IBM Security Announces New QRadar Integrations with AWS Security Hub, New AWS Security Consulting Services

By Rich Telljohann posted Wed November 28, 2018 01:48 PM


IBM Security is proud to announce the expansion of QRadar’s security analytics capabilities by integrating with the new AWS Security Hub. AWS Security Hub’s new compliance and security alerting capabilities, combined with QRadar’s broad analytics coverage across cloud and hybrid environments automates insights and SOC operations for our mutual customers. Additionally, IBM Security is announcing new AWS Quick Start Security Consulting services to advise customers on adopting native AWS Security capabilities in alignment with enterprise security.  

IBM QRadar and AWS Security Hub

IBM QRadar SIEM supports AWS Security Hub via an integrated system of analytics and real-time defenses to give security teams extended visibility into high-priority security alerts and automate compliance checks on a single SOC dashboard. By integrating with AWS Security Hub’s Amazon Findings Format (AFF), QRadar can optimize aggregation of events across multiple AWS security capabilities, instances and AWS Partner Network security solutions for deeper security analysis and context across the broader hybrid environment. This consolidated view of actionable graphs and tables enables security analysts to drill-down into AWS event data for faster, more accurate threat detection and response, while improving compliance posture.

This powerful integration is bi-directional, with QRadar escalating security findings back to the AWS Security Hub dashboard delivering security insights impacting our customers’ AWS infrastructure and applications. 

This QRadar support for the AWS Security Hub will be delivered via the QRadar Cloud Visibility App, and the IBM QRadar Content Extension for Monitoring Amazon AWS, both available to download at no charge in the IBM Security App Exchange. This enhances QRadar’s existing support of AWS Security, which includes CloudTrail and GuardDuty. QRadar support for AWS Security Hub is provided by both QRadar on AWS and QRadar deployed on premise.  

AWS Quick Start Security Consulting Services

IBM continues to invest in helping organizations achieve secure hybrid cloud environments. IBM Security is pleased to introduce new AWS Quick Start security consulting offerings. Clients can engage IBM’s deep security expertise to align AWS native security tools into their enterprise security process. The new AWS-specific consulting offerings further strengthen IBM Security as an AWS global integrator alliance partner. IBM’s X-Force Cloud Security Services for AWS also includes MSS, X-Force Threat Management, QRadar for AWS, Data Security solutions for cloud, compliance solutions and extensive expertise across 7 security competencies.

New AWS Quick Start Security Consulting offerings:

1)         Integrating AWS GuardDuty and security operations Quick Start

2)         Establishing Cloud governance / policy review in AWS Quick Start           

3)         Leveraging AWS Guard Duty and Lambda Quick Start

4)         Establishing Secure Configurations in AWS Quick Start

5)         Framing a Cloud Security Architecture in AWS Quick Start

To learn more about these AWS + IBM Security products and services, please visit the IBM Security booth #2909 at AWS re:Invent and learn more about the joint solutions here.