Managing connections in Risk Manager

Review and manage your data source connections that you created and configured for importing threat events, indicators of compromise (IOCs), and asset data into IBM® Security Risk Manager by using the Universal Data Insights and Connected Assets and Risk services.

Accessing Manage connections page

  1. On the home page, click the Menu icon.
  2. In the Application settings section, click Risk Manager > Manage connections.

Importing new and updated connections into Risk Manager

Risk feeds are imported from various source products for which you created and configured the data source connections to analyze and compute the risk score. To obtain and view the new and modified data source connection details and import data into Risk Manager, you must click the Refresh connections option on the Manage connections page.

Connected Assets and Risk connection details

In the Asset data section, you can view the connection name and job run status with timestamp of your data source connections to import data from the Connected Assets and Risk asset database at regular intervals. The Unavailable connection status indicates that the cron job details and data are not yet available to import into Risk Manager from the configured connections. For a failed connection, click the Configuration error option on the card to verify and correct the configuration details.

Click Configure assets to configure connections to import asset data. For more information about configuring the connections, see Configuring Connected Assets and Risk connections.

Universal Data Insights connection details

In the Observed data section, you can view the connection name and data import status with timestamp of your data source connections to import threat data and indicators of compromise (IOCs) by using the Universal Data Insights service at specified intervals. You can see only the connection details that you are entitled to view and access the data sources. If you are an admin user for the data sources, you can view and access all the data source connections that are configured. For a failed connection, click the Configuration error option on the card to verify and correct the configuration details. Set the connection On for the data sources from which you want the data to be used by Risk Manager for risk evaluation.

Click Configure data sources to configure data source connections to import threat information. For more information about configuring the connections, see Configuring Universal Data Insights connections.

Integrations

Risk Manager is integrated with IBM X-Force® Red Vulnerability Management Services (VMS) to obtain enriched vulnerability data that is sourced from various products. You can use the basic version of VMS to enrich only 250 unique vulnerabilities per day.

To enable the VMS subscription for availing the continuous enrichment service, you must have the credentials for the advanced version. The VMS credentials must be assigned to the application account.

To connect to the basic version of VMS, complete the following steps:
  1. On the Manage connections page, in the Integrations section, click Connect to X-Force VMS.
  2. On the X-Force VMS window, select Basic.
  3. By default, credentials of the basic version are displayed.
  4. Click Save.
To connect to the advanced version of VMS, complete the following steps:
  1. On the Manage connections page, in the Integrations section, click Connect to X-Force VMS.
  2. On the X-Force VMS window, select Advanced.
  3. Specify the credential information in the RegID and Secret fields.
  4. Click Save.