IBM Resilient Incident Response Platform streamlines incident response and privacy response management and delivers an automatic, fast, and flexible way to react to incidents

IBM Europe Software Announcement ZP17-0058
January 31, 2017

Table of contents
OverviewOverviewTechnical informationTechnical information
Key prerequisitesKey prerequisitesOrdering informationOrdering information
Planned availability datePlanned availability dateTerms and conditionsTerms and conditions
Program numberProgram numberPricesPrices
PublicationsPublicationsAnnouncement countriesAnnouncement countries


Back to topBack to top

Top rule
Overview
Bottom rule

IBM® Resilient Incident Response Platform (IRP) orchestrates and automates the people, process, and technology that are associated with incident response. Resilient IRP streamlines incident response and privacy response management and provides an automatic, fast, and flexible way for organizations to react to incidents with the introduction of two, new orderable components:

  • Resilient IRP Standard Plus Privacy

    Standard Plus Privacy combines the security capabilities of Resilient Standard with the Resilient privacy functions. This results in generated response plans to include not only IT security-related tasks, but also appropriate global-data-privacy-breach-notification tasks. These tasks are based on the type of data compromised and applicable regulations. Standard Plus Privacy includes:

    • A set of cyber-security response guidelines that are based on industry standards and best practices.
    • A knowledgebase of global privacy data breach notification regulations, which is tracked and interpreted by an internal team of certified privacy professionals.
    • Data-breach-notification-response plans that promptly map to the latest regulations. These plans help take the complexity out of compliance obligations for tracking:
      • Privacy-data-breach-notification regulations
      • Industry-specific data breach requirements
      • Company-specific obligations
      • Third-party requirements
      • Industry best practices
    • Curated, data-breach-notification regulatory information from external privacy professionals and the community of Resilient IRP users.
    • Automated notification of new regulations that help to provide context around an organization's ongoing, data-breach-notification compliance obligations

  • Resilient IRP Standard Plus Action

    Standard Plus Action combines the security capabilities of Resilient Standard with the Resilient action functions. This results in generated response plans to include not only guidance on the appropriate steps to take, but the ability to execute those tasks from within the Resilient run-time environment. Standard Plus Action includes the ability to:

    • Help orchestrate response processes by:
      • Making alerts actionable
      • Streamlining remediation tasks
      • Adapting in near real-time as the incident evolves
    • Automate the tasks associated with triage and enrichment to enable analysts to focus energy on investigation and response instead of pivoting between tools.
    • Synthesize data from existing security and IT systems, which includes endpoint security tools, SIEMs, and ticketing systems, to provide critical, near-real-time information.
    • Automate a wide range of menial tasks that include:
      • User identification through LDAP
      • Asset enrichment or discovery with the integration of a configuration management database (CMDB)
      • Cyber-threat-intelligence lookup
    • Help to empower security teams to automate and fine-tune response processes and workflows without custom development or specialized programming skills.

To utilize either Standard Plus Privacy or Standard Plus Action, a run-time environment must have at least one Resilient IRP Standard Authorized User license.



Back to topBack to top

Top rule
Key prerequisites
Bottom rule

Resilient Incident Response Platform requires VMware ESX V4.x, or later.



Back to topBack to top

Top rule
Planned availability date
Bottom rule

January 31, 2017



Back to topBack to top

Top rule
Accessibility by people with disabilities
Bottom rule

A US Section 508 Voluntary Product Accessibility Template (VPAT) containing details on accessibility compliance can be found on the IBM Accessibility website.



Back to topBack to top

Top rule
Reference information
Bottom rule

For information on the IBM acquisition of Resilient Systems, Inc, refer to the IBM News room.

For additional information on Resilient IRP, refer to Software Announcements:

For additional information on Resilient Incident Response Platform on Cloud, refer to Software Announcements:



Back to topBack to top

Top rule
Program number
Bottom rule
Program number VRM Program name
5737-A52 27.0.0 IBM Resilient Incident Response Platform


Back to topBack to top

Top rule
Publications
Bottom rule

For product documentation, contact your IBM representative.



Back to topBack to top

Top rule
Services
Bottom rule

Global Technology Services

Contact your IBM representative for the list of selected services available in your country, either as standard or customized offerings for the efficient installation, implementation, or integration of this product.



Back to topBack to top

Top rule
Technical information
Bottom rule

Specified operating environment

Hardware requirements

Resilient IRP requires a virtual server that runs VMware ESX V4.x, or later, with a minimum of:

  • 8 GB RAM
  • 100 GB disk storage
  • Dual core 2.2 GHz processor, or later

Software requirements

Resilient IRP requires a virtual server running VMware ESX V4.x, or later.

Such information is provided subject to the following terms. IT system security involves protecting systems and information through prevention, detection, and response to improper access from within and outside your enterprise. Improper access can result in information being altered, destroyed, misappropriated, or misused, or can result in damage to or misuse of your systems, including for use in attacks on others. No IT system or product should be considered completely secure and no single product, service, or security measure can be completely effective in preventing improper use or access. IBM systems, products, and services are designed to be part of a lawful, comprehensive security approach, which will necessarily involve additional operational procedures, and may require other systems, products, or services to be most effective.

Important: IBM does not warrant that any systems, products, or services are immune from, or will make your enterprise immune from, the malicious or illegal conduct of any party.

Planning information

Packaging
  • Resilient IRP is only distributed through electronic download.
  • License Information document: L-FLIA-AHAJB5


Back to topBack to top

Top rule
Ordering information
Bottom rule

For ordering information, consult your IBM representative or authorized IBM Business Partner, or go to the Passport Advantage® website.

This product is only available through Passport Advantage. It is not available as shrinkwrap.

Product Group: Security

Product: IBM Resilient Incident Response Platform (5737-A52)

Product Category: Resilient Incident Response Platform


Passport Advantage

Resilient Incident Response Platform ordering information for licenses and software subscriptions remains unchanged, except for the additional part numbers in the following table. Refer to Software Announcements ZP16-0545, dated November 1, 2016, and ZP16-0351, dated June 14, 2016.

Program name/Description Part number
IBM Resilient Incident Response Platform Standard Plus Action Install License + SW Subscription & Support 12 Months D1S3KLL
IBM Resilient Incident Response Platform Standard Plus Action Install SW Subscription & Support Reinstatement 12 Months D1S3LLL
IBM Resilient Incident Response Platform Standard Plus Action Install Monthly License D1S3ZLL
IBM Resilient Incident Response Platform Standard Plus Action Install Annual SW Subscription & Support Renewal 12 Months E0NEILL
IBM Resilient Incident Response Platform Standard Plus Privacy Install License + SW Subscription & Support 12 Months D1S3SLL
IBM Resilient Incident Response Platform Standard Plus Privacy Install SW Subscription & Support Reinstatement 12 Months D1S3TLL
IBM Resilient Incident Response Platform Standard Plus Privacy Install Monthly License D1S41LL
IBM Resilient Incident Response Platform Standard Plus Privacy Install Annual SW Subscription & Support Renewal 12 Months E0NEKLL

New users of Resilient IRP Standard

When ordering either the Resilient IRP Standard Plus Privacy or Resilient IRP Standard Plus Action license, you must order at least one Resilient IRP Standard Authorized User license.

Current users of Resilient IRP Standard

When ordering either the Resilient IRP Standard Plus Privacy or Resilient IRP Standard Plus Action license, you must have at least one Resilient IRP Standard Authorized User license and you must be current with your S&S for that license.


Passport Advantage trade-up

The Passport Advantage trade-up ordering information part number descriptions are updated from previously announced ordering information in Software Announcements ZP16-0545, dated November 1, 2016, and ZP16-0351, dated June 14, 2016.

In addition, trade-up part numbers are added for cross-platform product for use on z Systems™.

You must have previously acquired license for the following precursor product to be eligible to acquire an equivalent license of the trade-up product.

Description Trade-up part number
IBM Resilient Incident Response Platform Enterprise from Resilient Incident Response Platform Standard Plus Action for System z® Install Trade Up License + SW Subscription & Support 12 Months D1S45LL
IBM Resilient Incident Response Platform Enterprise from Resilient Incident Response Platform Standard Plus Privacy for System z Install Trade Up License + SW Subscription & Support 12 Months D1S46LL
IBM Resilient Incident Response Platform Enterprise from Resilient Incident Response Platform Standard Plus Action Install Trade Up License + SW Subscription & Support 12 Months D1S43LL
IBM Resilient Incident Response Platform Enterprise from Resilient Incident Response Platform Standard Plus Privacy Install Trade Up License + SW Subscription & Support 12 Months D1S44LL
IBM Resilient Incident Response Platform Standard Plus Action from Resilient Incident Response Platform Standard Install Trade Up License + SW Subscription & Support 12 Months D1S3NLL
IBM Resilient Incident Response Platform Standard Plus Action from Resilient Incident Response Platform Standard for System z Install Trade Up License + SW Subscription & Support 12 Months D1S3RLL
IBM Resilient Incident Response Platform Standard Plus Privacy from Resilient Incident Response Platform Standard Install Trade Up License + SW Subscription & Support 12 Months D1S3VLL
IBM Resilient Incident Response Platform Standard Plus Privacy from Resilient Incident Response Platform Standard for System z Install Trade Up License + SW Subscription & Support 12 Months D1S3YLL

You must have current active Software Subscription and Support in place for all of the licenses that will be given up by the use of the trade-up part numbers. If you have lapsed support, you must reinstate your S&S contracts to be eligible for tradeups.

Consult your IBM representative or IBM Business Partner if you have any questions.


Cross-platform product for use on z Systems

Order the part numbers that follow when the product is used for either the development of code that will be deployed on z Systems servers or when the product will be communicating or transferring data between a distributed server and a z Systems server. Otherwise order from the other set of part numbers in this announcement. This set of part numbers provides the identical supply and authorization as the other set in this announcement.

Resilient Incident Response Platform ordering information for z Systems remain unchanged except for the additional part numbers in the following table. Refer to Software Announcement ZP16-0545, dated November 1, 2016.

Program name/Description Part number
IBM Resilient Incident Response Platform Standard Plus Action for z Systems Install License + SW Subscription & Support 12 Months D1S3PLL
IBM Resilient Incident Response Platform Standard Plus Action for z Systems Install SW Subscription & Support Reinstatement 12 Months D1S3QLL
IBM Resilient Incident Response Platform Standard Plus Action for z Systems Install Monthly License D1S40LL
IBM Resilient Incident Response Platform Standard Plus Action for z Systems Install Annual SW Subscription & Support Renewal 12 Months E0NEJLL
IBM Resilient Incident Response Platform Standard Plus Privacy for z Systems Install License + SW Subscription & Support 12 Months D1S3WLL
IBM Resilient Incident Response Platform Standard Plus Privacy for z Systems Install SW Subscription & Support Reinstatement 12 Months D1S3XLL
IBM Resilient Incident Response Platform Standard Plus Privacy for z Systems Install Monthly License D1S42LL
IBM Resilient Incident Response Platform Standard Plus Privacy for z Systems Install Annual SW Subscription & Support Renewal 12 Months E0NELLL

New users of Resilient IRP Standard for z Systems

When ordering either the Resilient IRP Standard Plus Privacy for z Systems or Resilient IRP Standard Plus Action for z Systems license, you must order at least one Resilient IRP Standard Authorized User license for z Systems.

Current users of Resilient IRP Standard for z Systems

When ordering either the Resilient IRP Standard Plus Privacy for z Systems or Resilient IRP Standard Plus Action for z Systems license, you must have at least one Resilient IRP Standard Authorized User license for z Systems, and you must be current with your S&S for that license.

Charge metric

Passport Advantage®

Program/service name Program number Charge unit description
IBM Resilient IRP 5737-A52
  • Authorized User
  • Install


Authorized User

Authorized User is a unit of measure by which the program can be licensed. An Authorized User is a unique person who is given access to the program. The program may be installed on any number of computers or servers and each Authorized User may have simultaneous access to any number of instances of the program at one time. Licensee must obtain separate, dedicated entitlements for each Authorized User given access to the program in any manner directly or indirectly (for example, through a multiplexing program, device, or application server) through any means. An entitlement for an Authorized User is unique to that Authorized User and may not be shared, nor may it be reassigned other than for the permanent transfer of the Authorized User entitlement to another person.

Note: Some programs may be licensed where devices are considered users. In that case, the following applies. Any computing device that requests the execution of or receives for execution a set of commands, procedures, or applications from the program or that is otherwise managed by the program is considered a separate user of the program and requires an entitlement as if that device were a person.


Install

Install is a unit of measure by which the program can be licensed. An install is an installed copy of the program on a physical or virtual disk made available to be executed on a computer. Licensee must obtain an entitlement for each install of the program.



Back to topBack to top

Top rule
Terms and conditions
Bottom rule

The information provided in this announcement letter is for reference and convenience purposes only. The terms and conditions that govern any transaction with IBM are contained in the applicable contract documents such as the IBM International Program License Agreement, IBM International Passport Advantage Agreement, and the IBM Agreement for Acquisition of Software Maintenance.

This product is only available through Passport Advantage.

Licensing

IBM International Program License Agreement including the License Information document and Proof of Entitlement (PoE) govern your use of the program. PoEs are required for all authorized use. Part number products only, offered outside of Passport Advantage, where applicable, are license only and do not include Software Maintenance.

Agreement for Acquisition of Software Maintenance

These programs are licensed under the IBM Program License Agreement (IPLA) and the associated Agreement for Acquisition of Software Maintenance, which provide for support with ongoing access to releases and versions of the program. IBM includes one year of Software Subscription and Support (also referred to as Software Maintenance) with the initial license acquisition of each program acquired. The initial period of Software Subscription and Support (also referred to as Software Maintenance) can be extended by the purchase of a renewal option, if available. These programs have a one-time license charge for use of the program and an annual renewable charge for the enhanced support that includes telephone assistance (voice support for defects during normal business hours), as well as access to updates, releases, and versions of the program as long as support is in effect.

License Information number

L-FLIA-AHAJB5

The program's License Information will be available for review on the IBM Software License Agreement website.

Limited warranty applies

Yes

Limited warranty

IBM warrants that when the program is used in the specified operating environment, it will conform to its specifications. The warranty applies only to the unmodified portion of the program. IBM does not warrant uninterrupted or error-free operation of the program or that IBM will correct all program defects. You are responsible for the results obtained from the use of the program.

IBM provides you with access to IBM databases containing information on known program defects, defect corrections, restrictions, and bypasses at no additional charge. For further information, see the IBM Software Support Handbook.

IBM will maintain this information for at least one year after the original licensee acquires the program (warranty period).

Program technical support

Technical support of a program product version or release will be available for a minimum of five years from the general availability date, as long as your Software Subscription and Support (also referred to as Software Maintenance) is in effect.

This technical support allows you to obtain assistance (by telephone or electronic means) from IBM for product-specific, task-oriented questions regarding the installation and operation of the program product. Software Subscription and Support (Software Maintenance) also provides you with access to updates (modifications or fixes), releases, and versions of the program. You will be notified, through an announcement letter, of discontinuance of support with 12 months' notice. If you require additional technical support from IBM, including an extension of support beyond the discontinuance date, contact your IBM representative or IBM Business Partner. This extension may be available for a fee.

For additional information on the IBM Software Support Lifecycle Policy, see the IBM Software Support Lifecycle Policy website.

Program support

Subscription and Support includes telephone assistance, as well as access to updates, releases, and versions of the program as long as support is in effect. You will be notified of discontinuance of support with 12 months' notice.

Money-back guarantee

If for any reason you are dissatisfied with the program and you are the original licensee, you may obtain a refund of the amount you paid for it, if within 30 days of your invoice date you return the program and its PoE to the party from whom you obtained it. If you downloaded the program, you may contact the party from whom you acquired it for instructions on how to obtain the refund.

For clarification, note that (1) for programs acquired under the IBM International Passport Advantage offering, this term applies only to your first acquisition of the program and (2) for programs acquired under any of IBM's On/Off Capacity on Demand (On/Off CoD) software offerings, this term does not apply since these offerings apply to programs already acquired and in use by you.

Volume orders (IVO)

No

Passport Advantage applies

Yes, information is available on the Passport Advantage and Passport Advantage Express® website.

Usage restriction

Yes

For additional information, refer to the License Information document that is available on the IBM Software License Agreement website.

Software Subscription and Support applies

Yes. Software Subscription and Support, also referred to as Software Maintenance, is included with licenses purchased through Passport Advantage and Passport Advantage Express. Product upgrades and Technical Support are provided by the Software Subscription and Support offering as described in the Agreements. Product upgrades provide the latest versions and releases to entitled software, and Technical Support provides voice and electronic access to IBM support organizations, worldwide.

IBM includes one year of Software Subscription and Support with each program license acquired. The initial period of Software Subscription and Support can be extended by the purchase of a renewal option, if available.

While your Software Subscription and Support is in effect, IBM provides you assistance for your routine, short duration installation and usage (how-to) questions, and code-related questions. IBM provides assistance by telephone and, if available, electronic access, only to your information systems (IS) technical support personnel during the normal business hours (published prime shift hours) of your IBM support center. (This assistance is not available to your users.) IBM provides Severity 1 assistance 24 hours a day, 7 days a week. For additional details, see the IBM Software Support Handbook. Software Subscription and Support does not include assistance for the design and development of applications, your use of programs in other than their specified operating environment, or failures caused by products for which IBM is not responsible under the applicable agreements.

Unless specified otherwise in a written agreement with you, IBM does not provide support for third party products that were not provided by IBM. Ensure that when contacting IBM for covered support, you follow problem determination and other instructions that IBM provides, including in the IBM Software Support Handbook.

For additional information about the International Passport Advantage Agreement and the IBM International Passport Advantage Express Agreement, go to the Passport Advantage and Passport Advantage Express website.

IBM Operational Support Services - Support Line

No

Other support

Passport Advantage

System i Software Maintenance applies

No

Variable charges apply

No

Educational allowance available

Education allowance does not apply. Education software allowance does not apply. Special education prices are available for qualified customers through Passport Advantage.



Back to topBack to top

Top rule
Statement of good security practices
Bottom rule

IT system security involves protecting systems and information through prevention, detection, and response to improper access from within and outside your enterprise. Improper access can result in information being altered, destroyed, or misappropriated or can result in misuse of your systems to attack others. Without a comprehensive approach to security, no IT system or product should be considered completely secure and no single product or security measure can be completely effective in preventing improper access. IBM systems and products are designed to be part of a lawful, comprehensive security approach, which will necessarily involve additional operational procedures, and may require other systems, products, or services to be most effective.

Important: IBM does not warrant that any systems, products, or services are immune from, or will make your enterprise immune from, the malicious or illegal conduct of any party.



Back to topBack to top

Top rule
Prices
Bottom rule


Business Partner information

If you are an IBM Business Partner -- Distributor for Workstation Software acquiring products from IBM, you may link to Passport Advantage Online for resellers where you can obtain Business Partner pricing information. An IBMid and password are required to access the IBM Passport Advantage website.

For all local charges, contact your IBM representative.


Passport Advantage

For Passport Advantage information and charges, contact your IBM representative. Additional information is also available on the Passport Advantage and Passport Advantage Express website.

IBM Global Financing

IBM Global Financing offers competitive financing to credit-qualified customers to assist them in acquiring IT solutions. Offerings include financing for IT acquisition, including hardware, software, and services, from both IBM and other manufacturers or vendors. Offerings (for all customer segments: small, medium, and large enterprise), rates, terms, and availability can vary by country. Contact your local IBM Global Financing organization or go to the IBM Global Financing website for more information.

IBM Global Financing offerings are provided through IBM Credit LLC in the United States, and other IBM subsidiaries and divisions worldwide to qualified commercial and government customers. Rates are based on a customer's credit rating, financing terms, offering type, equipment type, and options, and may vary by country. Other restrictions may apply. Rates and offerings are subject to change, extension, or withdrawal without notice.

Financing from IBM Global Financing helps you preserve cash and credit lines, enables more technology acquisition within current budget limits, permits accelerated implementation of economically attractive new technologies, offers payment and term flexibility, and can help match project costs to projected benefits. Financing is available worldwide for credit-qualified customers.



Back to topBack to top

Top rule
Announcement countries
Bottom rule

All European, Middle Eastern, and African countries, except Islamic Republic of Iran, Sudan, and Syrian Arab Republic.

Trademarks

z Systems is a trademark of IBM Corporation in the United States, other countries, or both.

IBM, Passport Advantage, System i, Express, Global Technology Services, System z and PartnerWorld are registered trademarks of IBM Corporation in the United States, other countries, or both.

Other company, product, and service names may be trademarks or service marks of others.

Terms of use

IBM products and services which are announced and available in your country can be ordered under the applicable standard agreements, terms, conditions, and prices in effect at the time. IBM reserves the right to modify or withdraw this announcement at any time without notice. This announcement is provided for your information only. Reference to other products in this announcement does not necessarily imply those products are announced, or intend to be announced, in your country. Additional terms of use are located at:

Terms of use

For the most current information regarding IBM products, consult your IBM representative or reseller, or visit the IBM worldwide contacts page

IBM Directory of worldwide contacts