Experiencing a security breach?

Call IBM now.

1-888-241-9812 (U.S. & Canada) 
(001) 312-212-8034 (Outside the U.S. & Canada)

Partner with the trusted advisors of IBM X-Force IRIS

Today’s reality means that organizations need to be constantly vigilant against breaches – and having a robust incident response plan in place is vital. A proactive approach offered by the IBM® X-Force® Incident Response and Intelligence Services (IRIS) team integrates security threat intelligence, incident response and remediation to help minimize the loss of revenue caused by a security incident – and provide a more comprehensive view of an attack so your organization can make the most informed decisions to defend it.

Fight back with the IRIS attack framework Learn how to orchestrate your IR strategy

X-Force IRIS solutions help you before, during and after a breach

Strategize

The services offered by the X-Force IRIS team are designed to help you before, during and after a breach so you recover faster. Each solution is infused with threat intelligence, enabling your security team to be knowledgeable about threats to your environment.

Strategize

Solutions

Vision Retainer

An incident response subscription service that provides direct and immediate access to highly skilled security consultants

Learn about Vision Retainer

Build a response plan that works

Orchestrate your IR strategy with X-Force IRIS

Arm your business with a battle-tested IR platform

X-Force Command Center

Experience a day in the life of a simulated cyberattack in a live environment. Train with the world’s premier cyber special forces team to test the skills you have, and learn the skills you need to succeed in today’s threat landscape.

Train for threat response

X-Force IRIS and The Command Center Team together

Hear how cyber training goes mobile

Prepare for and respond to the inevitable (964 KB)

Managed Detection and Response

Intelligence-based defense solution that helps detect endpoint attacks in real time without relying on signatures, and disrupts them before they can penetrate your enterprise resources

Learn about MDR

Stop endpoint attacks in their tracks (497 KB)

Plan

Before a breach

It is imperative to have solid incident response procedures in place before an attack happens. Being prepared is the first defense strategy to avoid operating in crisis mode. Planning should not be an afterthought, but well-documented and tested. With X-Force IRIS team services, your organization can identify potential threats before they strike.

Plan

Solutions

Vision Retainer

IR subscription service that provides direct and immediate access to highly skilled security consultants

Learn about Vision Retainer

Build a response plan that works

Orchestrate your IR strategy with X-Force IRIS

Arm your business with a battle-tested IR platform

Managed Detection and Response

Intelligence-based defense solution that helps detect endpoint attacks in real time without relying on signatures, and disrupts them before they can penetrate your enterprise resources

Learn about MDR

Stop endpoint attacks in their tracks (497 KB)

Active threat assessment

Discovers if undetected threats exist within your infrastructure. X-Force IRIS analysts deploy network and host-based inspection technology to assess your environment, looking for anomalies and signs of compromise based on IBM’s knowledge of attack groups.

Learn more about Active Threat Assessment (1.4 MB)

Prepare for a security incident

What matters most during a breach?

Incident response planning

Attack simulation exercises, active threat hunting and continuous threat monitoring

How to build a response plan that works

Identify gaps with IR planning

Building a CSIRP to contain the damage of a breach

Strategic threat assessment

X-Force Intelligence Services experts review your key assets to characterize threat events by the typical attackers, the likely infection vectors, and the techniques and procedures that adversaries employ

Do you know what attackers are doing? (2.3 MB)

X-Force Threat Analysis Service (XFTAS)

Security intelligence gleaned from globally networked security operation centers and X-Force Research, collaboration with research partners, and meticulously analyzed open source intelligence (OSINT) data

Learn more about XFTAS (60 KB)

Integrate threat intelligence into your incident response

X-Force Command Center

Experience a day in the life of a simulated cyberattack in a live environment. Train with the world’s premier cyber special forces team to test the skills you have, and learn the skills you need to succeed in today’s threat landscape.

Train for threat response

X-Force IRIS and The Command Center Team together

Hear how cyber training goes mobile

Prepare for and respond to the inevitable (964 KB)

Respond

During a breach

What happens if you have a solid incident response plan in place, but  still experience an attack? It’s critical to investigate and put an end to the attack quickly. X-Force IRIS offers security services to help you assess the situation – and minimize the damage – with forensic analysis, malware analysis, threat assessments and more.

Respond

Solutions

Vision Retainer

IR subscription service that provides direct and immediate access to highly skilled security consultants

 

Learn about Vision Retainer

Build a response plan that works

Orchestrate your IR strategy with X-Force IRIS

Arm your business with a battle-tested IR platform

Managed Detection and Response

Intelligence-based defense solution that helps detect endpoint attacks in real time without relying on signatures, and disrupts them before they can penetrate your enterprise resources

Learn about MDR

Stop endpoint attacks in their tracks (497 KB)

Recover

After a breach

The worst is now over, but the recovery work is just beginning. Organizations should continue to monitor affected systems. Once the damage from an attack is contained, X-Force IRIS can help you incorporate what you’ve learned into protecting against the next attack.

Recover

Solutions

Threat Impact Analysis

Protect against future attacks by taking a deep look at threat groups and your organization’s threat level

 

Learn more (107 KB)

Vision Retainer

IR subscription service that provides direct and immediate access to highly skilled security consultants

 

 

Learn about Vision Retainer

Build a response plan that works

Orchestrate your IR strategy with X-Force IRIS

Arm your business with a battle-tested IR platform

Managed Detection and Response

Intelligence-based defense solution that helps detect endpoint attacks in real time without relying on signatures, and disrupts them before they can penetrate your enterprise resources

Learn about MDR

Stop endpoint attacks in their tracks (497 KB)

Read the latest news and research from the X-Force IRIS team

IRIS blogs

Meet some X-Force IRIS experts

 

When you partner with our team, you have access to a wealth of skills, expertise and insight to help your company take control and transform your incident management and response capabilities. Members have consulted on hundreds of the world’s largest breach investigations across numerous industries in both public and private sectors.

Wendi Whitmore

Wendi Whitmore

Global lead, IBM X-Force IRIS team

Wendi helped create the IBM X-Force IRIS team, using her 15 years’ experience in incident response, intelligence and data breach investigations. She has worked at CrowdStrike Services, Mandiant and the Air Force Office of Special Investigations.

Ahmed Saleh

Ahmed Saleh

Global lead, incident response and proactive services

Ahmed’s team delivers forensic, incident response, and proactive security services. With 14 years of experience, he has worked for NASA, the US Air Force, Disney and Mandiant.

Kevin Albano

Kevin Albano

Global lead, threat intelligence

Kevin leads the team on threat intelligence collections, advanced threat research and information analysis With 17 years in IT, law enforcement and security consulting, he has worked at the FBI and Mandiant.

Christopher Scott

Christopher Scott

Global lead, remediation services

Christopher has led incident response teams for some of the largest data breach investigations and leads the remediation services team. Prior to IBM, he was at CrowdStrike Services and L-3 Communications.

Finance your security project with IBM Global Financing

Learn more