Chapter 3. IBM Cloud Paks: Middleware anywhere 53
3.7  IBM Cloud Pak for Security
Every enterprise in its journey to the cloud creates challenges for the security team. What 
becomes clear is that cybersecurity does not need news tools; instead, it needs new rules. 
Security teams are overwhelmed with hundreds of thousands of events that originate from 
various sources. What they see today is that the security mechanisms are fragmented and 
spread across several tools.
3.7.1  Features
The main goal of this IBM Cloud Pak is to help organizations detect, investigate, and respond 
to cybersecurity threats faster. Also, it helps to speed up your move to the cloud by facilitating 
the integration of their security tools to generate more in-depth insights into threats across 
hybrid, multicloud environments, by using an infrastructure-independent standard operating 
environment that runs anywhere.
Key capabilities and benefits
IBM Cloud Pak for Security features the following key capabilities and benefits:
/SM590000Run anywhere - Connect security openly
IBM Cloud Pak for Security is built on an open cloud-native framework that is integrated 
with Red Hat OpenShift. As such, the solution can be deployed and run on any hybrid 
multicloud environment, on-premises, private cloud, or public cloud.
The unified interface that is provided by IBM Cloud Pak for Security assists the security 
teams to integrate data with analytic tools, and to combine that data across their cloud 
environments to spot advanced threats.
/SM590000Gain security insights without moving data
IBM Cloud Pak for Security enables enterprises to connect and coordinate with their 
security tools and data sources. Transferring data to analyze creates more complexity. 
Therefore, you can combine all data sources to uncover hidden threats and make better 
risk-based decisions while leaving the data where it is stored.
By connecting and coordinating various security tools, IBM Cloud Pak for Security assists 
the security teams in integrating data with analytic tools, which allows them to orchestrate 
and automate their security response so they can better prioritize their team's time. These 
tools often are connected with other IBM and third-party tools, such as Security 
Information and Event Management (SIEM), endpoint detection systems, threat smart 
services, Identity Manager, and software repositories. 
/SM590000Respond faster to security incidents with automation
IBM Cloud Pak for Security provides a unified interface to orchestrate responses and 
automates actions to security incidents. The use of automation playbooks assists the 
security teams to respond faster to security incidents.
By formalizing security processes and activities across the enterprise, companies can 
react faster and more efficiently, while supplying themselves with the information that is 
needed for potential future regulatory scrutiny.