Incident Response Management
IRM, is an automated tool created to help Computer Security Incident Response team (CSIRT), CERTs and SOC’s with capabilities to define the roles and responsibilities of Incident Response Stakeholders, to characterize incidents, and the relationships to policies and procedures and reporting requirements.
IRM’s backbone is automation and the solution ensure that the lifecycle of each incident and details available to all users who are involved to resolve the incident.
The Key features of our solution are
• Automated and semi-automated solution.
• Integration of 3rd tools like virus total, cuckoos’ sandbox, WhoisAPI etc.
• Centralized Incident reporting, tracking and management system
• Automated allocation of Incidents
• Multiple methods for incident reporting
• Incident correlation with analysis
• Multi-Tenancy
• RBAC to ensure granular access control
• Enterprise ready
• Varied dashboards depending on user role
• Multiple methods of Incident reporting
• Incident Case Management
• Support for multiple incident categories and sub categories
• External Incident reporting page
• Built in custom algorithms to allocate incidents to team
• Using AI/ML to analyse incidents
• Supports MITRE Attack framework
• Built in Playbooks and allow user to create custom playbooks
• Ingest data from multiple sources
IRM, has a lot of checks and balances, like you need to mandatory create one (1) user for each role and category, else the solution would not allow any entry of incident data.
Incident Response Management- IRM, is a product conceptualized, developed and created in India. It qualifies as a Make In India Product as per the Government issued Public Procurement (Preference to Make in India) Order 2017 vide the Department of Industrial Policy and Promotion (DIPP) Notification No. P-45021/2/2017-B.E.-II dated 15.06.2017 and partially modified order no No.P-45021/2/2017-PP(BE-II) was issued on 28.05.2018, to encourage ‘Make in India’ and to promote manufacturing and production of goods and services in India with a view to enhancing income and employment. Further order dated June 4th 2020, and June 16, 2020,which classifies as - Class 1 Local supplier, a supplier or service provider, whose goods, services or works offered for procurement, has local content equal to or more than 50%. Based on the above, we qualify as a Class 1 Local supplier, as the Incident Response Management- IRM has been conceptualised, created and developed in India.