Gartner names IBM Security™ a Magic Quadrant for SIEM Leader for the 12th consecutive year
IBM Security™ QRadar® SIEM features
Intelligent insights across environments
Provides visibility and applies context to on-prem and cloud-based resources; leverages continuous monitoring for a zero trust approach to security.
Built-in analytics to accurately detect threats
Analyzes network, endpoint, asset, user, risk and threat data to uncover known and unknown threats; speeds time to value.
Correlation of related activities
Identifies and tracks related activities throughout the kill chain; provides end-to-end visibility into a potential incident from a single screen.
Automatic parsing and normalizing of logs
Automatically makes sense of data from disparate sources; provides an easy-to-use editor to quickly onboard custom log sources for analysis.
Threat intelligence and support for STIX/TAXII
Includes threat intelligence from IBM Security™ X-Force®; enables clients to integrate additional threat intelligence feeds via STIX/TAXII.
Out-of-the-box integration with 450 solutions
Provides over 450 integrations, APIs and an SDK to speed data ingestion, drive deeper insights and extend the value of existing solutions.
Multiple deployment options
Offers flexible architecture for varied deployment and scaling needs; can be delivered as hardware, software or VM for on-prem or IaaS environments.
Highly scalable, self-managing database
Streamlines management so teams can focus on operations; no dedicated database admins required, even at scale; helps reduce total cost of ownership.
Compliance
IBM QRadar SIEM meets these compliance regulations
QRadar SIEM helps your organization show evidence of compliance and declaration of conformity with applicable regulatory statues and internal audits for the environments that QRadar SIEM is monitoring. QRadar SIEM adheres to rigorous security, availability, and privacy frameworks, and complies with a range of industry-standard certifications and governance including:
- Common Criteria
- FIPS140-2 (Level 1)
- STIG / Hardening
- ISO 27001
- Section 508 VPAT reports
Requirements
IBM QRadar SIEM can help you meet your compliance requirements
IBM recognizes the critical importance of compliance and up-to-date certifications for clients relying on our product capabilities to secure their data and comply with regulatory requirements.
QRadar SIEM provides default-setting compliance packages for General Data Protection Regulation (GDPR), the Federal Information Security Management Act (FISMA), Sarbanes-Oxley (SOX), HIPAA, ISO 27001**, Payment Card Industry Data Security Standard (PCI DSS) and more. All are available in the IBM Security App Exchange and are included free of charge with a QRadar SIEM license. QRadar SIEM integrates with our IBM Security QRadar SOAR solution to provide a proactive, fast, and intelligent response to data privacy breaches. IBM Security QRadar SOAR supports over 180 privacy regulations worldwide, so your security teams can integrate privacy reporting tasks into their overall incident response playbooks, and collaborate with privacy and legal teams to address regulatory requirements.
These include:
- FISMA (link resides outside IBM)
- SOX
- HIPAA (link resides outside IBM)
- ISO 27001**
- PCI DSS
- NIST RMF 800-53 (link resides outside IBM)
- Gramm-Leach-Bliley Act (GLBA) (link resides outside IBM)
- GDPR*
- CCPA*
Product specifications
Visibility across environments
Visibility across environments
Problem: Lack of insight across multiple security and IT environments.
Solution: Gain centralized insight into logs, flows and events across on-prem, SaaS, IaaS and hybrid multicloud environments with hundreds of prebuilt integrations. Easily collect logs from any cloud service using REST API.
Real-time threat detection
Real-time threat detection
Problem: Manual threat searches take too many hours and resources.
Solution: Detect threats with advanced analytics and threat intelligence infused with deep expertise in protecting Fortune 100 companies. Automatically investigate logs and network flows to detect threats and generate prioritized alerts as attacks progress through the kill chain.
Automated, prioritized triage
Automated, prioritized triage
Problem: Manual triage processes take up valuable analyst time and pull them away from other work.
Solution: Force multiply security teams with AI-driven investigations that prioritize and automate triage — resulting in an up-to 60 times improvement in speed of investigation.
Prebuilt compliance content
Prebuilt compliance content
Problem: Audits for ever-changing compliance mandates are time consuming and manual.
Solution: Automate compliance reporting tasks with prebuilt content for major compliance regulations such as PCI, GDPR, HIPAA and more.
Faster threat response
Faster threat response
Problem: Incident response processes are manual and not standardized or repeatable.
Solution: Respond to threats faster and more efficiently with orchestration and automation, case management and dynamic playbooks provided by tight integration with IBM Security™ SOAR.
Next steps
Footnotes
* Please contact your sales representative for GDPR and CCPA as these requirements differ for each customer.
** ISO 27001 Operational certification available for QROC (SaaS). Software deployments are reliant on customer operational practices.