intelligence feeds and other integrated cyber security and IT systems.
Incident response teams can manage and collaborate on their response directly within the platform. Unlike ticketing systems and other general-purpose IT tools, Resilient Incident Response Platform is fully configurable and purpose-built for incident response. Comprehensive analysis, customizable dashboards, and robust reporting features can help ensure that senior leadership can access key information when needed.
In May, 2016, IBM acquired Resilient Systems Inc., a leading provider of incident response solutions. With this acquisition, IBM is positioned to provide the industry's first integrated, end-to-end Security Operations and Response Platform offering that spans the entire lifecycle of an attack, from protection and detection to response.
Back to top
|
| Key prerequisites |
|
Resilient Incident Response Platform requires VMware ESX V4.x, or later.
Back to top
|
| Planned availability date |
|
June 24, 2016
Back to top
|
| Description |
|
Resilient Incident Response Platform can help automate and orchestrate the processes for dealing with cyber incidents, such as breaches and lost devices, and can enable businesses to respond more quickly.
When Resilient Incident Response Platform is installed as a virtual appliance on VMWare ESX 4.x .or later, it can integrate with existing security detection and remediation systems. This allows the offering to help coordinate and automate the actions that are required to respond to a security incident by categorizing the incident and implementing best practices, or playbooks, to respond accordingly.
With a number of integrations with established security systems, which include IBM Security QRadar® SIEM, Resilient can share data and trigger actions within those systems to help remediate security incidents, offer additional context on actionable items, and suggest best practices to help prevent future incidents.
The offering includes a knowledge base of global breach notification regulations that is maintained and updated by privacy professionals at Resilient Systems, Inc., an IBM Company. This knowledge base can be used by team members to help understand breach notification compliance requirements that may apply to a security incident.
Back to top
|
| Reference information |
|
For information on the IBM acquisition of Resilient Systems, Inc, refer to the IBM News room.
For additional information on Security QRadar, refer to Software Announcement A15-0238, dated May 26, 2015.
Back to top
|
| Program number |
|
| Program number | VRM | Program name |
|---|---|---|
| 5737-A52 | 26.0.0 | IBM Resilient Incident Response Platform |
Back to top
|
| Offering Information |
|
Product information is available on the IBM Offering Information website.
More information is also available on the Passport Advantage® and Passport Advantage Express® website.
Back to top
|
| Publications |
|
For product documentation, contact your IBM representative.
Back to top
|
| Services |
|
Software Services
IBM Software Services has the breadth, depth, and reach to manage your services needs. You can leverage the deep technical skills of our lab-based, software services team and the business consulting, project management, and infrastructure expertise of our IBM Global Services team. Together, we provide the global reach, intellectual capital, industry insight, and technology leadership to support a wide range of critical business needs.
To learn more about IBM Software Services or to contact a Software Services sales specialist, go to the IBM Software Services website.
Back to top
|
| Technical information |
|
Specified operating environment
Hardware requirements
Resilient Incident Response Platform requires a virtual server running VMware ESX V4.x, or later, with a minimum of:
- 8 GB RAM
- 100 GB disk storage
- Dual core 2.2 GHz processor, or later
Software requirements
Resilient Incident Response Platform requires a virtual server running VMware ESX V4.x, or later.
The program's specifications and specified operating environment information may be found in documentation accompanying the program, if available, such as a readme file, or other information published by IBM, such as an announcement letter. Documentation and other program content may be supplied only in the English language. Such information is provided subject to the following terms. IT system security involves protecting systems and information through prevention, detection and, response to improper access from within and outside your enterprise. Improper access can result in information being altered, destroyed, misappropriated, or misused, or can result in damage to or misuse of your systems, including for use in attacks on others. No IT system or product should be considered completely secure and no single product, service, or security measure can be completely effective in preventing improper use or access. IBM systems, products, and services are designed to be part of a lawful, comprehensive security approach, which will necessarily involve additional operational procedures, and may require other systems, products, or services to be most effective.
Important: IBM does not warrant that any systems, products, or services are immune from, or will make your enterprise immune from, the malicious or illegal conduct of any party.
Planning information
Packaging
- Resilient Incident Response Platform is only distributed through electronic download.
- License Information document: L-HART-A9FQDX
Direct customer support
For technical support or assistance, contact your IBM representative.
Back to top
|
| Ordering information |
|
This product is only available through Passport Advantage. It is not available as shrinkwrap.
Product Group: Security
Product: Object IBM Resilient Incident Response Platform (5737-A52)
Product Category: Resilient Incident Response Platform
| Program name/Description | Part number |
|---|---|
| IBM Resilient Incident Response Platform Enterprise Install License + SW Subscription & Support 12 Months | D1NNWLL |
| IBM Resilient Incident Response Platform Enterprise Install Annual SW Subscription & Support Renewal 12 Months | E0MSXLL |
| IBM Resilient Incident Response Platform Enterprise Install SW Subscription & Support Reinstatement 12 Months | D1NNXLL |
| IBM Resilient Incident Response Platform Enterprise Authorized User License + SW Subscription & Support 12 Months | D1NP0LL |
| IBM Resilient Incident Response Platform Enterprise Authorized User Annual SW Subscription & Support Renewal 12 Months | E0MSYLL |
| IBM Resilient Incident Response Platform Enterprise Authorized User SW Subscription & Support Reinstatement 12 Months | D1NP1LL |
| IBM Resilient Incident Response Platform Enterprise for Non-Production Environment Install License + SW Subscription & Support 12 Months | D1NP4LL |
| IBM Resilient Incident Response Platform Enterprise for Non-Production Environment Install Annual SW Subscription & Support Renewal 12 Months | E0MSZLL |
| IBM Resilient Incident Response Platform Enterprise for Non-Production Environment Install SW Subscription & Support Reinstatement 12 Months | D1NP5LL |
| IBM Resilient Incident Response Platform Standard Install License + SW Subscription & Support 12 Months | D1NP7LL |
| IBM Resilient Incident Response Platform Standard Install Annual SW Subscription & Support Renewal 12 Months | E0MT0LL |
| IBM Resilient Incident Response Platform Standard Install SW Subscription & Support Reinstatement 12 Months | D1NP8LL |
| IBM Resilient Incident Response Platform Standard Authorized User License + SW Subscription & Support 12 Months | D1NPALL |
| IBM Resilient Incident Response Platform Standard Authorized User Annual SW Subscription & Support Renewal 12 Months | E0MT1LL |
| IBM Resilient Incident Response Platform Standard Authorized User SW Subscription & Support Reinstatement 12 Months | D1NPBLL |
You must have previously acquired license for the following precursor product to be eligible to acquire an equivalent license of the trade-up product.
| Precursor product | Trade-up product | Trade-up part number |
|---|---|---|
| IBM Resilient Standard Install | IBM Resilient Incident Response Platform Enterprise Install | D1NNZLL |
| IBM Resilient Standard Authorized User | IBM Resilient Incident Response Platform Enterprise Authorized User | D1NP3LL |
Customers must have current active Software Subscription and Support in place for all of the licenses that will be given up by the use of the trade-up parts. Those customers with lapsed support need to reinstate their S&S contracts to be eligible for trade ups.
Consult your IBM representative if you have any questions.
Charge metric
Passport Advantage
| Program/service name | Program number | Charge unit description |
|---|---|---|
| IBM Resilient Incident Response Platform | 5737-A52 | Install |
| Authorized User |
Authorized User is a unit of measure by which the program can be licensed. An Authorized User is a unique person who is given access to the program. The program may be installed on any number of computers or servers and each Authorized User may have simultaneous access to any number of instances of the program at one time. Licensee must obtain separate, dedicated entitlements for each Authorized User given access to the program in any manner directly or indirectly (for example, through a multiplexing program, device, or application server) through any means. An entitlement for an Authorized User is unique to that Authorized User and may not be shared, nor may it be reassigned other than for the permanent transfer of the Authorized User entitlement to another person.
Note: Some programs may be licensed where devices are considered users. In that case, the following applies. Any computing device that requests the execution of or receives for execution a set of commands, procedures, or applications from the program or that is otherwise managed by the program is considered a separate user of the program and requires an entitlement as if that device were a person.
Install is a unit of measure by which the program can be licensed. An install is an installed copy of the program on a physical or virtual disk made available to be executed on a computer. Licensee must obtain an entitlement for each install of the program.
Back to top
|
| Terms and conditions |
|
The information provided in this announcement letter is for reference and convenience purposes only. The terms and conditions that govern any transaction with IBM are contained in the applicable contract documents such as the IBM International Program License Agreement, IBM International Passport Advantage Agreement, and the IBM Agreement for Acquisition of Software Maintenance.
This product is only available through Passport Advantage.
Licensing
IBM International Program License Agreement including the License Information document and Proof of Entitlement (PoE) govern your use of the program. PoEs are required for all authorized use. Part number products only, offered outside of Passport Advantage, where applicable, are license only and do not include Software Maintenance.
Agreement for Acquisition of Software Maintenance
These programs are licensed under the IBM Program License Agreement (IPLA) and the associated Agreement for Acquisition of Software Maintenance, which provide for support with ongoing access to releases and versions of the program. IBM includes one year of Software Subscription and Support (also referred to as Software Maintenance) with the initial license acquisition of each program acquired. The initial period of Software Subscription and Support can be extended by the purchase of a renewal option, if available. These programs have a one-time license charge for use of the program and an annual renewable charge for the enhanced support that includes telephone assistance (voice support for defects during normal business hours), as well as access to updates, releases, and versions of the program as long as support is in effect.
License Information number
L-HART-A9FQDX
The program's License Information will be available for review on the IBM Software License Agreement website.
Limited warranty applies
Yes
Limited warranty
IBM warrants that when the program is used in the specified operating environment, it will conform to its specifications. The warranty applies only to the unmodified portion of the program. IBM does not warrant uninterrupted or error-free operation of the program or that IBM will correct all program defects. You are responsible for the results obtained from the use of the program.
IBM provides you with access to IBM databases containing information on known program defects, defect corrections, restrictions, and bypasses at no additional charge. For further information, see the IBM Software Support Handbook.
IBM will maintain this information for at least one year after the original licensee acquires the program (warranty period).
Program technical support
Technical support of a program product version or release will be available for a minimum of five years from the general availability date, as long as your Software Subscription and Support (also referred to as Software Maintenance) is in effect.
This technical support allows you to obtain assistance (by telephone or electronic means) from IBM for product-specific, task-oriented questions regarding the installation and operation of the program product. Software Subscription and Support (Software Maintenance) also provides you with access to updates (modifications or fixes), releases, and versions of the program. You will be notified, through an announcement letter, of discontinuance of support with 12 months' notice. If you require additional technical support from IBM, including an extension of support beyond the discontinuance date, contact your IBM representative. This extension may be available for a fee.
Money-back guarantee
If for any reason you are dissatisfied with the program and you are the original licensee, you may obtain a refund of the amount you paid for it, if within 30 days of your invoice date you return the program and its PoE to the party from whom you obtained it. If you downloaded the program, you may contact the party from whom you acquired it for instructions on how to obtain the refund.
For clarification, note that (1) for programs acquired under the IBM International Passport Advantage offering, this term applies only to your first acquisition of the program and (2) for programs acquired under any of IBM 's On/Off Capacity on Demand (On/Off CoD) software offerings, this term does not apply since these offerings apply to programs already acquired and in use by you.
Volume orders (IVO)
No
Passport Advantage applies
Yes, information is available on the Passport Advantage and Passport Advantage Express website.
Usage restriction
Yes
For additional information, refer to the License Information document that is available on the IBM Software License Agreement website.
Software Subscription and Support applies
Yes. Software Subscription and Support, also referred to as Software Maintenance, is included with licenses purchased through Passport Advantage and Passport Advantage Express. Product upgrades and Technical Support are provided by the Software Subscription and Support offering as described in the Agreements. Product upgrades provide the latest versions and releases to entitled software, and Technical Support provides voice and electronic access to IBM support organizations, worldwide.
IBM includes one year of Software Subscription and Support with each program license acquired. The initial period of Software Subscription and Support can be extended by the purchase of a renewal option, if available.
While your Software Subscription and Support is in effect, IBM provides you assistance for your routine, short duration installation and usage (how-to) questions, and code-related questions. IBM provides assistance by telephone and, if available, electronic access, only to your information systems (IS) technical support personnel during the normal business hours (published prime shift hours) of your IBM support centre. (This assistance is not available to your users.) IBM provides Severity 1 assistance 24 hours a day, 7 days a week. For additional details, see the IBM Software Support Handbook. Software Subscription and Support does not include assistance for the design and development of applications, your use of programs in other than their specified operating environment, or failures caused by products for which IBM is not responsible under the applicable agreements.
For additional information about the International Passport Advantage Agreement and the IBM International Passport Advantage Express Agreement, go to the Passport Advantage and Passport Advantage Express website.
IBM Operational Support Services - Support Line
No
Other support
Passport Advantage
System i Software Maintenance applies
No
Variable charges apply
No
Educational allowance available
Not applicable.
Back to top
|
| Statement of good security practices |
|
IT system security involves protecting systems and information through prevention, detection, and response to improper access from within and outside your enterprise. Improper access can result in information being altered, destroyed, or misappropriated or can result in misuse of your systems to attack others. Without a comprehensive approach to security, no IT system or product should be considered completely secure and no single product or security measure can be completely effective in preventing improper access. IBM systems and products are designed to be part of a lawful, comprehensive security approach, which will necessarily involve additional operational procedures, and may require other systems, products, or services to be most effective.
Important: IBM does not warrant that any systems, products, or services are immune from, or will make your enterprise immune from, the malicious or illegal conduct of any party.
Back to top
|
| Prices |
|
Prices are subject to change without notice.
GST, QST, and sales taxes, where applicable, are extra.
For Passport Advantage information and charges, contact your IBM representative. Additional information is also available on the Passport Advantage and Passport Advantage Express website.
IBM Global Financing
IBM Global Financing offers competitive financing to credit-qualified customers to assist them in acquiring IT solutions. Offerings include financing for IT acquisition, including hardware, software, and services, from both IBM and other manufacturers or vendors. Offerings (for all customer segments: small, medium, and large enterprise), rates, terms, and availability can vary by country. Contact your local IBM Global Financing organization or go to the IBM Global Financing website for more information.
IBM Global Financing offerings are provided through IBM Credit LLC in the United States, and other IBM subsidiaries and divisions worldwide to qualified commercial and government customers. Rates are based on a customer's credit rating, financing terms, offering type, equipment type, and options, and may vary by country. Other restrictions may apply. Rates and offerings are subject to change, extension, or withdrawal without notice.
Financing from IBM Global Financing helps you preserve cash and credit lines, enables more technology acquisition within current budget limits, permits accelerated implementation of economically attractive new technologies, offers payment and term flexibility, and can help match project costs to projected benefits. Financing is available worldwide for credit-qualified customers.
Back to top
|
| Order now |
|
To order, contact the Americas Call Centers or your local IBM representative. To identify your local IBM representative, call 800- IBM -4YOU (426-4968). For more information, contact the Americas Call Centers.
Phone: 800- IBM -CALL (426-2255)
Fax: 800-2IBM-FAX (242-6329)
For IBM representative: askibm@ca.ibm.com
- Mail:
-
- IBM Teleweb Customer Support
- ibm.com® Sales Execution Center, Americas North
- 3500 Steeles Ave. East, Tower 3/4
- Markham, Ontario
- Canada L3R 2Z1
- Reference:
- YE001
The Americas Call Centers, our national direct marketing organization, can add your name to the mailing list for catalogues of IBM products.
Note: Shipments will begin after the planned availability date.
Trade-marks
IBM, Passport Advantage, System i, Express, QRadar and ibm.com are registered trade-marks of IBM Corporation in the United States, other countries, or both.
Other company, product, and service names may be trade-marks or service marks of others.
tm Trade-mark owned by International Business Machines Corporation and is used under license by IBM Canada Ltd.
® Registered trade-mark of International Business Machines Corporation and is used under license by IBM Canada Ltd.
(**) Company, product or service name may be a trade-mark or service mark of others.
Terms of use
IBM products and services which are announced and available in your country can be ordered under the applicable standard agreements, terms, conditions, and prices in effect at the time. IBM reserves the right to modify or withdraw this announcement at any time without notice. This announcement is provided for your information only. Additional terms of use are located at:
For the most current information regarding IBM products, consult your IBM representative or reseller, or visit the IBM worldwide contacts page