As your trusted security partner, IBM Security Services simplifies security and risk with continuous, value-driven monitoring, management and intelligence backed by global expertise, local delivery, and an integrated security portfolio to protect your AWS Native cloud security controls.

IBM Security is an AWS Level 1 MSSP Competency partner and is recognized for its breadth of services across all fifteen AWS Level 1 MSSP capabilities/specializations. IBM Security is also recognized as AWS Security Services Competency partner.

IBM services provide a flexible delivery model designed to help you address your cloud workload security requirements regardless of where you are on your cloud journey. Our services include:

Secure AWS Foundation

Deploys foundational AWS infrastructure to support an automated, secure, scalable, multi-account environment based on AWS best practices.
The solution can be tailored to deploy the following or a subset of the following as desired by the customer.

• App-Data/Workload accounts: basic provisioning of instances, databases, web and app server as required.
• Basic networking: (VPC peering or transit gateways, internet gateways, NAT gateways, Route 53 config etc.)
• Identity: (directory services, IAM account policies, roles, user, groups, integrates with AWS SSO)
• AWS security services: AWS Security Hub, Amazon Macie, Amazon GuardDuty, AWS Config recorders, AWS CloudTrail, AWS IAM Access Analyzer, Amazon CloudWatch, Amazon SNS alerting, AWS Certificate Manager (ACM).
• Centralized logging and Alerting: VPC Flow logs, R53 logs, AWS GuardDuty, Amazon Macie logs, ALB, firewall logs, config history
• AWS Edge Security services: including AWS Shield, AWS Shield Advanced, AWS WAF and AWS Firewall Manager.

Cloud-Native Monitoring (selectively optional)

• Service onboarding & deployment
• Security vulnerability & threat alerting
• Advanced insight & correlation, automated runbooks & remediation, security correlation engineering support for policy optimization
• Config of new resources for cloud workload protection monitoring
• Optimizes usage of monitoring services (e.g. AWS Config, AWS CloudWatch, AWS CloudTrail, AWS Security Hub etc.)
• Monitoring and dashboards supporting Edge Security (e.g. AWS Shield, AWS Shield Advanced, AWS WAF and AWS Firewall Manager)

Cloud-Native Management of Network, Data, Identity & Web (selectively optional)

• Service onboarding & deployment, new resource configuration / backups & KPI setup
• Ongoing managed services for policy / configuration management
• Continuously enhancement of security maturity via periodic assessments and recommendation for monitoring and governance
• Proactive threat mitigation; Recommendations for threat alerts

Security Services listed above are part of a broader portfolio of services designed to help secure AWS environments and hybrid cloud environments. Services can be applied to any industry. See other AWS Marketplace listings for additional services available.