IBM Cloud Pak for Security 1.6 is an open multicloud platform that helps security teams unify workflows, gain security insights, and streamline security operations; select IBM Resilient Security Orchestration, Automation, and Response (SOAR) programs renamed for improved alignment with IBM Security offerings
IBM Europe Software Announcement ZP21-0062February 16, 2021
ENUSZP21-0062.PDF| Table of contents | ||||||||||||||||||||||||
| ||||||||||||||||||||||||
At a glance
IBM Cloud Pak® for Security 1.6 helps organizations unify workflows, search for threats, and detect, investigate, and respond faster to security incidents across hybrid multicloud environments. Enhancements include:
- Enhancements across visibility, detection, investigation, and response:
- Threat Investigator (Preview) for Cloud Pak for Security to enable automatic case investigation
- Extended reach and easier consumption of risk information
- Simplified playbook creation and editing (preview)
- Increased threat visibility through additional third-party threat feed support
IBM® Resilient® SOAR (5737-A52) is renamed to IBM Security™ SOAR. IBM Resilient SOAR Platform on Cloud (5737-C07) is renamed to IBM Security SOAR on Cloud.
Back to top
Overview
As organizations move their businesses to the cloud, security data is being spread across different tools, clouds, and on-premises IT environments. This creates process gaps that can cause threats to be missed and require complex and costly integrations to close the gaps
With Cloud Pak for Security 1.6:
- Security workers can benefit from the infusion of third-party threat intelligence feeds to enrich the process-wide threat management workflows
- Security leaders can visualize correlated security risks across their organization and increase the response efficiency of their team
- Incident responders can:
- Prepare and respond to privacy breaches quickly and efficiently, while at the same time allowing compliance officers to meet ever-changing regulatory requirements, with the addition of SOAR privacy capabilities
- Help compliance officers and their team to meet time-sensitive requirements in order to avoid expensive financial penalties with an up-to-date breach response plan that maps their data to complex global compliance notification requirements
- Utilize the visual process techniques of lean manufacturing to manage the security response by allowing their team to see the work in progress and perform state transitions of cases
- Level 3 threat analysts performing threat response can leverage Cloud Pak for Security SOAR native integrations to take action to respond to and contain threats
- Identify vulnerable pivot points used by attackers by tracking IOCs over time and classify attributes using improved artifact management capabilities
- Cloud Pak for Security administrators can:
- Detect, install, and set up a new partner-built connector on their Cloud Pak for Security instance and manage them through the user interface (UI)
- Provide accurate and relevant diagnostics to IBM Support with increased ease
- View and quickly assess the overall health of the platform
Back to top
Key requirements
- Workstation with a supported operating system
- Supported web browser
For more details, see the Technical information section.
Back to top
Planned availability date
February 18, 2021
See the Availability of national languages section for national language availability.
Back to top
Description
Cloud Pak for Security is a platform that helps you uncover hidden threats, make more informed risk-based decisions, and prioritize the organization’s teams. Key features and capabilities of Cloud Pak for Security 1.6:
- IBM Security Threat Intelligence Insights enhancements:
- Support is provided for additional third-party feeds for threat intelligence.
- Ongoing enhancements address underlying services that are related to Threat Intelligence Insights to iteratively improve the profiling and alignment of threat intelligence based on the configured account profile within Cloud Pak for Security.
- IBM Security Data Explorer enhancements:
- Performance enhancements provide the capability to load results faster, retrieve new results faster, and improve responsiveness when switching from narrative to table view.
- Easier adoption and onboarding enable users to optimize their setup experiences with Data Explorer.
- New IBM Security Threat Investigator app (Preview, not full production)
- Automatic case investigations increase SOC effectiveness by reducing manual effort during analysis, evidence acquisition and threat intelligence correlation.
- A timeline view of the attack sequences the threat to enable analysts to better comprehend the issue, simultaneously presenting them with a manageable number of items rather than a full list of events.
- MITRE ATT&CK chain classification provides a clear and concise asset-centric view of the threat to enable a rapid assessment of the impact to the enterprise.
- IBM Security Risk Manager enhancements:
- Transparency of the risk scoring functionality provides better comprehension and relevance in daily security operations.
- Support is provided for additional IBM and third-party feeds for risk information.
- IBM Security SOAR enhancements:
- Current SOAR apps can be upgraded without having to delete the old versions or install and reconfigure each new one.
- Simplified QRadar/SOAR Plugin UI that enables high-volume offense environments to create SOAR use cases.
- Ability to tag Artifacts allowing for easy association and quick retrieval of like indicators of compromise.
- Improved platform and core services:
- A new framework enables the discovery of new and updated connectors.
- New connectors can be deployed on Cloud Pak for Security and then configured through the UI.
- Cloud Pak for Security platform is authorized to operate in US Government Agencies through Federal Information Security Management Act (FISMA) readiness assessment.
For more information, see the Cloud Pak for Security website.
Accessibility by people with disabilities
A US Section 508 Voluntary Product Accessibility Template (VPAT) containing details on accessibility compliance can be found on the IBM Accessibility website.
Back to top
Reference information
For more information about Cloud Pak for Security, see:
- IBM Cloud Pak for Security 1.5 Software Announcement ZP20-0584, dated December 1, 2020
- IBM Cloud Pak for Security 1.4 Software Announcement ZP20-0435, dated September 22, 2020
- IBM Cloud Pak for Security 1.3 Software Announcement ZP20-0220, dated May 12, 2020
- IBM Cloud Pak for Security 1.2 Software Announcement ZP20-0068, dated February 24, 2020
- IBM Cloud Pak for Security 1.1 Software Announcement ZP19-0157, dated November 12, 2019
For more information about IBM Security SOAR, formerly known as IBM Resilient SOAR Platform (5737-A52), and IBM Security SOAR on Cloud, formerly known as IBM Resilient SOAR Platform on Cloud (5737-C07), see Software Announcement ZP19-0288, dated June 11, 2019, and Software Announcement ZP19-0134, dated April 16, 2019.
Back to top
Availability of national languages
| Description | Language |
|---|---|
| IBM Cloud Pak for Security | English |
| IBM Security SOAR Platform | Brazilian Portuguese, English, French, German, Italian, Japanese, Korean, Russian, Simplified Chinese, Spanish, and Traditional Chinese |
| IBM Security Data Explorer | English |
| IBM Security Threat Intelligence Insights | English |
| IBM QRadar | Brazilian Portuguese, English, French, German, Italian, Japanese, Korean, Simplified Chinese, Spanish, and Traditional Chinese |
Translation information, if available, can be found at the Translation Reports website.
Back to top
Program number
| Program number | VRM | Program name |
|---|---|---|
| 5737-L74 | 1.6.0 | IBM Cloud Pak for Security |
| 1.6.0 | IBM Security Data Explorer | |
| 1.6.0 | IBM Security Threat Intelligence Insights | |
| 5737-A52 | 31.0.0 | IBM Security SOAR |
| 5737-C07 | Cloud Service | IBM Security SOAR on Cloud |
| 5737-B52 | Not applicable | IBM QRadar Software |
| 5737-B54 | Not applicable | IBM QRadar Event Capacity |
| 5737-B54 | Not applicable | IBM QRadar Flows Capacity |
| 5737-D10 | Not applicable | IBM QRadar Software Node |
| 5737-B35 | Not applicable | IBM QRadar Network Insights Software |
| 5737-D34 | Not applicable | IBM QRadar Data Store |
| 5900-A3J | Cloud service | IBM Security Threat Intelligence Insights |
| 5900-A8T | Services | IBM Expert Labs for IBM Cloud Pak for Security |
Back to top
Education support
See the IBM Security Learning Academy website for training for Cloud Pak for Security, IBM Security SOAR, and QRadar.
Back to top
Offering Information
Product information is available on the IBM Offering Information website.
More information is also available on the Passport Advantage® and Passport Advantage Express® website.
Back to top
Publications
Documentation can be found in IBM Knowledge Center for the following offerings:
- Cloud Pak for Security
Information about Cloud Pak for Security 1.6.0 can be found in IBM Knowledge Center by selecting "IBM Cloud Pak for Security 1.6.0" beginning February 18, 2021.
- IBM Security SOAR
- QRadar
Back to top
Services
Global Technology Services
Contact your IBM representative for the list of selected services available in your country, either as standard or customized offerings for the efficient installation, implementation, or integration of this product.
Back to top
Technical information
Specified operating environment
Hardware requirements
Requires a workstation with a supported operating system.
Information about hardware requirements for Cloud Pak for Security 1.6.0 can be found in IBM Knowledge Center by selecting "IBM Cloud Pak for Security 1.6.0" beginning February 18, 2021.
Software requirements
Requires a supported workstation operating system web browser.
Information about software requirements for Cloud Pak for Security 1.6.0 can be found in IBM Knowledge Center by selecting "IBM Cloud Pak for Security 1.6.0" beginning February 18, 2021.
Such information is provided subject to the following terms. IT system security involves protecting systems and information through prevention, detection, and response to improper access from within and outside your enterprise. Improper access can result in information being altered, destroyed, misappropriated, or misused, or can result in damage to or misuse of your systems, including for use in attacks on others. No IT system or product should be considered completely secure and no single product, service, or security measure can be completely effective in preventing improper use or access. IBM systems, products, and services are designed to be part of a lawful, comprehensive security approach, which will necessarily involve additional operational procedures, and may require other systems, products, or services to be most effective.
Important: IBM does not warrant that any systems, products, or services are immune from, or will make your enterprise immune from, the malicious or illegal conduct of any party.
IBM Support
IBM Support is your gateway to technical support tools and resources that are designed to help you save time and simplify support. IBM Support can help you find answers to questions, download fixes, troubleshoot, submit and track problem cases, and build skills. Learn and stay informed about the transformation of IBM Support, including new tools, new processes, and new capabilities, by going to the IBM Support Insider.
Planning information
Packaging
This offering is delivered through the internet as an electronic download. There is no physical media.
Back to top
Ordering information
For ordering information, consult your IBM representative or IBM Business Partner, or go to the Passport Advantage website.
These programs are only available through Passport Advantage. They are not available as shrinkwrap.
These products may only be sold directly by IBM or by IBM Business Partners.
To locate IBM Business Partners in your geography, see the Find a Business Partner page.
IBM Cloud Pak for Security (5737-L74)
There is no new ordering information in this release. As a convenience, the following table lists currently available part numbers:
| Program name/Description | Part number |
|---|---|
| IBM Cloud Pak for Security (Gen 2) 100K Managed Virtual Server License + SW Subscription & Support 12 Months | D2842LL |
| IBM Cloud Pak for Security (Gen 2) 100K Managed Virtual Server SW Subscription and Support Renewal 12 Months | E0R0ILL |
| IBM Cloud Pak for Security (Gen 2) 100K Managed Virtual Server SW Subscription & Support Reinstatement 12 Months | D2843LL |
| IBM Cloud Pak for Security (Gen 2) 100K Managed Virtual Server Subscription License | D2844LL |
| IBM Cloud Pak for Security (Gen 2) 1M Managed Virtual Server License + SW Subscription & Support 12 Months | D284ELL |
| IBM Cloud Pak for Security (Gen 2) 1M Managed Virtual Server SW Subscription and Support Renewal 12 Months | E0R0KLL |
| IBM Cloud Pak for Security (Gen 2) 1M Managed Virtual Server SW Subscription & Support Reinstatement 12 Months | D284FLL |
| IBM Cloud Pak for Security (Gen 2) 1M Managed Virtual Server Subscription License | D284GLL |
| IBM Cloud Pak for Security (Gen 2) Disaster Recovery 100K Managed Virtual Server License + SW Subscription & Support 12 Months | D284RLL |
| IBM Cloud Pak for Security (Gen 2) Disaster Recovery 100K Managed Virtual Server SW Subscription and Support Renewal 12 Months | E0R0MLL |
| IBM Cloud Pak for Security (Gen 2) Disaster Recovery 100K Managed Virtual Server SW Subscription & Support Reinstatement 12 Months | D284SLL |
| IBM Cloud Pak for Security (Gen 2) Disaster Recovery 100K Managed Virtual Server Subscription License | D284TLL |
| IBM Cloud Pak for Security (Gen 2) Disaster Recovery 1M Managed Virtual Server License + SW Subscription & Support 12 Months | D2853LL |
| IBM Cloud Pak for Security (Gen 2) Disaster Recovery 1M Managed Virtual Server SW Subscription and Support Renewal 12 Months | E0R0PLL |
| IBM Cloud Pak for Security (Gen 2) Disaster Recovery 1M Managed Virtual Server SW Subscription & Support Reinstatement 12 Months | D2854LL |
| IBM Cloud Pak for Security (Gen 2) Disaster Recovery 1M Managed Virtual Server Subscription License | D2855LL |
For additional ordering information, see Software Announcement ZP20-0068, dated February 24, 2020.
IBM Security SOAR (5737-A52)
These previously announced part numbers descriptions have been updated:
| Part description | Part number |
|---|---|
| IBM Security SOAR per User Value Unit (Authorized User) License + SW Subscription & Support 12 Months | D22MVLL |
| IBM Security SOAR per User Value Unit (Authorized User) SW Subscription & Support Reinstatement 12 Months | D22MWLL |
| IBM Security SOAR per User Value Unit (Authorized User) from Resilient Incident Response Legacy Trade Up License + SW Subscription & Support 12 Months | D22MXLL |
| IBM Security SOAR per User Value Unit (Authorized User) Monthly License | D22PFLL |
| IBM Security SOAR per User Value Unit (Authorized User) Annual SW Subscription & Support Renewal | E0PZULL |
| IBM Security SOAR for IBM Z® per User Value Unit (Authorized User) License + SW Subscription & Support 12 Months | D22N3LL |
| IBM Security SOAR for IBM Z per User Value Unit (Authorized User) SW Subscription & Support Reinstatement 12 Months | D22N5LL |
| IBM Security SOAR for IBM Z per User Value Unit (Authorized User) Monthly License | D22QILL |
| IBM Security SOAR for IBM Z per User Value Unit (Authorized User) Annual SW Subscription & Support Renewal | E0PZZLL |
| IBM Security SOAR per User Value Unit (Concurrent User) License + SW Subscription & Support 12 Months | D22N8LL |
| IBM Security SOAR per User Value Unit (Concurrent User) SW Subscription & Support Reinstatement 12 Months | D22N9LL |
| IBM Security SOAR per User Value Unit (Concurrent User) Monthly License | D22QJLL |
| IBM Security SOAR per User Value Unit (Concurrent User) from SOAR (Authorized User) Trade Up License + SW Subscription & Support 12 Months | D22UDLL |
| IBM Security SOAR per User Value Unit (Concurrent User) Annual SW Subscription & Support Renewal | E0Q04LL |
| IBM Security SOAR for IBM Z per User Value Unit (Concurrent User) License + SW Subscription & Support 12 Months | D22NALL |
| IBM Security SOAR for IBM Z per User Value Unit (Concurrent User) SW Subscription & Support Reinstatement 12 Months | D22NBLL |
| IBM Security SOAR for IBM Z per User Value Unit (Concurrent User) Monthly License | D22QKLL |
| IBM Security SOAR for IBM Z per User Value Unit (Concurrent User) from SOAR for IBM Z (Authorized User) Trade Up License + SW Subscription & Support 12 Months | D22UELL |
| IBM Security SOAR for IBM Z per User Value Unit (Concurrent User) Annual SW Subscription & Support Renewal | E0Q05LL |
| IBM Security SOAR Breach Response Add-On per User Value Unit (Authorized User) License + SW Subscription & Support 12 Months | D22NCLL |
| IBM Security SOAR Breach Response Add-On per User Value Unit (Authorized User) SW Subscription & Support Reinstatement 12 Months | D22NDLL |
| IBM Security SOAR Breach Response Add-On per User Value Unit (Authorized User) from Resilient Incident Response Platform Migration Legacy Trade Up License + SW Subscription & Support 12 Months | D22NELL |
| IBM Security SOAR Breach Response Add-On per User Value Unit (Authorized User) Monthly License | D22QQLL |
| IBM Security SOAR Breach Response Add-On per User Value Unit (Authorized User) Annual SW Subscription & Support Renewal | E0Q06LL |
| IBM Security SOAR Breach Response Add-On for IBM Z per User Value Unit (Authorized User) License + SW Subscription & Support 12 Months | D22NFLL |
| IBM Security SOAR Breach Response Add-On for IBM Z per User Value Unit (Authorized User) SW Subscription & Support Reinstatement 12 Months | D22NGLL |
| IBM Security SOAR Breach Response Add-On for IBM Z per User Value Unit (Authorized User) Monthly License | D22QRLL |
| IBM Security SOAR Breach Response Add-On for IBM Z per User Value Unit (Authorized User) Annual SW Subscription & Support Renewal | E0Q07LL |
| IBM Security SOAR Breach Response Add-On per User Value Unit (Concurrent User) License + SW Subscription & Support 12 Months | D22P0LL |
| IBM Security SOAR Breach Response Add-On per User Value Unit (Concurrent User) SW Subscription & Support Reinstatement 12 Months | D22P1LL |
| IBM Security SOAR Breach Response Add-On per User Value Unit (Concurrent User) Monthly License | D22R2LL |
| IBM Security SOAR Breach Response Add-On per User Value Unit (Concurrent User) from SOAR Privacy (Authorized User) Trade Up License + SW Subscription & Support 12 Months | D22UFLL |
| IBM Security SOAR Breach Response Add-On per User Value Unit (Concurrent User) Annual SW Subscription & Support Renewal | E0Q0QLL |
| IBM Security SOAR Breach Response Add-On for IBM Z per User Value Unit (Concurrent User) License + SW Subscription & Support 12 Months | D22P2LL |
| IBM Security SOAR Breach Response Add-On for IBM Z per User Value Unit (Concurrent User) SW Subscription & Support Reinstatement 12 Months | D22P3LL |
| IBM Security SOAR Breach Response Add-On for IBM Z per User Value Unit (Concurrent User) Monthly License | D22R3LL |
| IBM Security SOAR Breach Response Add-On for IBM Z per User Value Unit (Concurrent User) from SOAR Privacy for IBM Z (Authorized User) Trade Up License + SW Subscription & Support 12 Months | D22UGLL |
| IBM Security SOAR Breach Response Add-On for IBM Z per User Value Unit (Concurrent User) Annual SW Subscription & Support Renewal | E0Q0RLL |
| IBM Security SOAR Team Management Add-On per User Value Unit (Authorized User) License + SW Subscription & Support 12 Months | D22P4LL |
| IBM Security SOAR Team Management Add-On per User Value Unit (Authorized User) SW Subscription & Support Reinstatement 12 Months | D22P5LL |
| IBM Security SOAR Team Management Add-On per User Value Unit (Authorized User) Monthly License | D22R4LL |
| IBM Security SOAR Team Management Add-On per User Value Unit (Authorized User) from Resilient Incident Response Platform Legacy Trade Up License + SW Subscription & Support 12 Months | D22UHLL |
| IBM Security SOAR Team Management Add-On per User Value Unit (Authorized User) Annual SW Subscription & Support Renewal | E0Q0SLL |
| IBM Security SOAR Team Management Add-On for IBM Z per User Value Unit (Authorized User) License + SW Subscription & Support 12 Months | D22P6LL |
| IBM Security SOAR Team Management Add-On for IBM Z per User Value Unit (Authorized User) SW Subscription & Support Reinstatement 12 Months | D22P7LL |
| IBM Security SOAR Team Management Add-On for IBM Z per User Value Unit (Authorized User) Monthly License | D22R5LL |
| IBM Security SOAR Team Management Add-On for IBM Z per User Value Unit (Authorized User) Annual SW Subscription & Support Renewal | E0Q0TLL |
| IBM Security SOAR Team Management Add-On per User Value Unit (Concurrent User) License + SW Subscription & Support 12 Months | D22P8LL |
| IBM Security SOAR Team Management Add-On per User Value Unit (Concurrent User) SW Subscription & Support Reinstatement 12 Months | D22P9LL |
| IBM Security SOAR Team Management Add-On per User Value Unit (Concurrent User) Monthly License | D22R6LL |
| IBM Security SOAR Team Management Add-On per User Value Unit (Concurrent User) from SOAR Team Management (Authorized User) Trade Up License + SW Subscription & Support 12 Months | D22UILL |
| IBM Security SOAR Team Management Add-On per User Value Unit (Concurrent User) Annual SW Subscription & Support Renewal | E0Q0ULL |
| IBM Security SOAR Team Management Add-On for IBM Z per User Value Unit (Concurrent User) License + SW Subscription & Support 12 Months | D22PALL |
| IBM Security SOAR Team Management Add-On for IBM Z per User Value Unit (Concurrent User) SW Subscription & Support Reinstatement 12 Months | D22PBLL |
| IBM Security SOAR Team Management Add-On for IBM Z per User Value Unit (Concurrent User) Monthly License | D22R7LL |
| IBM Security SOAR Team Mgmt Add-On for IBM Z per User Value Unit (Concurrent User) from SOAR Team Mgmt for IBM Z (Authorized User) Trade Up License + SW Subscript & Support 12 Mo | D22UJLL |
| IBM Security SOAR Team Management Add-On for IBM Z per User Value Unit (Concurrent User) Annual SW Subscription & Support Renewal | E0Q0VLL |
| IBM Security SOAR Non-Production Add-On per User Value Unit (Authorized User) License + SW Subscription & Support 12 Months | D22PCLL |
| IBM Security SOAR Non-Production Add-On per User Value Unit (Authorized User) SW Subscription & Support Reinstatement 12 Months | D22PDLL |
| IBM Security SOAR Non-Production Add-On per User Value Unit (Authorized User) from Resilient Incident Response Platform Legacy Trade Up License + SW Subscription & Support 12 Months | D22PELL |
| IBM Security SOAR Non-Production Add-On per User Value Unit (Authorized User) Monthly License | D22R8LL |
| IBM Security SOAR Non-Production Add-On per User Value Unit (Authorized User) Annual SW Subscription & Support Renewal | E0Q0WLL |
| IBM Security SOAR Non-Production Add-On for IBM Z per User Value Unit (Authorized User) License + SW Subscription & Support 12 Months | D22PRLL |
| IBM Security SOAR Non-Production Add-On for IBM Z per User Value Unit (Authorized User) SW Subscription & Support Reinstatement 12 Months | D22PSLL |
| IBM Security SOAR Non-Production Add-On for IBM Z per User Value Unit (Authorized User) Monthly License | D22RALL |
| IBM Security SOAR Non-Production Add-On for IBM Z per User Value Unit (Authorized User) Annual SW Subscription & Support Renewal | E0Q14LL |
| IBM Security SOAR Non-Production Add-On per User Value Unit (Concurrent User) License + SW Subscription & Support 12 Months | D22PTLL |
| IBM Security SOAR Non-Production Add-On per User Value Unit (Concurrent User) SW Subscription & Support Reinstatement 12 Months | D22PULL |
| IBM Security SOAR Non-Production Add-On per User Value Unit (Concurrent User) Monthly License | D22R9LL |
| IBM Security SOAR Non-Production Add-On per User Value Unit (Concurrent User) from SOAR Non-Production (Authorized User) Trade Up License + SW Subscription & Support 12 Months | D22UKLL |
| IBM Security SOAR Non-Production Add-On per User Value Unit (Concurrent User) Annual SW Subscription & Support Renewal | E0Q15LL |
| IBM Security SOAR Non-Production Add-On for IBM Z per User Value Unit (Concurrent User) License + SW Subscription & Support 12 Months | D22PVLL |
| IBM Security SOAR Non-Production Add-On for IBM Z per User Value Unit (Concurrent User) SW Subscription & Support Reinstatement 12 Months | D22PWLL |
| IBM Security SOAR Non-Production Add-On for IBM Z per User Value Unit (Concurrent User) Monthly License | D22RCLL |
| IBM Security SOAR Non-Production Add-On for IBM Z per User Value Unit (Concurrent User) from SOAR Non-Production for IBM Z (Authorized User) Trade Up License + SW S&S 12 Mo | D22ULLL |
| IBM Security SOAR Non-Production Add-On for IBM Z per User Value Unit (Concurrent User) Annual SW Subscription & Support Renewal | E0Q16LL |
| IBM Security SOAR Disaster Recovery Add-On per User Value Unit (Authorized User) License + SW Subscription & Support 12 Months | D22PXLL |
| IBM Security SOAR Disaster Recovery Add-On per User Value Unit (Authorized User) SW Subscription & Support Reinstatement 12 Months | D22PYLL |
| IBM Security SOAR Disaster Recovery Add-On per User Value Unit (Authorized User) Monthly License | D22RDLL |
| IBM Security SOAR Disaster Recovery Add-On per User Value Unit (Authorized User) from Resilient Incident Response Platform Legacy Trade Up License + SW Subscription & Support 12 Months | D22UMLL |
| IBM Security SOAR Disaster Recovery Add-On per User Value Unit (Authorized User) Annual SW Subscription & Support Renewal | E0Q17LL |
| IBM Security SOAR Disaster Recovery Add-On for IBM Z per User Value Unit (Authorized User) License + SW Subscription & Support 12 Months | D22PZLL |
| IBM Security SOAR Disaster Recovery Add-On for IBM Z per User Value Unit (Authorized User) SW Subscription & Support Reinstatement 12 Months | D22Q0LL |
| IBM Security SOAR Disaster Recovery Add-On for IBM Z per User Value Unit (Authorized User) Monthly License | D22RELL |
| IBM Security SOAR Disaster Recovery Add-On for IBM Z per User Value Unit (Authorized User) Annual SW Subscription & Support Renewal | E0Q18LL |
| IBM Security SOAR Disaster Recovery Add-On per User Value Unit (Concurrent User) License + SW Subscription & Support 12 Months | D22Q1LL |
| IBM Security SOAR Disaster Recovery Add-On per User Value Unit (Concurrent User) SW Subscription & Support Reinstatement 12 Months | D22Q2LL |
| IBM Security SOAR Disaster Recovery Add-On per User Value Unit (Concurrent User) Monthly License | D22RFLL |
| IBM Security SOAR Disaster Recovery Add - On per User Value Unit (Concurrent User) from SOAR Disaster Recovery (Authorized User) Trade Up License + SW Subscription & Support 12 Months | D22UNLL |
| IBM Security SOAR Disaster Recovery Add-On per User Value Unit (Concurrent User) Annual SW Subscription & Support Renewal | E0Q19LL |
| IBM Security SOAR Disaster Recovery Add-On for IBM Z per User Value Unit (Concurrent User) License + SW Subscription & Support 12 Months | D22Q3LL |
| IBM Security SOAR Disaster Recovery Add-On for IBM Z per User Value Unit (Concurrent User) SW Subscription & Support Reinstatement 12 Months | D22Q4LL |
| IBM Security SOAR Disaster Recovery Add-On for IBM Z per User Value Unit (Concurrent User) Monthly License | D22RHLL |
| IBM Security SOAR Disaster Recovery Add-On for IBM Z per User Value Unit (Concurrent User) from SOAR Disaster Recovery for IBM Z (Auth User) Trade Up License + SW S&S 12 Mo | D22UPLL |
| IBM Security SOAR Disaster Recovery Add-On for IBM Z per User Value Unit (Concurrent User) Annual SW Subscription & Support Renewal | E0Q1ALL |
| IBM Security SOAR MSSP Add-On per User Value Unit (Authorized User) License + SW Subscription & Support 12 Months | D22Q5LL |
| IBM Security SOAR MSSP Add-On per User Value Unit (Authorized User) SW Subscription & Support Reinstatement 12 Months | D22Q6LL |
| IBM Security SOAR MSSP Add-On per User Value Unit (Authorized User) Monthly License | D22RILL |
| IBM Security SOAR MSSP Add-On per User Value Unit (Authorized User) from Resilient Incident Response Platform Legacy Trade Up License + SW Subscription & Support 12 Months | D22UQLL |
| IBM Security SOAR MSSP Add-On per User Value Unit (Authorized User) Annual SW Subscription & Support Renewal | E0Q1BLL |
| IBM Security SOAR MSSP Add-On for IBM Z per User Value Unit (Authorized User) License + SW Subscription & Support 12 Months | D22Q7LL |
| IBM Security SOAR MSSP Add-On for IBM Z per User Value Unit (Authorized User) SW Subscription & Support Reinstatement 12 Months | D22Q8LL |
| IBM Security SOAR MSSP Add-On for IBM Z per User Value Unit (Authorized User) Monthly License | D22RJLL |
| IBM Security SOAR MSSP Add-On for IBM Z per User Value Unit (Authorized User) Annual SW Subscription & Support Renewal | E0Q1CLL |
| IBM Security SOAR MSSP Add-On per User Value Unit (Concurrent User) License + SW Subscription & Support 12 Months | D22Q9LL |
| IBM Security SOAR MSSP Add-On per User Value Unit (Concurrent User) SW Subscription & Support Reinstatement 12 Months | D22QALL |
| IBM Security SOAR MSSP Add-On per User Value Unit (Concurrent User) Monthly License | D22RKLL |
| IBM Security SOAR MSSP Add-On per User Value Unit (Concurrent User) from SOAR MSSP (Authorized User) Trade Up License + SW Subscription & Support 12 Months | D22URLL |
| IBM Security SOAR MSSP Add-On per User Value Unit (Concurrent User) Annual SW Subscription & Support Renewal | E0Q1DLL |
| IBM Security SOAR MSSP Add-On for IBM Z per User Value Unit (Concurrent User) License + SW Subscription & Support 12 Months | D22QBLL |
| IBM Security SOAR MSSP Add-On for IBM Z per User Value Unit (Concurrent User) SW Subscription & Support Reinstatement 12 Months | D22QCLL |
| IBM Security SOAR MSSP Add-On for IBM Z per User Value Unit (Concurrent User) Monthly License | D22RLLL |
| IBM Security SOAR MSSP Add-On for IBM Z per User Value Unit (Concurrent User) from SOAR MSSP for IBM Z (Authorized User) Trade Up License + SW Subscription & Support 12 Months | D22USLL |
| IBM Security SOAR MSSP Add-On for IBM Z per User Value Unit (Concurrent User) Annual SW Subscription & Support Renewal | E0Q1ELL |
| IBM Security SOAR Thousand Monthly Actions per Resource Value Unit License + SW Subscription & Support 12 Months | D22QDLL |
| IBM Security SOAR Thousand Monthly Actions per Resource Value Unit SW Subscription & Support Reinstatement 12 Months | D22QELL |
| IBM Security SOAR Thousand Monthly Actions per Resource Value Unit from Resilient Incident Response Platform Legacy Trade Up License + SW Subscription & Support 12 Months | D22QFLL |
| IBM Security SOAR Thousand Monthly Actions per Resource Value Unit Monthly License | D22RGLL |
| IBM Security SOAR Thousand Monthly Actions per Resource Value Unit Annual SW Subscription & Support Renewal | E0Q1FLL |
| IBM Security SOAR Thousand Monthly Actions for IBM Z per Resource Value Unit License + SW Subscription & Support 12 Months | D22QGLL |
| IBM Security SOAR Thousand Monthly Actions for IBM Z per Resource Value Unit SW Subscription & Support Reinstatement 12 Months | D22QHLL |
| IBM Security SOAR Thousand Monthly Actions for IBM Z per Resource Value Unit Monthly License | D22RBLL |
| IBM Security SOAR Thousand Monthly Actions for IBM Z per Resource Value Unit Annual SW Subscription & Support Renewal | E0Q1GLL |
| IBM Security SOAR Actions Enterprise Install License + SW Subscription & Support 12 Months | D268DLL |
| IBM Security SOAR Actions Enterprise Install SW Subscription & Support Reinstatement 12 Months | D268ELL |
| IBM Security SOAR Actions Enterprise Install Monthly License | D268LLL |
| IBM Security SOAR Actions Enterprise Install Annual SW Subscription & Support Renewal | E0QJ2LL |
| IBM Security SOAR Actions Enterprise for IBM Z Install License + SW Subscription & Support 12 Months | D268HLL |
| IBM Security SOAR Actions Enterprise for IBM Z Install SW Subscription & Support Reinstatement 12 Months | D268ILL |
| IBM Security SOAR Actions Enterprise for IBM Z Install Monthly License | D268MLL |
| IBM Security SOAR Actions Enterprise for IBM Z Install Annual SW Subscription & Support Renewal | E0QJ3LL |
IBM Security SOAR on Cloud (5737-C07)
These previously announced part numbers descriptions have been updated:
| Part description | Part number |
|---|---|
| IBM Security SOAR on Cloud (AU) Authorized User per Month | D22U1LL |
| IBM Security SOAR on Cloud (AU) Authorized User Overage | D22U2LL |
| IBM Security SOAR on Cloud (CU) Concurrent User per Month | D22U3LL |
| IBM Security SOAR on Cloud (CU) Concurrent User Overage | D22U4LL |
| IBM Security SOAR Breach Response on Cloud Add-On (AU) Authorized User per Month | D22U5LL |
| IBM Security SOAR Breach Response on Cloud Add-On (AU) Authorized User Overage | D22U6LL |
| IBM Security SOAR Breach Response on Cloud Add-On (CU) Concurrent User per Month | D22U7LL |
| IBM Security SOAR Breach Response on Cloud Add-On (CU) Concurrent User Overage | D22U8LL |
| IBM Security SOAR Team Management on Cloud Add-On (AU) Authorized User per Month | D22U9LL |
| IBM Security SOAR Team Management on Cloud Add-On (AU) Authorized User Overage | D22UALL |
| IBM Security SOAR Team Management on Cloud Add-On (CU) Concurrent User per Month | D22UBLL |
| IBM Security SOAR Team Management on Cloud Add-On (CU) Concurrent User Overage | D22UCLL |
| IBM Security SOAR Non-Production on Cloud Add-On (AU) Authorized User per Month | D22UWLL |
| IBM Security SOAR Non-Production on Cloud Add-On (AU) Authorized User Overage | D22V1LL |
| IBM Security SOAR Non-Production on Cloud Add-On (CU) Concurrent User per Month | D22UXLL |
| IBM Security SOAR Non-Production on Cloud Add-On (CU) Concurrent User Overage | D22V2LL |
| IBM Security SOAR MSSP on Cloud Add-On (AU) Authorized User per Month | D22UYLL |
| IBM Security SOAR MSSP on Cloud Add-On (AU) Authorized User Overage | D22V3LL |
| IBM Security SOAR MSSP on Cloud Add-On (CU) Concurrent User per Month | D22UZLL |
| IBM Security SOAR MSSP on Cloud Add-On (CU) Concurrent User Overage | D22V4LL |
| IBM Security SOAR Actions on Cloud per Thousand Items per Month | D22V0LL |
| IBM Security SOAR Actions on Cloud per Thousand Items Overage | D22V5LL |
Cross-platform product for use with IBM Z data
There is no new ordering information in this release. As a convenience, the following table lists all currently available part numbers.
Order the part numbers that follow when the product is used for transferring data between an IBM Z server and a distributed server.
IBM Cloud Pak for Security (5737-L74)
| Program name/Description | Part number |
|---|---|
| IBM Cloud Pak for Security (Gen 2) 100K Managed Virtual Server for IBM Z License + SW Subscription & Support 12 Months | D2848LL |
| IBM Cloud Pak for Security (Gen 2) 100K Managed Virtual Server for IBM Z SW Subscription and Support Renewal 12 Months | E0R0JLL |
| IBM Cloud Pak for Security (Gen 2) 100K Managed Virtual Server for IBM Z SW Subscription & Support Reinstatement 12 Months | D2849LL |
| IBM Cloud Pak for Security (Gen 2) 100K Managed Virtual Server for IBM Z Subscription License | D284ALL |
| IBM Cloud Pak for Security (Gen 2) 1M Managed Virtual Server for IBM Z License + SW Subscription & Support 12 Months | D284KLL |
| IBM Cloud Pak for Security (Gen 2) 1M Managed Virtual Server for IBM Z SW Subscription and Support Renewal 12 Months | E0R0LLL |
| IBM Cloud Pak for Security (Gen 2) 1M Managed Virtual Server for IBM Z SW Subscription & Support Reinstatement 12 Months | D284LLL |
| IBM Cloud Pak for Security (Gen 2) 1M Managed Virtual Server for IBM Z Subscription License | D284MLL |
| IBM Cloud Pak for Security (Gen 2) Disaster Recovery 100K Managed Virtual Server for IBM Z License + SW Subscription & Support 12 Months | D284XLL |
| IBM Cloud Pak for Security (Gen 2) Disaster Recovery 100K Managed Virtual Server for IBM Z SW Subscription and Support Renewal 12 Months | E0R0NLL |
| IBM Cloud Pak for Security (Gen 2) Disaster Recovery 100K Managed Virtual Server for IBM Z SW Subscription & Support Reinstatement 12 Months | D284YLL |
| IBM Cloud Pak for Security (Gen 2) Disaster Recovery 100K Managed Virtual Server for IBM Z Subscription License | D284ZLL |
| IBM Cloud Pak for Security (Gen 2) Disaster Recovery 100K Managed Virtual Server for IBM Z Monthly License | D2850LL |
| IBM Cloud Pak for Security (Gen 2) Disaster Recovery 1M Managed Virtual Server for IBM Z License + SW Subscription & Support 12 Months | D2859LL |
| IBM Cloud Pak for Security (Gen 2) Disaster Recovery 1M Managed Virtual Server for IBM Z SW Subscription and Support Renewal 12 Months | E0R0QLL |
| IBM Cloud Pak for Security (Gen 2) Disaster Recovery 1M Managed Virtual Server for IBM Z SW Subscription & Support Reinstatement 12 Months | D285ALL |
| IBM Cloud Pak for Security (Gen 2) Disaster Recovery 1M Managed Virtual Server for IBM Z Subscription License | D285BLL |
For additional ordering information, see Software Announcement ZP20-0068, dated February 24, 2020.
Charge metric
Charge metric for licensed products
The charge metrics for these licensed products can be found in the following License Information documents:
| Program identifier | License Information document title | License Information document number |
|---|---|---|
| 5737-L74 | IBM Cloud Pak for Security 1.6.0 | L-GBLK-BX2FGU |
| 5737-L74 | IBM Cloud Pak for Security Disaster Recovery 1.6.0 | L-GBLK-BX2FHV |
Select your language of choice and scroll down to the Charge Metrics section. Follow-on releases, if any, may have updated terms. See the License Information documents website for more information.
Charge metric for cloud services
The charge metrics for these cloud service can be found in the following Service Description documents:
| Program identifier | Service Description document title | Service Description document number |
|---|---|---|
| 5900-A3J | IBM Security Threat Intelligence Insights for IBM Cloud Pak for Security | 7393-06 |
| 5900-A8T | IBM Expert Labs for IBM Cloud Pak for Security | 8730-01 |
Select your language of choice and scroll down to the Charge Metrics section. Follow-on releases, if any, may have updated terms. See the Cloud Services terms website and search using the four-digit base Service Description number.
Back to top
Terms and conditions
Terms and conditions for the licensed product
The information provided in this announcement letter is for reference and convenience purposes only. The terms and conditions that govern any transaction with IBM are contained in the applicable contract documents such as the IBM International Program License Agreement, IBM International Passport Advantage Agreement, and the IBM Agreement for Acquisition of Software Maintenance.
This product is only available through Passport Advantage.
Licensing
IBM International Program License Agreement including the License Information document and Proof of Entitlement (PoE) govern your use of the program. PoEs are required for all authorized use. Part number products only, offered outside of Passport Advantage, where applicable, are license only and do not include Software Maintenance.
This software license includes Software Subscription and Support (also referred to as Software Maintenance).
Software Maintenance
These programs are licensed under the IBM Program License Agreement (IPLA) and the associated Agreement for Acquisition of Software Maintenance, which provide for support with ongoing access to releases and versions of the program. IBM includes one year of Software Subscription and Support (also referred to as Software Maintenance) with the initial license acquisition of each program acquired. The initial period of Software Subscription and Support (also referred to as Software Maintenance) can be extended by the purchase of a renewal option, if available. These programs have a one-time license charge for use of the program and an annual renewable charge for the enhanced support that includes telephone assistance (voice support for defects during normal business hours), as well as access to updates, releases, and versions of the program as long as support is in effect.
License Information number
The following License Information documents apply to the offerings in this announcement:
| Program identifier | License Information document title | License Information document number |
|---|---|---|
| 5737-L74 | IBM Cloud Pak for Security 1.6.0 | L-GBLK-BX2FGU |
| 5737-L74 | IBM Cloud Pak for Security Disaster Recovery 1.6.0 | L-GBLK-BX2FHV |
Follow-on releases, if any, may have updated terms. See the License Information documents website for more information.
Limited warranty applies
Yes
Limited warranty
IBM warrants that when the program is used in the specified operating environment, it will conform to its specifications. The warranty applies only to the unmodified portion of the program. IBM does not warrant uninterrupted or error-free operation of the program or that IBM will correct all program defects. You are responsible for the results obtained from the use of the program.
IBM provides you with access to IBM databases containing information about known program defects, defect corrections, restrictions, and bypasses at no additional charge. For further information, see the IBM Support Guide.
IBM will maintain this information for at least one year after the original licensee acquires the program (warranty period).
Program technical support
Technical support of a program version or release of a specific program within this offering will be available as long as:
- The program is still supported
- Your Software Subscription and Support for this offering is in effect
Program technical support terms
- Technical support of a program product version or release is available for a minimum of one year from the general availability date, as long as your Software Subscription and Support (also referred to as Software Maintenance) is in effect. This enables you to obtain assistance (by telephone or electronic means) from IBM for product-specific, task-oriented questions regarding the installation and operation of the program.
- Software Subscription and Support (Software Maintenance) also provides you with access to versions, releases, and updates of the program.
- You will be notified, through an announcement letter, of discontinuance of support with six months' notice.
For additional information about this support lifecycle, see the IBM Cloud Pak for Security Support Lifecycle Policy website.
Money-back guarantee
If for any reason you are dissatisfied with the program and you are the original licensee, you may obtain a refund of the amount you paid for it, if within 30 days of your invoice date you return the program and its PoE to the party from whom you obtained it. If you downloaded the program, you may contact the party from whom you acquired it for instructions on how to obtain the refund.
For clarification, note that (1) for programs acquired under the IBM International Passport Advantage offering, this term applies only to your first acquisition of the program and (2) for programs acquired under any of IBM's On/Off Capacity on Demand (On/Off CoD) software offerings, this term does not apply since these offerings apply to programs already acquired and in use by you.
Volume orders (IVO)
No
Passport Advantage applies
Yes, information is available on the Passport Advantage and Passport Advantage Express website.
Software Subscription and Support applies
Yes. Software Subscription and Support, also referred to as Software Maintenance, is included with licenses purchased through Passport Advantage and Passport Advantage Express. Product upgrades and Technical Support are provided by the Software Subscription and Support offering as described in the Agreements. Product upgrades provide the latest versions and releases to entitled software, and Technical Support provides voice and electronic access to IBM support organizations, worldwide.
IBM includes one year of Software Subscription and Support with each program license acquired. The initial period of Software Subscription and Support can be extended by the purchase of a renewal option, if available.
While your Software Subscription and Support is in effect, IBM provides you assistance for your routine, short duration installation and usage (how-to) questions, and code-related questions. IBM provides assistance by telephone and, if available, electronic access, only to your information systems (IS) technical support personnel during the normal business hours (published prime shift hours) of your IBM support center. (This assistance is not available to your users.) IBM provides Severity 1 assistance 24 hours a day, 7 days a week. For additional details, see the IBM Support Guide. Software Subscription and Support does not include assistance for the design and development of applications, your use of programs in other than their specified operating environment, or failures caused by products for which IBM is not responsible under the applicable agreements.
Unless specified otherwise in a written agreement with you, IBM does not provide support for third-party products that were not provided by IBM. Ensure that when contacting IBM for covered support, you follow problem determination and other instructions that IBM provides, including in the IBM Support Guide.
For additional information about the International Passport Advantage Agreement and the IBM International Passport Advantage Express Agreement, go to the Passport Advantage and Passport Advantage Express website.
Other support
Passport Advantage
Variable charges apply
No
Educational allowance available
Education allowance does not apply. Education software allowance does not apply. Special education prices are available for qualified clients through Passport Advantage.
Terms and conditions for the cloud service
The information provided in this announcement letter is for reference and convenience purposes only. The terms and conditions that govern any transaction for the acquisition of cloud services from IBM consist of either the IBM Cloud® Services Agreement and the applicable offering Service Description or the IBM International Passport Advantage Agreement or the International Passport Advantage Express Agreement and the IBM Terms of Use - General Terms for Cloud Offerings and the applicable offering Service Description.
Technical support
Technical support is provided for cloud services and enabling software, as applicable, during the subscription period. Any enhancements, updates, and other materials provided by IBM as part of any such technical support are considered to be part of the cloud service, as applicable, and therefore governed by the applicable agreement as defined in client's quote or transaction document. Technical support is included with the cloud service and is not available as a separate offering.
Additional technical support information for this cloud service offering may be found in the IBM Support Guide or in service-specific documentation.
Service Description
The following Service Description documents apply to this offering in this announcement:
| Program identifier | Service Description document title | Service Description document number |
|---|---|---|
| 5900-A3J | IBM Security Threat Intelligence Insights for IBM Cloud Pak for Security | 7393-06 |
| 5900-A8T | IBM Expert Labs for IBM Cloud Pak for Security | 8730-01 |
Follow-on levels of these cloud services, if any, may have updated terms. See the Cloud Services terms website and search using the four-digit base Service Description numbers.
Limited warranty
See the warranty defined in the applicable agreement governing client's acquisition for this offering.
Money-back guarantee
No
Volume orders (IVO)
No
Passport Advantage applies
Yes, information is available on the Passport Advantage and Passport Advantage Express website.
Usage restrictions
Yes
For any usage restrictions, see the Service Description documents listed in this Terms and conditions section.
Other support
Passport Advantage
Educational allowance available
No
Back to top
Statement of good security practices
IT system security involves protecting systems and information through intrusion prevention, detection, and response to improper access from within and outside your enterprise. Improper access can result in information being altered, destroyed, or misappropriated or can result in misuse of your systems to attack others. Without a comprehensive approach to security, no IT system or product should be considered completely secure and no single product or security measure can be completely effective in preventing improper access. IBM systems and products are designed to be part of a regulatory compliant, comprehensive security approach, which will necessarily involve additional operational procedures, and may require other systems, products, or services to be most effective.
Important: IBM does not warrant that any systems, products, or services are immune from, or will make your enterprise immune from, the malicious or illegal conduct of any party.
Back to top
Prices
For all local charges, contact your local IBM representative or IBM Business Partner.
If you are an IBM Business Partner acquiring products from IBM, you may link to Passport Advantage Online for resellers where you can obtain Business Partner pricing information. An IBMid and password are required to access the IBM Passport Advantage or IBM PartnerWorld® website.
For Passport Advantage information and charges, contact your IBM representative or IBM Business Partner. Additional information is also available on the Passport Advantage and Passport Advantage Express website.
IBM Global Financing
IBM Global Financing offers competitive financing to credit-qualified clients to assist them in acquiring IT solutions. Offerings include financing for IT acquisition, including hardware, software, and services, from both IBM and other manufacturers or vendors. Offerings (for all client segments: small, medium, and large enterprise), rates, terms, and availability can vary by country. Contact your local IBM Global Financing organization or go to the IBM Global Financing website for more information.
IBM Global Financing offerings are provided through IBM Credit LLC in the United States, and other IBM subsidiaries and divisions worldwide to qualified commercial and government clients. Rates are based on a client's credit rating, financing terms, offering type, equipment type, and options, and may vary by country. Other restrictions may apply. Rates and offerings are subject to change, extension, or withdrawal without notice.
Back to top
Announcement countries
All European, Middle Eastern, and African countries, except Islamic Republic of Iran, Sudan, and Syrian Arab Republic.
Trademarks
IBM Security is a trademark of IBM Corporation in the United States, other countries, or both.
IBM Cloud Pak, IBM, Resilient, Global Technology Services, PartnerWorld, Passport Advantage, Express, IBM Z and IBM Cloud are registered trademarks of IBM Corporation in the United States, other countries, or both.
Other company, product, and service names may be trademarks or service marks of others.
Terms of use
IBM products and services which are announced and available in your country can be ordered under the applicable standard agreements, terms, conditions, and prices in effect at the time. IBM reserves the right to modify or withdraw this announcement at any time without notice. This announcement is provided for your information only. Reference to other products in this announcement does not necessarily imply those products are announced, or intend to be announced, in your country. Additional terms of use are located at
For the most current information regarding IBM products, consult your IBM representative or reseller, or go to the IBM worldwide contacts page