If you are experiencing cybersecurity issues or an incident, contact X-Force IRIS to help.

Partner with the trusted advisors of IBM X-Force IRIS

Today’s reality means that organizations need to be constantly vigilant against breaches — and having a robust incident response plan in place is vital. A proactive approach offered by the IBM? X-Force? Incident Response and Intelligence Services (IRIS) team integrates security threat intelligence, incident response and remediation to help minimize the loss of revenue caused by a security incident – and provide a more comprehensive view of an attack so your organization can make the most informed decisions to defend it.

Destructive attacks

Prepare, plan, and respond to events

Destructive malware attacks are simple and execute quickly. Get recommendations on preparation and planning before a destructive malware attack occurs.

Stop ransomware in its tracks

Learn more about ransomware, how it works, prevention and removal.

X-Force IRIS solutions help you before, during and after a breach

Strategize

The services offered by the X-Force IRIS team are designed to help you before, during and after a breach so you recover faster. Each solution is infused with threat intelligence, enabling your security team to be knowledgeable about threats to your environment.

Vision Retainer

An incident response subscription service that provides direct and immediate access to highly skilled security consultants.

X-Force Command Center

Experience a day in the life of a simulated cyberattack in a live environment. Train with the world’s premier cyber special forces team to test the skills you have, and learn the skills you need to succeed in today’s threat landscape.

Managed Detection and Response

Intelligence-based defense solution that helps detect endpoint attacks in real time without relying on signatures, and disrupts them before they can penetrate your enterprise resources.

Threat Intelligence

Simplify your intelligence management with experts who can design an automated cyber threat intelligence platform to stay ahead of attacks and better understand the risks.

Plan

Before a breach

It is imperative to have solid incident response procedures in place before an attack happens. Being prepared is the first defense strategy to avoid operating in crisis mode. Planning should not be an afterthought, but well-documented and tested. With X-Force IRIS team services, your organization can identify potential threats before they strike.

Vision Retainer

IR subscription service that provides direct and immediate access to highly skilled security consultants.

Managed Detection and Response

Intelligence-based defense solution that helps detect endpoint attacks in real time without relying on signatures, and disrupts them before they can penetrate your enterprise resources.

Active threat assessment

Discovers if undetected threats exist within your infrastructure. X-Force IRIS analysts deploy network and host-based inspection technology to assess your environment, looking for anomalies and signs of compromise based on IBM’s knowledge of attack groups.

Incident response planning

Attack simulation exercises, active threat hunting and continuous threat monitoring.

Strategic threat assessment

X-Force Intelligence Services experts review your key assets to characterize threat events by the typical attackers, the likely infection vectors, and the techniques and procedures that adversaries employ.

Threat Intelligence

Know your cyber threat landscape to efficiently prepare your defenses and optimize your plan to the most-likely attackers in your industry and geography.

Respond

During a breach

What happens if you have a solid incident response plan in place, but?still experience an attack? It’s critical to investigate and put an end to the attack quickly. X-Force IRIS offers security services to help you assess the situation — and minimize the damage — with forensic analysis, malware analysis, threat assessments and more.

Vision Retainer

IR subscription service that provides direct and immediate access to highly skilled security consultants.

?

Managed Detection and Response

Intelligence-based defense solution that helps detect endpoint attacks in real time without relying on signatures, and disrupts them before they can penetrate your enterprise resources.

Threat Intelligence

Threat Intelligence, combined with our incident response services, gives you the edge you need to address incidents completely and stay ahead of attacks.

Recover

Before a breach

The worst is now over, but the recovery work is just beginning. Organizations should continue to monitor affected systems. Once the damage from an attack is contained, X-Force IRIS can help you incorporate what you’ve learned into protecting against the next attack.

Threat Impact Analysis

Protect against future attacks by taking a deep look at threat groups and your organization’s threat level.

?

Vision Retainer

IR subscription service that provides direct and immediate access to highly skilled security consultants.

?

Managed Detection and Response

Intelligence-based defense solution that helps detect endpoint attacks in real time without relying on signatures, and disrupts them before they can penetrate your enterprise resources.

Threat Intelligence

To expand beyond indicators of compromise, get high-quality, prioritized, actionable threat intelligence that allows the security story to be understood by a SOC analyst or C-suite executive.

Cloud Security Landscape Report

The latest cloud threats and best practices to defend against those threats.

Meet some X-Force IRIS experts

When you partner with our team, you have access to a wealth of skills, expertise and insight to help your company take control and transform your incident management and response capabilities. Members have consulted on hundreds of the world’s largest breach investigations across numerous industries in both public and private sectors.

Wendi Whitmore's profile picture

Wendi Whitmore

Vice President, IBM X-Force Threat Intelligence

Wendi helped create the IBM X-Force IRIS team, using her 15 years’ experience in incident response, intelligence and data breach investigations. She has worked at CrowdStrike Services, Mandiant and the Air Force Office of Special Investigations.

Kevin Albano's profile picture

Kevin Albano

Associate Partner, IBM X-Force Threat Intelligence

Kevin leads the team on threat intelligence collections, advanced threat research and information analysis. With 17 years in IT, law enforcement and security consulting, he has worked at the FBI and Mandiant.

Christopher Scott's profile picture

Christopher Scott

Global Remediation Lead, IBM X-Force IRIS

Christopher has led incident response teams for some of the largest data breach investigations and leads the remediation services team. Prior to IBM, he was at CrowdStrike Services and L-3 Communications.

Nick Rossman's profile pictures

Nick Rossman

Intel Research and Operations, IBM X-Force IRIS

Nick leads the threat intelligence teams that support clients and incident response. Prior to IBM, he worked at FireEye and the U.S. government.

Laurance Dine's profile picture

Laurance Dine

Global Partner, IBM X-Force IRIS Incident Response

Laurance has 17 years’ experience in digital forensics and incident response. He leads the IBM EMEA X-Force IRIS Incident Response Team. Prior to joining IBM, he held leadership positions at Verizon, BRG, BTG, Kroll Ontrack and the US Air Force.