|
Whilst everyone works to prevent incidents from occurring, incidents will and do occur, and have to be managed.
Resilient's Incident Response Platform provides your incident Team with a secure collaborative platform, including best practice workflows to ensure incidents are managed quickly and confidentially. Resilient instantly generates detailed incident response plans tailored to each specific incident. Our Splunk Enterprise Security solution would be one of many tools to feed Resilient's Incident Response Platform. |
The Total Economic Impact of IBM Resilient
|
Download this White Paper from IBM Resilient “The Total Economic Impact™ of IBM Resilient,” conducted by Forrester Consulting to learn:
|
There are three modules of the Resilient Incident Response Platform
Security Module |
This is the foundation for response planning, management and mitigation. It’s environment ensures that staff from different divisions, such as IT, Legal, HR and Corporate Communication all have a common platform to collaborate. This is also critical for Teams that provide ‘follow the sun’ support on different Continents. It will generate incident response plans from best practices that can lead your team through the most effective path to respond. These plans can also be amended to include content related to your own past experiences.
|
Privacy Module |
For Companies that trade internationally it is important to understand your obligations for local regulatory requirements.
Based on an industry-leading knowledge base of global regulatory requirements, Resilient’s Privacy Module provides an instant, highly customizable platform for breach preparation, assessment, and management, turning a lengthy, tedious, and expensive process to one that is efficient, compliant, and always up to date. Resilient constantly monitors the regulatory landscape, updates the knowledgebase and notifies its Privacy Module as Regulations are added or amended. Without the Privacy module, you will probably approach a local legal firm to report on the current Regulatory obligations, who will create a one off report for you. This is a costly approach as it will be a point in time report, and will have to be replicated each time a major incident is initiated. |
Action Module |
There are times within an incident when you require an automated response to take place, either to pull information into the Incident Response Platform or to take an action following a workflow step within the Platform, such as quarantining infected systems, to stop any risks of damage to a network.
|
Resilient app now available in Splunkbase
|
The Resilient app integrates the Resilient Incident Response Platform (IRP) with Splunk to simplify and streamline the process of escalating and managing incidents. By escalating an alert from Splunk into the Resilient
IRP, the platform generates a detailed, incident-specific response plan that enables security team members to quickly respond. Additionally, security team members can add artifacts and other incident details to incident records, and can leverage built-in threat intelligence to gather valuable context needed to inform an intelligent and decisive response. |