IBM Cloud Pak for Security 1.7.2 platform adds IBM Security Risk Manager, enabling data security teams to take prioritized remedial actions for identified risk areas; features enhanced threat management capabilities for finding and documenting anomalous behaviors
IBM Europe Software Announcement ZP21-0215July 27, 2021
ENUSZP21-0215.PDF| Table of contents | ||||||||||||||||||||||||
| ||||||||||||||||||||||||
At a glance
IBM Cloud Pak® for Security 1.7.2 focuses on the following enhancements and innovations:
- IBM Security™ Risk Manager, which includes:
- Prioritized recommendations to reduce score
- Capability to view the ranking of assets for each recommendation
- Capability to integrate with existing workflow management tools (for example, Cases)
- Threat management, which includes:
- Immersive threat hunting experience through Threat Hunting Language (Beta)
- Enhancements to Data Explorer:
- Support Beta of Threat Hunting Language (Beta)
- Enable threat hunters to manipulate data sets, create advanced queries, and document steps of the hunt so they can find and document their environment from unknown threats (Beta)
- Automatically process and respond to security use cases generated from email
- Many new and updated Apps on the AppExchange for SOAR, include:
- ZScaler internet access
- Remedy
- AWS EC2
Back to top
Overview
As organizations move their businesses to the cloud, security data is being spread across different tools, clouds, and on-premises IT environments. This creates process gaps that can cause threats to be missed and require complex and costly integrations to close the gaps. IBM Cloud Pak for Security is an integrated security platform that enables your organization to gain insights into threats and risks and respond faster with automation.
With IBM® Guardium® Insights as part of IBM Cloud Pak for Security platform, your organization can centralize data security monitoring and visibility in a fragmented hybrid cloud, identifying and scoring risks to better prioritize threats and share actionable insights across your data security teams.
New in Cloud Pak for Security 1.7.2
Risk Manager
Risk Manager provides early visibility into potential security risks by correlating insights from multiple vectors so that you can prioritize risks to take appropriate remedial actions. Security analysts can quickly take prioritized remedial actions for identified risk areas and improve overall response efficiency. Risk Manager’s ranking of assets for remediation helps save time by integrating with existing remediation management workflows (for example, Cases).
Cloud Pak for Security 1.7.2 enhancements:
- Security analysts can:
- Share with members of their team a custom Cloud Pak for Security dashboard that they can create by modifying the dashboard's access permissions
- Successfully create, implement, and view a threat hunt within Data Explorer
- Quickly determine the what, where, how, and potential impact status of enterprise data security
- Security engineers can:
- Configure multiple email sources and automatically generate playbooks for them
Back to top
Key requirements
- Workstation with a supported operating system
- Supported web browser
For more details, see the Technical information section.
Back to top
Planned availability date
July 29, 2021
See the Availability of national languages section for national language availability.
Back to top
Description
The IBM Cloud Pak for Security platform enables organizations to detect and respond to threats with a simple, unified experience through visibility, detection, investigation, and response.
- Visibility. Unify visibility across the enterprise, security tools, and threat
intelligence.
- Dashboard enhancements to enable sharing custom dashboards
- Risk Manager:
- Prioritized recommendations in accordance to the risk score
- For each recommendation, view ranking of assets
- Capability to integrate with existing workflow management tools (for example, Cases)
- Detection. Unify threats and reduce false positives.
- Third-party threat feeds:
- Support for Recorded Future threat intelligence
- Third-party threat feeds:
- Investigation. Implement automated AI investigations, run federated searches, and collaborate with integrated case management.
- Threat Hunting Language (Beta) capability
- Threat hunting interface that is accessible from the Data Explorer home page
- Data Explorer tracking capability that enables threat hunts and their queries to be saved for future reference or shared threat hunts
- Capability to automatically create accurate attack timeline and MITRE ATT&CK flow views of an ongoing investigation with Threat Investigator (Beta)
- Response. Respond faster with automation playbooks and Red Hat® Ansible® integration.
- Automatically ingest emails and generate cases to respond to security events such as phishing
- Artifacts data management features for purging outdated user and account data from SOAR
- Capability to handle user and customer offboarding by purging deleted user and account data from SOAR
For more information, see the Cloud Pak for Security website.
Accessibility by people with disabilities
A US Section 508 Voluntary Product Accessibility Template (VPAT) containing details on accessibility compliance can be found on the IBM Accessibility website.
Back to top
Reference information
For more information about Cloud Pak for Security, see:
- IBM Cloud Pak for Security 1.7.1 Software Announcement ZP21-0143, dated May 11, 2021
- IBM Cloud Pak for Security 1.6 Software Announcement ZP21-0062, dated February 16, 2021
- IBM Cloud Pak for Security 1.5 Software Announcement ZP20-0584, dated December 1, 2020
- IBM Cloud Pak for Security 1.4 Software Announcement ZP20-0435, dated September 22, 2020
- IBM Cloud Pak for Security 1.3 Software Announcement ZP20-0220, dated May 12, 2020
- IBM Cloud Pak for Security 1.2 Software Announcement ZP20-0068, dated February 24, 2020
- IBM Cloud Pak for Security 1.1 Software Announcement ZP19-0157, dated November 12, 2019
For more information about IBM Security SOAR, formerly known as IBM Resilient® SOAR Platform (5737-A52), and IBM Security SOAR on Cloud, formerly known as IBM Resilient SOAR Platform on Cloud (5737-C07), see Software Announcement ZP19-0288, dated June 11, 2019, and Software Announcement ZP19-0134, dated April 16, 2019.
Back to top
Availability of national languages
| Description | Language |
|---|---|
| IBM Cloud Pak for Security | English |
| IBM Security SOAR Platform | Brazilian Portuguese, English, French, German, Italian, Japanese, Korean, Russian, Simplified Chinese, Spanish, and Traditional Chinese |
| IBM Security Data Explorer | English |
| IBM Security Threat Intelligence Insights | English |
| IBM QRadar® | Brazilian Portuguese, English, French, German, Italian, Japanese, Korean, Simplified Chinese, Spanish, and Traditional Chinese |
Translation information, if available, can be found at the Translation Reports website.
Back to top
Program number
| Program number | VRM | Program name |
|---|---|---|
| 5737-L74 | 1.7.2 | IBM Cloud Pak for Security |
| 1.7.2 | IBM Security Data Explorer | |
| 1.7.2 | IBM Security Threat Intelligence Insights | |
| 5725-I12 | Not applicable | IBM Security Guardium Data Security and Compliance |
| 5725-V56 | Not applicable | IBM Security Guardium for Files |
| 5737-L66 | 3.0 | IBM Security Guardium Insights |
| 5900-AH9 | Services | IBM Security Guardium Expert Lab Services |
| 5737-A52 | 41.0 | IBM Security SOAR |
| 5737-B52 | Not applicable | IBM QRadar Software |
| 5737-B54 | Not applicable | IBM QRadar Event Capacity |
| 5737-B54 | Not applicable | IBM QRadar Flows Capacity |
| 5737-D10 | Not applicable | IBM QRadar Software Node |
| 5737-B35 | Not applicable | IBM QRadar Network Insights Software |
| 5737-D34 | Not applicable | IBM QRadar Data Store |
| 5900-A8T | Services | IBM Expert Labs for IBM Cloud Pak for Security |
Back to top
Education support
See the IBM Security Learning Academy website for training for Cloud Pak for Security, IBM Security SOAR, and QRadar.
Back to top
Offering Information
Product information is available on the IBM Offering Information website.
More information is also available on the Passport Advantage® and Passport Advantage Express website.
Back to top
Publications
Documentation can be found in IBM Documentation for the following offerings:
- Cloud Pak for Security
Information about Cloud Pak for Security 1.7.2 can be found in IBM Cloud Pak documentation website, beginning July 29, 2021.
- IBM Security SOAR
- QRadar
Back to top
Services
Global Technology Services
Contact your IBM representative for the list of selected services available in your country, either as standard or customized offerings for the efficient installation, implementation, or integration of this product.
Back to top
Technical information
Specified operating environment
Hardware requirements
Requires a workstation with a supported operating system.
Information about hardware requirements for Cloud Pak for Security 1.7.2 can be found in IBM Documentation, beginning July 29, 2021.
Software requirements
Requires a supported workstation operating system web browser.
Information about software requirements for Cloud Pak for Security 1.7.2 can be found in IBM Documentation, beginning July 29, 2021.
Such information is provided subject to the following terms. IT system security involves protecting systems and information through prevention, detection, and response to improper access from within and outside your enterprise. Improper access can result in information being altered, destroyed, misappropriated, or misused, or can result in damage to or misuse of your systems, including for use in attacks on others. No IT system or product should be considered completely secure and no single product, service, or security measure can be completely effective in preventing improper use or access. IBM systems, products, and services are designed to be part of a lawful, comprehensive security approach, which will necessarily involve additional operational procedures, and may require other systems, products, or services to be most effective.
Important: IBM does not warrant that any systems, products, or services are immune from, or will make your enterprise immune from, the malicious or illegal conduct of any party.
IBM Support
IBM Support is your gateway to technical support tools and resources that are designed to help you save time and simplify support. IBM Support can help you find answers to questions, download fixes, troubleshoot, submit and track problem cases, and build skills. Learn and stay informed about the transformation of IBM Support, including new tools, new processes, and new capabilities, by going to the IBM Support Insider.
Planning information
Packaging
This offering is delivered through the internet as an electronic download. There is no physical media.
Back to top
Ordering information
For ordering information, consult your IBM representative or IBM Business Partner, or go to the Passport Advantage website.
These programs are available only through Passport Advantage.
These products may only be sold directly by IBM or by IBM Business Partners.
To locate IBM Business Partners in your geography, see the Find a Business Partner page.
IBM Cloud Pak for Security (5737-L74)
There is no new ordering information in this release. As a convenience, the following table lists currently available part numbers.
| Program name/Description | Part number |
|---|---|
| IBM Cloud Pak for Security (Gen 2) 100K Managed Virtual Server License + SW Subscription & Support 12 Months | D2842LL |
| IBM Cloud Pak for Security (Gen 2) 100K Managed Virtual Server SW Subscription and Support Renewal 12 Months | E0R0ILL |
| IBM Cloud Pak for Security (Gen 2) 100K Managed Virtual Server SW Subscription & Support Reinstatement 12 Months | D2843LL |
| IBM Cloud Pak for Security (Gen 2) 100K Managed Virtual Server Committed Term License | D2844LL |
| IBM Cloud Pak for Security (Gen 2) 1M Managed Virtual Server License + SW Subscription & Support 12 Months | D284ELL |
| IBM Cloud Pak for Security (Gen 2) 1M Managed Virtual Server SW Subscription and Support Renewal 12 Months | E0R0KLL |
| IBM Cloud Pak for Security (Gen 2) 1M Managed Virtual Server SW Subscription & Support Reinstatement 12 Months | D284FLL |
| IBM Cloud Pak for Security (Gen 2) 1M Managed Virtual Server Committed Term License | D284GLL |
| IBM Cloud Pak for Security (Gen 2) Disaster Recovery 100K Managed Virtual Server License + SW Subscription & Support 12 Months | D284RLL |
| IBM Cloud Pak for Security (Gen 2) Disaster Recovery 100K Managed Virtual Server SW Subscription and Support Renewal 12 Months | E0R0MLL |
| IBM Cloud Pak for Security (Gen 2) Disaster Recovery 100K Managed Virtual Server SW Subscription & Support Reinstatement 12 Months | D284SLL |
| IBM Cloud Pak for Security (Gen 2) Disaster Recovery 100K Managed Virtual Server Committed Term License | D284TLL |
| IBM Cloud Pak for Security (Gen 2) Disaster Recovery 1M Managed Virtual Server License + SW Subscription & Support 12 Months | D2853LL |
| IBM Cloud Pak for Security (Gen 2) Disaster Recovery 1M Managed Virtual Server SW Subscription and Support Renewal 12 Months | E0R0PLL |
| IBM Cloud Pak for Security (Gen 2) Disaster Recovery 1M Managed Virtual Server SW Subscription & Support Reinstatement 12 Months | D2854LL |
| IBM Cloud Pak for Security (Gen 2) Disaster Recovery 1M Managed Virtual Server Committed Term License | D2855LL |
For additional ordering information, see Software Announcement ZP20-0068, dated February 24, 2020.
IBM Security SOAR (5737-A52)
These previously announced part numbers descriptions have been updated.
| Part description | Part number |
|---|---|
| IBM Security SOAR per User Value Unit (Authorized User) License + SW Subscription & Support 12 Months | D22MVLL |
| IBM Security SOAR per User Value Unit (Authorized User) SW Subscription & Support Reinstatement 12 Months | D22MWLL |
| IBM Security SOAR per User Value Unit (Authorized User) from Resilient Incident Response Legacy Trade Up License + SW Subscription & Support 12 Months | D22MXLL |
| IBM Security SOAR per User Value Unit (Authorized User) Monthly License | D22PFLL |
| IBM Security SOAR per User Value Unit (Authorized User) Annual SW Subscription & Support Renewal | E0PZULL |
| IBM Security SOAR for IBM Z® per User Value Unit (Authorized User) License + SW Subscription & Support 12 Months | D22N3LL |
| IBM Security SOAR for IBM Z per User Value Unit (Authorized User) SW Subscription & Support Reinstatement 12 Months | D22N5LL |
| IBM Security SOAR for IBM Z per User Value Unit (Authorized User) Monthly License | D22QILL |
| IBM Security SOAR for IBM Z per User Value Unit (Authorized User) Annual SW Subscription & Support Renewal | E0PZZLL |
| IBM Security SOAR per User Value Unit (Concurrent User) License + SW Subscription & Support 12 Months | D22N8LL |
| IBM Security SOAR per User Value Unit (Concurrent User) SW Subscription & Support Reinstatement 12 Months | D22N9LL |
| IBM Security SOAR per User Value Unit (Concurrent User) Monthly License | D22QJLL |
| IBM Security SOAR per User Value Unit (Concurrent User) from SOAR (Authorized User) Trade Up License + SW Subscription & Support 12 Months | D22UDLL |
| IBM Security SOAR per User Value Unit (Concurrent User) Annual SW Subscription & Support Renewal | E0Q04LL |
| IBM Security SOAR for IBM Z per User Value Unit (Concurrent User) License + SW Subscription & Support 12 Months | D22NALL |
| IBM Security SOAR for IBM Z per User Value Unit (Concurrent User) SW Subscription & Support Reinstatement 12 Months | D22NBLL |
| IBM Security SOAR for IBM Z per User Value Unit (Concurrent User) Monthly License | D22QKLL |
| IBM Security SOAR for IBM Z per User Value Unit (Concurrent User) from SOAR for IBM Z (Authorized User) Trade Up License + SW Subscription & Support 12 Months | D22UELL |
| IBM Security SOAR for IBM Z per User Value Unit (Concurrent User) Annual SW Subscription & Support Renewal | E0Q05LL |
| IBM Security SOAR Breach Response Add-On per User Value Unit (Authorized User) License + SW Subscription & Support 12 Months | D22NCLL |
| IBM Security SOAR Breach Response Add-On per User Value Unit (Authorized User) SW Subscription & Support Reinstatement 12 Months | D22NDLL |
| IBM Security SOAR Breach Response Add-On per User Value Unit (Authorized User) from Resilient Incident Response Platform Migration Legacy Trade Up License + SW Subscription & Support 12 Months | D22NELL |
| IBM Security SOAR Breach Response Add-On per User Value Unit (Authorized User) Monthly License | D22QQLL |
| IBM Security SOAR Breach Response Add-On per User Value Unit (Authorized User) Annual SW Subscription & Support Renewal | E0Q06LL |
| IBM Security SOAR Breach Response Add-On for IBM Z per User Value Unit (Authorized User) License + SW Subscription & Support 12 Months | D22NFLL |
| IBM Security SOAR Breach Response Add-On for IBM Z per User Value Unit (Authorized User) SW Subscription & Support Reinstatement 12 Months | D22NGLL |
| IBM Security SOAR Breach Response Add-On for IBM Z per User Value Unit (Authorized User) Monthly License | D22QRLL |
| IBM Security SOAR Breach Response Add-On for IBM Z per User Value Unit (Authorized User) Annual SW Subscription & Support Renewal | E0Q07LL |
| IBM Security SOAR Breach Response Add-On per User Value Unit (Concurrent User) License + SW Subscription & Support 12 Months | D22P0LL |
| IBM Security SOAR Breach Response Add-On per User Value Unit (Concurrent User) SW Subscription & Support Reinstatement 12 Months | D22P1LL |
| IBM Security SOAR Breach Response Add-On per User Value Unit (Concurrent User) Monthly License | D22R2LL |
| IBM Security SOAR Breach Response Add-On per User Value Unit (Concurrent User) from SOAR Privacy (Authorized User) Trade Up License + SW Subscription & Support 12 Months | D22UFLL |
| IBM Security SOAR Breach Response Add-On per User Value Unit (Concurrent User) Annual SW Subscription & Support Renewal | E0Q0QLL |
| IBM Security SOAR Breach Response Add-On for IBM Z per User Value Unit (Concurrent User) License + SW Subscription & Support 12 Months | D22P2LL |
| IBM Security SOAR Breach Response Add-On for IBM Z per User Value Unit (Concurrent User) SW Subscription & Support Reinstatement 12 Months | D22P3LL |
| IBM Security SOAR Breach Response Add-On for IBM Z per User Value Unit (Concurrent User) Monthly License | D22R3LL |
| IBM Security SOAR Breach Response Add-On for IBM Z per User Value Unit (Concurrent User) from SOAR Privacy for IBM Z (Authorized User) Trade Up License + SW Subscription & Support 12 Months | D22UGLL |
| IBM Security SOAR Breach Response Add-On for IBM Z per User Value Unit (Concurrent User) Annual SW Subscription & Support Renewal | E0Q0RLL |
| IBM Security SOAR Team Management Add-On per User Value Unit (Authorized User) License + SW Subscription & Support 12 Months | D22P4LL |
| IBM Security SOAR Team Management Add-On per User Value Unit (Authorized User) SW Subscription & Support Reinstatement 12 Months | D22P5LL |
| IBM Security SOAR Team Management Add-On per User Value Unit (Authorized User) Monthly License | D22R4LL |
| IBM Security SOAR Team Management Add-On per User Value Unit (Authorized User) from Resilient Incident Response Platform Legacy Trade Up License + SW Subscription & Support 12 Months | D22UHLL |
| IBM Security SOAR Team Management Add-On per User Value Unit (Authorized User) Annual SW Subscription & Support Renewal | E0Q0SLL |
| IBM Security SOAR Team Management Add-On for IBM Z per User Value Unit (Authorized User) License + SW Subscription & Support 12 Months | D22P6LL |
| IBM Security SOAR Team Management Add-On for IBM Z per User Value Unit (Authorized User) SW Subscription & Support Reinstatement 12 Months | D22P7LL |
| IBM Security SOAR Team Management Add-On for IBM Z per User Value Unit (Authorized User) Monthly License | D22R5LL |
| IBM Security SOAR Team Management Add-On for IBM Z per User Value Unit (Authorized User) Annual SW Subscription & Support Renewal | E0Q0TLL |
| IBM Security SOAR Team Management Add-On per User Value Unit (Concurrent User) License + SW Subscription & Support 12 Months | D22P8LL |
| IBM Security SOAR Team Management Add-On per User Value Unit (Concurrent User) SW Subscription & Support Reinstatement 12 Months | D22P9LL |
| IBM Security SOAR Team Management Add-On per User Value Unit (Concurrent User) Monthly License | D22R6LL |
| IBM Security SOAR Team Management Add-On per User Value Unit (Concurrent User) from SOAR Team Management (Authorized User) Trade Up License + SW Subscription & Support 12 Months | D22UILL |
| IBM Security SOAR Team Management Add-On per User Value Unit (Concurrent User) Annual SW Subscription & Support Renewal | E0Q0ULL |
| IBM Security SOAR Team Management Add-On for IBM Z per User Value Unit (Concurrent User) License + SW Subscription & Support 12 Months | D22PALL |
| IBM Security SOAR Team Management Add-On for IBM Z per User Value Unit (Concurrent User) SW Subscription & Support Reinstatement 12 Months | D22PBLL |
| IBM Security SOAR Team Management Add-On for IBM Z per User Value Unit (Concurrent User) Monthly License | D22R7LL |
| IBM Security SOAR Team Mgmt Add-On for IBM Z per User Value Unit (Concurrent User) from SOAR Team Mgmt for IBM Z (Authorized User) Trade Up License + SW Subscript & Support 12 Mo | D22UJLL |
| IBM Security SOAR Team Management Add-On for IBM Z per User Value Unit (Concurrent User) Annual SW Subscription & Support Renewal | E0Q0VLL |
| IBM Security SOAR Non-Production Add-On per User Value Unit (Authorized User) License + SW Subscription & Support 12 Months | D22PCLL |
| IBM Security SOAR Non-Production Add-On per User Value Unit (Authorized User) SW Subscription & Support Reinstatement 12 Months | D22PDLL |
| IBM Security SOAR Non-Production Add-On per User Value Unit (Authorized User) from Resilient Incident Response Platform Legacy Trade Up License + SW Subscription & Support 12 Months | D22PELL |
| IBM Security SOAR Non-Production Add-On per User Value Unit (Authorized User) Monthly License | D22R8LL |
| IBM Security SOAR Non-Production Add-On per User Value Unit (Authorized User) Annual SW Subscription & Support Renewal | E0Q0WLL |
| IBM Security SOAR Non-Production Add-On for IBM Z per User Value Unit (Authorized User) License + SW Subscription & Support 12 Months | D22PRLL |
| IBM Security SOAR Non-Production Add-On for IBM Z per User Value Unit (Authorized User) SW Subscription & Support Reinstatement 12 Months | D22PSLL |
| IBM Security SOAR Non-Production Add-On for IBM Z per User Value Unit (Authorized User) Monthly License | D22RALL |
| IBM Security SOAR Non-Production Add-On for IBM Z per User Value Unit (Authorized User) Annual SW Subscription & Support Renewal | E0Q14LL |
| IBM Security SOAR Non-Production Add-On per User Value Unit (Concurrent User) License + SW Subscription & Support 12 Months | D22PTLL |
| IBM Security SOAR Non-Production Add-On per User Value Unit (Concurrent User) SW Subscription & Support Reinstatement 12 Months | D22PULL |
| IBM Security SOAR Non-Production Add-On per User Value Unit (Concurrent User) Monthly License | D22R9LL |
| IBM Security SOAR Non-Production Add-On per User Value Unit (Concurrent User) from SOAR Non-Production (Authorized User) Trade Up License + SW Subscription & Support 12 Months | D22UKLL |
| IBM Security SOAR Non-Production Add-On per User Value Unit (Concurrent User) Annual SW Subscription & Support Renewal | E0Q15LL |
| IBM Security SOAR Non-Production Add-On for IBM Z per User Value Unit (Concurrent User) License + SW Subscription & Support 12 Months | D22PVLL |
| IBM Security SOAR Non-Production Add-On for IBM Z per User Value Unit (Concurrent User) SW Subscription & Support Reinstatement 12 Months | D22PWLL |
| IBM Security SOAR Non-Production Add-On for IBM Z per User Value Unit (Concurrent User) Monthly License | D22RCLL |
| IBM Security SOAR Non-Production Add-On for IBM Z per User Value Unit (Concurrent User) from SOAR Non-Production for IBM Z (Authorized User) Trade Up License + SW S&S 12 Mo | D22ULLL |
| IBM Security SOAR Non-Production Add-On for IBM Z per User Value Unit (Concurrent User) Annual SW Subscription & Support Renewal | E0Q16LL |
| IBM Security SOAR Disaster Recovery Add-On per User Value Unit (Authorized User) License + SW Subscription & Support 12 Months | D22PXLL |
| IBM Security SOAR Disaster Recovery Add-On per User Value Unit (Authorized User) SW Subscription & Support Reinstatement 12 Months | D22PYLL |
| IBM Security SOAR Disaster Recovery Add-On per User Value Unit (Authorized User) Monthly License | D22RDLL |
| IBM Security SOAR Disaster Recovery Add-On per User Value Unit (Authorized User) from Resilient Incident Response Platform Legacy Trade Up License + SW Subscription & Support 12 Months | D22UMLL |
| IBM Security SOAR Disaster Recovery Add-On per User Value Unit (Authorized User) Annual SW Subscription & Support Renewal | E0Q17LL |
| IBM Security SOAR Disaster Recovery Add-On for IBM Z per User Value Unit (Authorized User) License + SW Subscription & Support 12 Months | D22PZLL |
| IBM Security SOAR Disaster Recovery Add-On for IBM Z per User Value Unit (Authorized User) SW Subscription & Support Reinstatement 12 Months | D22Q0LL |
| IBM Security SOAR Disaster Recovery Add-On for IBM Z per User Value Unit (Authorized User) Monthly License | D22RELL |
| IBM Security SOAR Disaster Recovery Add-On for IBM Z per User Value Unit (Authorized User) Annual SW Subscription & Support Renewal | E0Q18LL |
| IBM Security SOAR Disaster Recovery Add-On per User Value Unit (Concurrent User) License + SW Subscription & Support 12 Months | D22Q1LL |
| IBM Security SOAR Disaster Recovery Add-On per User Value Unit (Concurrent User) SW Subscription & Support Reinstatement 12 Months | D22Q2LL |
| IBM Security SOAR Disaster Recovery Add-On per User Value Unit (Concurrent User) Monthly License | D22RFLL |
| IBM Security SOAR Disaster Recovery Add - On per User Value Unit (Concurrent User) from SOAR Disaster Recovery (Authorized User) Trade Up License + SW Subscription & Support 12 Months | D22UNLL |
| IBM Security SOAR Disaster Recovery Add-On per User Value Unit (Concurrent User) Annual SW Subscription & Support Renewal | E0Q19LL |
| IBM Security SOAR Disaster Recovery Add-On for IBM Z per User Value Unit (Concurrent User) License + SW Subscription & Support 12 Months | D22Q3LL |
| IBM Security SOAR Disaster Recovery Add-On for IBM Z per User Value Unit (Concurrent User) SW Subscription & Support Reinstatement 12 Months | D22Q4LL |
| IBM Security SOAR Disaster Recovery Add-On for IBM Z per User Value Unit (Concurrent User) Monthly License | D22RHLL |
| IBM Security SOAR Disaster Recovery Add-On for IBM Z per User Value Unit (Concurrent User) from SOAR Disaster Recovery for IBM Z (Auth User) Trade Up License + SW S&S 12 Mo | D22UPLL |
| IBM Security SOAR Disaster Recovery Add-On for IBM Z per User Value Unit (Concurrent User) Annual SW Subscription & Support Renewal | E0Q1ALL |
| IBM Security SOAR MSSP Add-On per User Value Unit (Authorized User) License + SW Subscription & Support 12 Months | D22Q5LL |
| IBM Security SOAR MSSP Add-On per User Value Unit (Authorized User) SW Subscription & Support Reinstatement 12 Months | D22Q6LL |
| IBM Security SOAR MSSP Add-On per User Value Unit (Authorized User) Monthly License | D22RILL |
| IBM Security SOAR MSSP Add-On per User Value Unit (Authorized User) from Resilient Incident Response Platform Legacy Trade Up License + SW Subscription & Support 12 Months | D22UQLL |
| IBM Security SOAR MSSP Add-On per User Value Unit (Authorized User) Annual SW Subscription & Support Renewal | E0Q1BLL |
| IBM Security SOAR MSSP Add-On for IBM Z per User Value Unit (Authorized User) License + SW Subscription & Support 12 Months | D22Q7LL |
| IBM Security SOAR MSSP Add-On for IBM Z per User Value Unit (Authorized User) SW Subscription & Support Reinstatement 12 Months | D22Q8LL |
| IBM Security SOAR MSSP Add-On for IBM Z per User Value Unit (Authorized User) Monthly License | D22RJLL |
| IBM Security SOAR MSSP Add-On for IBM Z per User Value Unit (Authorized User) Annual SW Subscription & Support Renewal | E0Q1CLL |
| IBM Security SOAR MSSP Add-On per User Value Unit (Concurrent User) License + SW Subscription & Support 12 Months | D22Q9LL |
| IBM Security SOAR MSSP Add-On per User Value Unit (Concurrent User) SW Subscription & Support Reinstatement 12 Months | D22QALL |
| IBM Security SOAR MSSP Add-On per User Value Unit (Concurrent User) Monthly License | D22RKLL |
| IBM Security SOAR MSSP Add-On per User Value Unit (Concurrent User) from SOAR MSSP (Authorized User) Trade Up License + SW Subscription & Support 12 Months | D22URLL |
| IBM Security SOAR MSSP Add-On per User Value Unit (Concurrent User) Annual SW Subscription & Support Renewal | E0Q1DLL |
| IBM Security SOAR MSSP Add-On for IBM Z per User Value Unit (Concurrent User) License + SW Subscription & Support 12 Months | D22QBLL |
| IBM Security SOAR MSSP Add-On for IBM Z per User Value Unit (Concurrent User) SW Subscription & Support Reinstatement 12 Months | D22QCLL |
| IBM Security SOAR MSSP Add-On for IBM Z per User Value Unit (Concurrent User) Monthly License | D22RLLL |
| IBM Security SOAR MSSP Add-On for IBM Z per User Value Unit (Concurrent User) from SOAR MSSP for IBM Z (Authorized User) Trade Up License + SW Subscription & Support 12 Months | D22USLL |
| IBM Security SOAR MSSP Add-On for IBM Z per User Value Unit (Concurrent User) Annual SW Subscription & Support Renewal | E0Q1ELL |
| IBM Security SOAR Thousand Monthly Actions per Resource Value Unit License + SW Subscription & Support 12 Months | D22QDLL |
| IBM Security SOAR Thousand Monthly Actions per Resource Value Unit SW Subscription & Support Reinstatement 12 Months | D22QELL |
| IBM Security SOAR Thousand Monthly Actions per Resource Value Unit from Resilient Incident Response Platform Legacy Trade Up License + SW Subscription & Support 12 Months | D22QFLL |
| IBM Security SOAR Thousand Monthly Actions per Resource Value Unit Monthly License | D22RGLL |
| IBM Security SOAR Thousand Monthly Actions per Resource Value Unit Annual SW Subscription & Support Renewal | E0Q1FLL |
| IBM Security SOAR Thousand Monthly Actions for IBM Z per Resource Value Unit License + SW Subscription & Support 12 Months | D22QGLL |
| IBM Security SOAR Thousand Monthly Actions for IBM Z per Resource Value Unit SW Subscription & Support Reinstatement 12 Months | D22QHLL |
| IBM Security SOAR Thousand Monthly Actions for IBM Z per Resource Value Unit Monthly License | D22RBLL |
| IBM Security SOAR Thousand Monthly Actions for IBM Z per Resource Value Unit Annual SW Subscription & Support Renewal | E0Q1GLL |
| IBM Security SOAR Actions Enterprise Install License + SW Subscription & Support 12 Months | D268DLL |
| IBM Security SOAR Actions Enterprise Install SW Subscription & Support Reinstatement 12 Months | D268ELL |
| IBM Security SOAR Actions Enterprise Install Monthly License | D268LLL |
| IBM Security SOAR Actions Enterprise Install Annual SW Subscription & Support Renewal | E0QJ2LL |
| IBM Security SOAR Actions Enterprise for IBM Z Install License + SW Subscription & Support 12 Months | D268HLL |
| IBM Security SOAR Actions Enterprise for IBM Z Install SW Subscription & Support Reinstatement 12 Months | D268ILL |
| IBM Security SOAR Actions Enterprise for IBM Z Install Monthly License | D268MLL |
| IBM Security SOAR Actions Enterprise for IBM Z Install Annual SW Subscription & Support Renewal | E0QJ3LL |
IBM Security SOAR on Cloud (5737-C07)
These previously announced part numbers descriptions have been updated.
| Part description | Part number |
|---|---|
| IBM Security SOAR on Cloud (AU) Authorized User per Month | D22U1LL |
| IBM Security SOAR on Cloud (AU) Authorized User Overage | D22U2LL |
| IBM Security SOAR on Cloud (CU) Concurrent User per Month | D22U3LL |
| IBM Security SOAR on Cloud (CU) Concurrent User Overage | D22U4LL |
| IBM Security SOAR Breach Response on Cloud Add-On (AU) Authorized User per Month | D22U5LL |
| IBM Security SOAR Breach Response on Cloud Add-On (AU) Authorized User Overage | D22U6LL |
| IBM Security SOAR Breach Response on Cloud Add-On (CU) Concurrent User per Month | D22U7LL |
| IBM Security SOAR Breach Response on Cloud Add-On (CU) Concurrent User Overage | D22U8LL |
| IBM Security SOAR Team Management on Cloud Add-On (AU) Authorized User per Month | D22U9LL |
| IBM Security SOAR Team Management on Cloud Add-On (AU) Authorized User Overage | D22UALL |
| IBM Security SOAR Team Management on Cloud Add-On (CU) Concurrent User per Month | D22UBLL |
| IBM Security SOAR Team Management on Cloud Add-On (CU) Concurrent User Overage | D22UCLL |
| IBM Security SOAR Non-Production on Cloud Add-On (AU) Authorized User per Month | D22UWLL |
| IBM Security SOAR Non-Production on Cloud Add-On (AU) Authorized User Overage | D22V1LL |
| IBM Security SOAR Non-Production on Cloud Add-On (CU) Concurrent User per Month | D22UXLL |
| IBM Security SOAR Non-Production on Cloud Add-On (CU) Concurrent User Overage | D22V2LL |
| IBM Security SOAR MSSP on Cloud Add-On (AU) Authorized User per Month | D22UYLL |
| IBM Security SOAR MSSP on Cloud Add-On (AU) Authorized User Overage | D22V3LL |
| IBM Security SOAR MSSP on Cloud Add-On (CU) Concurrent User per Month | D22UZLL |
| IBM Security SOAR MSSP on Cloud Add-On (CU) Concurrent User Overage | D22V4LL |
| IBM Security SOAR Actions on Cloud per Thousand Items per Month | D22V0LL |
| IBM Security SOAR Actions on Cloud per Thousand Items Overage | D22V5LL |
Cross-platform product for use with IBM Z data
There is no new ordering information in this release. As a convenience, the following table lists all currently available part numbers.
Order the part numbers that follow when the product is used for transferring data between an IBM Z server and a distributed server.
IBM Cloud Pak for Security (5737-L74)
| Program name/Description | Part number |
|---|---|
| IBM Cloud Pak for Security (Gen 2) 100K Managed Virtual Server for IBM Z License + SW Subscription & Support 12 Months | D2848LL |
| IBM Cloud Pak for Security (Gen 2) 100K Managed Virtual Server for IBM Z SW Subscription and Support Renewal 12 Months | E0R0JLL |
| IBM Cloud Pak for Security (Gen 2) 100K Managed Virtual Server for IBM Z SW Subscription & Support Reinstatement 12 Months | D2849LL |
| IBM Cloud Pak for Security (Gen 2) 100K Managed Virtual Server for IBM Z Committed Term License | D284ALL |
| IBM Cloud Pak for Security (Gen 2) 1M Managed Virtual Server for IBM Z License + SW Subscription & Support 12 Months | D284KLL |
| IBM Cloud Pak for Security (Gen 2) 1M Managed Virtual Server for IBM Z SW Subscription and Support Renewal 12 Months | E0R0LLL |
| IBM Cloud Pak for Security (Gen 2) 1M Managed Virtual Server for IBM Z SW Subscription & Support Reinstatement 12 Months | D284LLL |
| IBM Cloud Pak for Security (Gen 2) 1M Managed Virtual Server for IBM Z Committed Term License | D284MLL |
| IBM Cloud Pak for Security (Gen 2) Disaster Recovery 100K Managed Virtual Server for IBM Z License + SW Subscription & Support 12 Months | D284XLL |
| IBM Cloud Pak for Security (Gen 2) Disaster Recovery 100K Managed Virtual Server for IBM Z SW Subscription and Support Renewal 12 Months | E0R0NLL |
| IBM Cloud Pak for Security (Gen 2) Disaster Recovery 100K Managed Virtual Server for IBM Z SW Subscription & Support Reinstatement 12 Months | D284YLL |
| IBM Cloud Pak for Security (Gen 2) Disaster Recovery 100K Managed Virtual Server for IBM Z Committed Term License | D284ZLL |
| IBM Cloud Pak for Security (Gen 2) Disaster Recovery 100K Managed Virtual Server for IBM Z Monthly License | D2850LL |
| IBM Cloud Pak for Security (Gen 2) Disaster Recovery 1M Managed Virtual Server for IBM Z License + SW Subscription & Support 12 Months | D2859LL |
| IBM Cloud Pak for Security (Gen 2) Disaster Recovery 1M Managed Virtual Server for IBM Z SW Subscription and Support Renewal 12 Months | E0R0QLL |
| IBM Cloud Pak for Security (Gen 2) Disaster Recovery 1M Managed Virtual Server for IBM Z SW Subscription & Support Reinstatement 12 Months | D285ALL |
| IBM Cloud Pak for Security (Gen 2) Disaster Recovery 1M Managed Virtual Server for IBM Z Committed Term License | D285BLL |
For additional ordering information, see Software Announcement ZP20-0068, dated February 24, 2020.
Charge metric
Charge metric for licensed products
The charge metrics for this licensed product can be found in the following License Information documents:
| Program identifier | License Information document title | License Information document number |
|---|---|---|
| 5737-L74 | IBM Cloud Pak for Security 1.7.2 | L-GBLK-C497G2 |
| IBM Cloud Pak for Security Disaster Recovery 1.7.2 | L-GBLK-C497UT |
Select your language of choice and scroll down to the Charge Metrics section. Follow-on releases, if any, may have updated terms. See the License Information documents website for more information.
Charge metric for cloud services
The charge metrics for these cloud service can be found in the following Service Description documents:
| Program identifier | Service Description document title | Service Description document number |
|---|---|---|
| 5900-A3J | IBM Security Threat Intelligence Insights for IBM Cloud Pak for Security | 7393-06 |
| 5900-A8T | IBM Expert Labs for IBM Cloud Pak for Security | 8730-01 |
Select your language of choice and scroll down to the Charge Metrics section. Follow-on releases, if any, may have updated terms. See the Cloud Services terms website and search using the four-digit base Service Description number.
Back to top
Terms and conditions
Terms and conditions for the licensed product
The information provided in this announcement letter is for reference and convenience purposes only. The terms and conditions that govern any transaction with IBM are contained in the applicable contract documents such as the IBM International Program License Agreement, IBM International Passport Advantage Agreement, and the IBM Agreement for Acquisition of Software Maintenance.
This product is available only through Passport Advantage.
Licensing
IBM International Program License Agreement including the License Information document and Proof of Entitlement (PoE) govern your use of the program. PoEs are required for all authorized use. Part number products only, offered outside of Passport Advantage, where applicable, are license only and do not include Software Maintenance.
This software license includes Software Subscription and Support (also referred to as Software Maintenance).
Software Maintenance
These programs are licensed under the IBM Program License Agreement (IPLA) and the associated Agreement for Acquisition of Software Maintenance, which provide for support with ongoing access to releases and versions of the program. IBM includes one year of Software Subscription and Support (also referred to as Software Maintenance) with the initial license acquisition of each program acquired. The initial period of Software Subscription and Support (also referred to as Software Maintenance) can be extended by the purchase of a renewal option, if available. These programs have a one-time license charge for use of the program and an annual renewable charge for the enhanced support that includes telephone assistance (voice support for defects during normal business hours), as well as access to updates, releases, and versions of the program as long as support is in effect.
License Information number
The following License Information documents apply to the offerings in this announcement:
| Program identifier | License Information document title | License Information document number |
|---|---|---|
| 5737-L74 | IBM Cloud Pak for Security 1.7.2 | L-GBLK-C497G2 |
| IBM Cloud Pak for Security Disaster Recovery 1.7.2 | L-GBLK-C497UT |
Follow-on releases, if any, may have updated terms. See the License Information documents website for more information.
Limited warranty applies
Yes
Limited warranty
IBM warrants that when the program is used in the specified operating environment, it will conform to its specifications. The warranty applies only to the unmodified portion of the program. IBM does not warrant uninterrupted or error-free operation of the program or that IBM will correct all program defects. You are responsible for the results obtained from the use of the program.
IBM provides you with access to IBM databases containing information about known program defects, defect corrections, restrictions, and bypasses at no additional charge. For further information, see the IBM Support Guide.
IBM will maintain this information for at least one year after the original licensee acquires the program (warranty period).
Program technical support
Technical support of a program version or release of a specific program within this offering will be available as long as:
- The program is still supported
- Your Software Subscription and Support for this offering is in effect
Program technical support terms
- Technical support of a program product version or release is available for a minimum of one year from the general availability date, as long as your Software Subscription and Support (also referred to as Software Maintenance) is in effect. This enables you to obtain assistance (by telephone or electronic means) from IBM for product-specific, task-oriented questions regarding the installation and operation of the program.
- Software Subscription and Support (Software Maintenance) also provides you with access to versions, releases, and updates of the program.
- You will be notified, through an announcement letter, of discontinuance of support with six months' notice.
For additional information about this support lifecycle, see the IBM Cloud Pak for Security Support Lifecycle Policy website.
Money-back guarantee
If for any reason you are dissatisfied with the program and you are the original licensee, you may obtain a refund of the amount you paid for it, if within 30 days of your invoice date you return the program and its PoE to the party from whom you obtained it. If you downloaded the program, you may contact the party from whom you acquired it for instructions on how to obtain the refund.
For clarification, note that (1) for programs acquired under the IBM International Passport Advantage offering, this term applies only to your first acquisition of the program and (2) for programs acquired under any of IBM's On/Off Capacity on Demand (On/Off CoD) software offerings, this term does not apply since these offerings apply to programs already acquired and in use by you.
Volume orders (IVO)
No
Passport Advantage applies
Yes, information is available on the Passport Advantage and Passport Advantage Express website.
Software Subscription and Support applies
Yes. Software Subscription and Support, also referred to as Software Maintenance, is included with licenses purchased through Passport Advantage and Passport Advantage Express. Product upgrades and Technical Support are provided by the Software Subscription and Support offering as described in the Agreements. Product upgrades provide the latest versions and releases to entitled software, and Technical Support provides voice and electronic access to IBM support organizations, worldwide.
IBM includes one year of Software Subscription and Support with each program license acquired. The initial period of Software Subscription and Support can be extended by the purchase of a renewal option, if available.
While your Software Subscription and Support is in effect, IBM provides you assistance for your routine, short duration installation and usage (how-to) questions, and code-related questions. IBM provides assistance by telephone and, if available, electronic access, only to your information systems (IS) technical support personnel during the normal business hours (published prime shift hours) of your IBM support center. (This assistance is not available to your users.) IBM provides Severity 1 assistance 24 hours a day, 7 days a week. For additional details, see the IBM Support Guide. Software Subscription and Support does not include assistance for the design and development of applications, your use of programs in other than their specified operating environment, or failures caused by products for which IBM is not responsible under the applicable agreements.
Unless specified otherwise in a written agreement with you, IBM does not provide support for third-party products that were not provided by IBM. Ensure that when contacting IBM for covered support, you follow problem determination and other instructions that IBM provides, including in the IBM Support Guide.
For additional information about the International Passport Advantage Agreement and the IBM International Passport Advantage Express Agreement, go to the Passport Advantage and Passport Advantage Express website.
Other support
Passport Advantage
Variable charges apply
No
Educational allowance available
Education allowance does not apply. Education software allowance does not apply. Special education prices are available for qualified clients through Passport Advantage.
Terms and conditions for the cloud service
The information provided in this announcement letter is for reference and convenience purposes only. The terms and conditions that govern any transaction for the acquisition of cloud services from IBM consist of either the IBM Cloud® Services Agreement and the applicable offering Service Description or the IBM International Passport Advantage Agreement or the International Passport Advantage Express Agreement and the IBM Terms of Use - General Terms for Cloud Offerings and the applicable offering Service Description.
Technical support
Technical support is provided for cloud services and enabling software, as applicable, during the subscription period. Any enhancements, updates, and other materials provided by IBM as part of any such technical support are considered to be part of the cloud service, as applicable, and therefore governed by the applicable agreement as defined in client's quote or transaction document. Technical support is included with the cloud service and is not available as a separate offering.
Additional technical support information for this cloud service offering may be found in the IBM Support Guide or in service-specific documentation.
Service Description
The following Service Description documents apply to this offering in this announcement:
| Program identifier | Service Description document title | Service Description document number |
|---|---|---|
| 5900-A3J | IBM Security Threat Intelligence Insights for IBM Cloud Pak for Security | 7393-06 |
| 5900-A8T | IBM Expert Labs for IBM Cloud Pak for Security | 8730-01 |
Follow-on levels of these cloud services, if any, may have updated terms. See the Cloud Services terms website and search using the four-digit base Service Description numbers.
Limited warranty
See the warranty defined in the applicable agreement governing client's acquisition for this offering.
Money-back guarantee
No
Volume orders (IVO)
No
Passport Advantage applies
Yes, information is available on the Passport Advantage and Passport Advantage Express website.
Usage restrictions
Yes
For any usage restrictions, see the Service Description documents listed in this Terms and conditions section.
Other support
Passport Advantage
Educational allowance available
No
Back to top
Statement of good security practices
IT system security involves protecting systems and information through intrusion prevention, detection, and response to improper access from within and outside your enterprise. Improper access can result in information being altered, destroyed, or misappropriated or can result in misuse of your systems to attack others. Without a comprehensive approach to security, no IT system or product should be considered completely secure and no single product or security measure can be completely effective in preventing improper access. IBM systems and products are designed to be part of a regulatory compliant, comprehensive security approach, which will necessarily involve additional operational procedures, and may require other systems, products, or services to be most effective.
Important: IBM does not warrant that any systems, products, or services are immune from, or will make your enterprise immune from, the malicious or illegal conduct of any party.
Back to top
Prices
For all local charges, contact your local IBM representative or IBM Business Partner.
If you are an IBM Business Partner acquiring products from IBM, you may link to Passport Advantage Online for resellers where you can obtain Business Partner pricing information. An IBMid and password are required to access the IBM Passport Advantage or IBM PartnerWorld® website.
For Passport Advantage information and charges, contact your IBM representative or IBM Business Partner. Additional information is also available on the Passport Advantage and Passport Advantage Express website.
IBM Global Financing
IBM Global Financing offers competitive financing to credit-qualified clients to assist them in acquiring IT solutions. Offerings include financing for IT acquisition, including hardware, software, and services, from both IBM and other manufacturers or vendors. Offerings (for all client segments: small, medium, and large enterprise), rates, terms, and availability can vary by country. Contact your local IBM Global Financing organization or go to the IBM Global Financing website for more information.
IBM Global Financing offerings are provided through IBM Credit LLC in the United States, and other IBM subsidiaries and divisions worldwide to qualified commercial and government clients. Rates are based on a client's credit rating, financing terms, offering type, equipment type, and options, and may vary by country. Other restrictions may apply. Rates and offerings are subject to change, extension, or withdrawal without notice.
Back to top
Announcement countries
All European, Middle Eastern, and African countries, except Islamic Republic of Iran, Syrian Arab Republic, and the Crimea region of Ukraine (Crimea).
Trademarks
IBM Security is a trademark of IBM Corporation in the United States, other countries, or both.
IBM Cloud Pak, IBM, Guardium, QRadar, Global Technology Services, PartnerWorld, Passport Advantage, Resilient, IBM Z and IBM Cloud are registered trademarks of IBM Corporation in the United States, other countries, or both.
Red Hat and Ansible are registered trademarks of Red Hat Inc. in the U.S. and other countries.
Other company, product, and service names may be trademarks or service marks of others.
Terms of use
IBM products and services which are announced and available in your country can be ordered under the applicable standard agreements, terms, conditions, and prices in effect at the time. IBM reserves the right to modify or withdraw this announcement at any time without notice. This announcement is provided for your information only. Reference to other products in this announcement does not necessarily imply those products are announced, or intend to be announced, in your country. Additional terms of use are located at
For the most current information regarding IBM products, consult your IBM representative or reseller, or go to the IBM worldwide contacts page