IBM X-Force IRIS Vision Retainer delivers 24-hours-a-day, every-day-of-the-week access to Incident Response and Intelligence specialists, helping organizations to reduce risk and exposure to cyber threats and rapidly respond to security incidents.
At a glance
IBMX-Force Incident Response and Intelligence Services (IRIS) Vision Retainer is a subscription-based service that helps organizations intelligently prepare for, detect, and remediate attacks to reduce the timeline for potential impact. It offers:
A project initiation workshop
Quarterly reviews
Eighty retainer hours per year to use for incident response (IR) or proactive services that include:
IR program assessment
IR plan development
IR playbook customization
Strategic threat assessment
Premier threat intelligence
Dark web search services
This service is designed to provide access to a strategic team of trained security specialists to help your organization manage critical security incidents and breaches.
Overview
X-Force IRIS is a security solution that integrates security threat intelligence, incident response, and remediation to help minimize the loss of revenue that can be caused by a security incident.
As part of this security solution set, the X-Force IRIS Vision Retainer is an annual incident response subscription service that includes a selection of IR and intelligence proactive services from which to choose. Emergency Incident Response Services offered in the IRIS Vision Retainer provides phone access to a team of trained IR specialists 24 hours a day, every day of the week, every day of the year.
Emergency Incident Response Services includes but is not limited to the following services:
Provides analysis of cybersecurity incident data to determine the source of the incident, its cause, and its effects
Potentially prevents the effects of the cybersecurity incident from spreading to other computer systems and networks
Stops the cyber security incident at its source, protecting computer systems and networks from the effects of the cybersecurity incident
Offers recommendations for restoration of the affected computer systems and networks to normal operation
Suggests protection methods for computer systems and networks from future occurrences of the computer security incident
In addition to a workshop at project initiation and quarterly reviews, Emergency Incident Response Services also provides 80 retainer hours per year to use for IR or proactive services. These proactive services include:
IR program assessment. Review existing incident response policies, interview key stakeholders to understand individuals of the organization, process and technology, and deliver a prioritized roadmap on how to improve your program.
IR plan development. Present a framework for effectively responding to any number of potential incidents, specifically defining the organization, roles, and responsibilities of all respondents, establishing authority for making major decisions, and documenting communication flows and notification procedures.
IR playbook customization. Present playbooks with step-by-step instructions on how to respond to specific types of cybersecurity incidents.
Strategic threat assessment. Review key assets to characterize threat events by the typical attackers, the likely infection vectors, and the techniques and procedures that adversaries employ.
Dark web search services. Use X-Force IRIS Vision Retainer to search the dark web for specific areas of interest by using key works and analyze the results to provide actionable preventative defense.
Benefits of X-Force IRIS Vision Retainer include:
Access to trained specialists in the industry that possess focused experience with major breach investigations
Access to the skills to help your organization manage the most critical incidents and breaches
Capability to potentially reduce risks and exposure to cyber threats by using a more proactive and preventative approach
Delivery of actionable security intelligence about adversaries
Globally available specialists, assets, and delivery
A strategic team to implement a robust security solution.