News
Illumio Announces Incident Response Partner Program and New Product Features to Fight Ransomware
April 2023 by Marc Jacob
Illumio Inc. announced its new Incident Response Partner Program designed to help organizations respond, contain, and recover faster during ransomware and other breaches. The Incident Response Partner Program is already responsible for successfully minimizing the impact of dozens of active ransomware attacks around the world by bringing Illumio’s Zero Trust Segmentation (ZTS) Platform into the practice of leading digital forensic and incident response (DFIR) providers. With the Illumio ZTS Platform, response teams can gain immediate network visibility, restore operations quicker, and prevent reinfection – reducing the risk from and impact of a cyberattack.
On average, it takes 277 days to identify and contain a breach and the average cost of a data breach is now $4.35 million, according to IBM’s ‘Cost of a Data Breach Report.’ During the recovery process, attackers are often still active in the environment, which historically prohibited organizations from bringing systems back online. Now, by deploying Illumio ZTS into the active breach, DFIR teams can quickly see risky connections and halt all traffic between infected endpoints and servers.
Providers typically use Illumio ZTS alongside endpoint detection and response (EDR) tools, increasing EDR’s allotted time to detect threats, with no disruption to the DFIR process. Additionally, Illumio ZTS is customizable for the unique requirements of each provider and can be pre-configured based on the tools providers use during an active breach. DFIR providers can deploy the platform within an hour either as a fully managed or standalone service. Illumio offers DFIR providers:
• Immediate visibility into unfamiliar networks
• Increased speed of recovery by prioritizing the restoration of an organization’s most critical operational functions
• Segmentation that doesn’t touch the client’s physical network and removes the need to create VLANs or use firewalls, simplifying and speeding up response, containment, and recovery
• A 24/7 on-demand technical support team experienced in managing active breaches
• Complete confidentiality in all engagements
New Illumio ZTS Dashboards Simplify Tracking and Improve Risk and Resilience Factors
In addition to Illumio’s Incident Response Partner Program, Illumio is continuing to innovate to help customers take a proactive approach to ransomware. New dashboards and an improved user interface (UI) in Illumio ZTS make it easier for customers to manage their Illumio deployments and reduce their risk from the next cyberattack.
The dashboards help organizations:
• Better prepare for and protect themselves against ransomware by identifying which ports and workloads are at critical, high, medium, and low risk and visualizing the number of protected and unprotected workloads. This makes it easier for organizations to prioritize and determine next steps in their ZTS strategy.
• Save time and accelerate their Illumio ZTS deployment by illustrating how many workloads Illumio is deployed on and ensuring all devices are responding as expected. These easy-to-understand insights into their overall security posture help security teams identify the next steps to quickly improve their security policy and further build cyber resilience.
