Consumer IAM Services Adoption Strategy

Solution Presentation

Tushar Haralkar
Country Technical Sales Leader - IBM Security Software
India / South Asia Region
Consumers
expect
frictionless
experiences,
where security is
assumed
Using progressive trust will reduce friction
across the experience
Trusted
Continuous and
ongoing usage of
apps/services

Validated
Use established
credentials to
authenticate

Registered
Level of context

Register for app and

become an authorized
user, provide consent

Engaged
Explore new
relationships

Anonymous
Learn about the app or
service

Establish trust Sustain trust

Confirm trust

Stage in digital lifecycle 3

Getting Consumer IAM right can impact your
ROI and brand trust

of companies that improve of consumers say a good of users abandon an

customer experience experience is key in application after one use
report increase in revenue influencing brand loyalty

Seize the opportunity to build a stronger, omnichannel

consumer identity and access management (CIAM)
program for the future

4
Source: http://info.localytics.com/blog/25-of-users-abandon-apps-after-one-use
https://www.forbes.com/sites/blakemorgan/2019/09/24/50-stats-that-prove-the-value-of-customer-experience/#299d9bb94ef2
https://www.prnewswire.com/news-releases/new-research-from-dimension-data-reveals-uncomfortable-cx-truths-300433878.html
What we’re hearing
from our clients

Help me...

Support consumers To engage, build, and Get to market faster, Create an on-demand
with a seamless and manage customer support digital CIAM program for
frictionless customer relations and brand transformation with repeatable operations
journey trust security by design

5
Solution:
IBM’s turnkey Consumer IAM
program
enables a personalized, omnichannel
and secure interaction between
consumer and brand.

6
The CIAM Platform Blueprint
IDP’s (Social Providers) DATA ENRICHMENT
- Identity Insertion
- Profile Augmentation - 3rd party Data Feeds
- FIDO 2 (Profile Data) - Procured Data Sources

BUSINESS APPLICATIONS

- Campaign Management
Consumers - CRM / ERP Systems
- Engagement Management
Consumer Identity
Authentication and Access Management
& Authorization Platform (CIAM) Customer Profiles
IT DATA LAKE
IoT Devices
- Business Intelligence
- Data Insights
- Customer Journey Analytics

Standard Capabilities:
Ø Self Registration
Ø (Social) Login IAM PROVISIONING Cybersecurity Monitoring
Ø Single-Sign-On
Ø Preference Mgmt. - Employee/Call Center - Threat Scoring
Identity Provisioning - Security Insights
Ø Consent Mgmt.
Ø Multi Factor Auth (MFA)
The IBM CIAM Platform Product Suite
IBM Security Verify Trust –
Fraud Protection
IBM Security Verify Governance and
IDP’s (Social Providers) DATA ENRICHMENT
Compliance with IBM
Guardium
- Identity Insertion - 3rd party Data Feeds
- Profile Augmentation - Procured Data Sources

BUSINESS APPLICATIONS

- Campaign Management
Consumers - CRM / ERP Systems
- Engagement Management
Consumer Identity
Authentication and Access Management
& Authorization Platform (CIAM) Customer Profiles
IT DATA LAKE
IoT Devices
- Business Intelligence
- Data Insights
- Customer Journey Analytics
Standard Capabilities: IBM Security Verify SIEM Integration
Ø Self Registration
Ø (Social) Login
Governance
IAM PROVISIONING
IBM QRadar
SIEM FEEDS
Ø Single-Sign-On
- Fraud Scoring
Ø Preference Mgmt. - Employee Identity
- Security Application
Ø Consent Mgmt. Provisioning
Insights
Ø Multi Factor Auth (MFA)
Making a CIAM
program turnkey
Driving business value
though repeatable and
scalable services
Product
– Cloud Based Identity and
Access Solution
– Trust Assurance Assessments
– Cyber Security Monitoring
– Data Governance
– Analyzing and Reporting
Enterprise Design Consulting
Design – IBM Proven Method & Framework
Thinking – Alignment of Stakeholders
– Collaborative Requirements Gathering
– Results with unified buy in
UI/UX Design
Solution Design Platform Services
– Strategic Consulting
– Configuration Services
– Integration Services
– Migration Services
– Web / Mobile Development
Prime Product Selections Global Delivery
Integrated Services
– Managed Platform Services
– Service Catalog Management
Driving operational excellence – CIAM Vendor Management
pro-actively serving business needs – CIAM On-Demand Response
9
Manageable CIAM building blocks
for a structured approach
Our modular approach ensures all stakeholders get aligned
throughout the full lifecycle of the Consumer Engagement

Capture: Engage: Manage: Admin:

– What is the use case that – How does a user – How can the users manage – How do we provision a new
we are supporting? authenticate? their consent? website or app?

– How does the User – What kind of level of security – What level of profile self – What kind of reporting is
Experience look like? is required service is available? available?

– What is the registration – Is MFA needed?, What kind – Which systems can access – How can we set policies
experience? of verification? which attributes? around fraud?

– What attributes are you
looking for?
IBM Security / © 2019 IBM Corporation
– Are there multiple domains
that require SSO?
– How do we ensure profile
deletion in all systems?
– How do we integrate
business applications to
utilize the profile data?
1
0
IBM Security
Consumer IAM Services
On-demand, personalized, and trusted experiences between consumer and brand

1
IBM Security / © 2020 IBM Corporation
1
IBM can help organizations deliver a seamless and secure
consumer experience, from first interaction to brand loyalist

CIAM Adoption Strategy CIAM Accelerated Deployment Managed Platform CIAM On-Demand

Design an outcome-focused Optimize your investment Enhance your operational Expand integrations with prioritized
CIAM program using Enterprise by complementing the existing efficiency with improved business continuous use case support in an
Design Thinking marketing program with a solution processes and a fully managed on-demand model for CMO and LOB
that best fits your needs CIAM platform

Integration
Consumer Process Technical Design On-boarding Process Clean-up and
Envision (SIEM, ITSM,
IAM roadmap architecture architecture and Build assets deployment lock down
etc.)

Participating IBM Security Verify A successful consumer IAM program

Technology requires a security strategy that
Partners
combines people, process and
technology.

IBM Security / © 2020 IBM Corporation

12
CIAM Offering Key activities and deliverables per phase
CIAM Adoption Strategy
Key activities
Core Platform:
• Current Landscape Review
• Establish Use-Case Requirements
• Develop Target Architecture and Integrations
• Develop Implementation Plan
UI/UX (web / Mobile / IoT)
• Establish Data Capture Requirements
• Validate Wireframes
• Confirm Flow diagrams
Shared Service Model Definition
Key Deliverables
Core Platform:
• Documented Current State Infrastructure and
PII Usage
• Documented Use Case & Capability
Requirements
• Conceptual Target Architecture and
Integrations
• Conceptual Implementation Plan
UI/UX (web / Mobile / IoT)
• Documented Data Capture Attributes
• Confirmed Wireframes and Flow diagrams
Shared Service Model Blueprint
4 12 weeks Ongoing Continue
weeks CIAM Accelerated Deployment Managed Consumer IAM CIAM-On Demand s
Design: Platform and Integrations • Business Consulting on new Use Cases
• Deployment Workshop (incl. Validate Design) (CIAM CTO role)
• Incidents and problem management
• Design Data Migration Strategy • Business Intake New Service / Campaign
• Service Requests
• Platform and API Training • Requirements description
• Change Management
Deploy:
• Effort estimation
• Provisioning • Minor Enhancements
• Embedded Adopt, Deploy, Manage Process
• Configuration • Vendor Management
• Branding • Consumer Experience Reporting and
Quarterly
Analytics
• Export Services
• Performance test / optimization
• Integrations • Security and Compliance Management
recommendations
(Managing regulation changes of the platform)
• Vulnerability analyses recommendations
• Audit Support
• Development and Test Environment Support levels 8x5, 16x7, and 24x7 • New platform configurations
Provisioning
• Incident and problem management • New Application integrations
• Core CIAM Platform Configure
• Service requests • New Project onboarding
• Email Service Configuration
• Registration/Social Configuration • Change management • Ongoing Documentation
• Translation File (all customer facing text) • Minor enhancements
• Data Migration • Vendor Management
• Data Export Location
Quarterly
• Production Environment Provisioning
• Performance / Optimization report
• Migrate Test to Production
• Document Final Setup • Vulnerability analyses report
• Sign Off
13
Our Understanding of Your Requirements
v Bank would like to establish a comprehensive and holistic assessment of
their current Consumer Identity and Access Management (CIAM)
capabilities and practices.
v This is intended to compare the current state of CIAM people, processes,
technology and governance against future-state business needs and
industry standards.
It is understood that future initiatives will encompass
technology implementation, process changes, and
building out the CIAM Team capabilities.
Management of the CIAM solution is also available,
with incremental optimization and advanced
integrations.
People

v Bank current applications have their own authentication and

authorization which leads to disparate credentials. Hence, there is a need
for unified authentication and authorization framework for managing
customers, merchants, business partners, etc..
Governance Process

v Bank would like to prioritize the integration of marketing use-cases into

their CIAM program to align to their security requirements and business
goals. Therefore defining target systems include servers, applications,
platforms, network devices and IoT endpoints, located on-premises or in
Technology
the cloud.

v Bank needs an understanding of the target CIAM processes and

capabilities required to meet their Business and Compliance requirements

IBM AND <CLIENT> CONFIDENTIAL

Current Consumer Identity Challenges at Yes Bank
Consumer Identities are at the center of all Digital Engagements between Consumer
and Brands
Growing Digital Identity Security
Applications
• Application modernization • In Digital world, how to identify
with no unified authentication if it is a legitimate user, bot or
and authorization framework fraudster
• No frictionless experience for
customers accessing • No visibility on the consumers
different products and device risk / hygiene
services

Marketing to One Data Governance

• Multiple views of customer
• Silos of customer data
• Un-personalized campaigns • Comply to Consumer data
protection regulations
• Avoid Penalties for non-
compliance
Consumer Identity is not easy
Profile data needs to be used by various systems creating backend challenges
while maintaining a low friction customer experience

ID

IAM Strategy and Plan Method Overview
The execution of the method is consistent for all engagement types
Pre-Assess
1 2
1
Engagement Start-up
1 Engagement Start-up
• Initiate project conference call to
define objectives
• Prepare data collection
questionnaire
• Identify key business drivers and/or
dependencies
• Review roles and responsibilities
• Confirm project objectives
Pre-Data Collection
Data collection questionnaire
Validation of CIAM scope
Global Security CONSULTING BASE METHOD OVERVIEW / IBM CONFIDENTIAL
CONSULTING METHODS > STRATEGY AND PLAN
PHASE 1 PHASE 2 PHASE 3
Assess Strategize Plan
4 5 6 7 8
Use Case Selections
CIAM Posture
Findings from
Prioritize Use
Conceptual Future State Cases for Recommended
3 Views Model Adoption Approach
Strategy
Business
Objectives & Needs
2 CIAM Posture 5 Conceptual Views 7 Prioritize Use Cases for CIAM
• Prepare and conduct interview/workshops • Apply Design Thinking framework • Organize recommendations for use cases,
• Capture current state findings profile data usage
• Develop framework for UI/UX interface and
Business Objectives & Needs prioritization of CIAM use cases • Create solution approach
3• Prepare and conduct interview/workshops • Review and validate conceptual views • Review/revise to meet stakeholder
6
• Review stakeholders’ business and operational objectives
requirements, regulatory policies, and consumer Future State Model 8
• Develop approach for processes, Approach
access impacts on brand
4 consumer profile data usage • Sequence prioritized use cases
Findings based on Use Cases
• Consolidate assessment findings • Develop approach for future state summary • Document high-level functional architecture
and adoption approach
• Review UI/UX, workflows, profile data attributes
Current State Assessment Future State Summary
Adoption Strategy Approach
Current state findings and PII usage Document prioritized use cases, UI/UX
Deliver the Approach Report
Profile data capture requirements and use wireframes, and flow diagrams
Deliver Executive Presentation
cases Deliver draft CIAM Strategy Approach Report
9/4/2
3
Offering Deliverables

CIAM Adoption Strategy Services Deliverables

Name Description Format
A consolidated report detailing:
• Current state CIAM maturity
• Future state model for CIAM ecosystem for the specified use
cases
Final Report • CIAM strategy approach PowerPoint
• CIAM prioritized use cases
• conceptual future CIAM functional architecture
Included in this report will be recommended priorities for UI/UX
development, use cases, CIAM platform suggestions.
For the specified use cases, define the required customizations,
Executive Briefing Presentation make the high-level functional architecture and conceptual UI/UX PowerPoint
designs

18
Adoption Strategy Key activities and deliverables per Method
0.5
Pre-Assess week
Key activities
• Review scope of the CIAM project
• Schedule the project initiation conference call
• Facilitate Project Planning conference call
• Prepare document repository
• Send questionnaires and related documents to
Bank
• Review <Client> environment, organization,
and completed questionnaire identifying any
missing information
• Discuss key business drivers or dependencies
Key Deliverables
• Confirm stakeholder participation from
business units: Marketing, IT, Security,
Operations
• Confirm questionnaire receipt and clarify any
uncertainties of purpose or data requested
1 1.5
Assess week
• Conduct 3 workshops for up to 2 hours each to
Inventory Yes Bank landscape of systems
requiring management of consumer profiles,
including applications, databases, API
endpoints, devices, profile data stores and
communication channels.
• Conduct up to 3 follow-up interviews to gather
additional information identified in workshops
• Review and document as-is processes for
CIAM processes and systems identified, UI/UX
wireframes, and use cases
• Review business and operational
requirements, regulatory and locally-defined
security policies, frameworks, and standards
for impact on the consumer access
management solution and onboarding
prioritization, integrations
• Documented Current State Infrastructure and
PII Usage
• Documented Use Case & Capability
Requirements
• Documented UI/UX and Profile Data Capture
Attributes
Strategize weeks
• Apply Design Thinking framework to determine
prioritization for to-be use cases, capability
and functionality for a future CIAM program
• Develop framework and prioritization for
onboarding & integration of UI/UX interface,
wireframes, systems and applications into
centralized consumer access management
program
• Identify CIAM applications, use cases and
communication channels that will be prioritized
for integration into a CIAM solution.
• Recommend approach for processes,
consumer profiles, of the future state and in-
scope use cases for CIAM solution
• Documented Use Case & Capability
Requirements, conceptual Target Architecture
and Integrations
• Confirmed UI/UX Wireframes and Flow
diagrams
• Deliver draft CIAM Strategy Approach Report
with findings for Yes Bank review
1
Plan week
• Organize the findings, requirements, use
cases, recommendations, architectural
decisions, solution approach along with Bank
input, document in a draft CIAM Strategy
Approach document
• Conduct a meeting to review the draft CIAM
Strategic Approach document with the Yes
Bank Stakeholders for understanding and
feedback
• Update the CIAM Strategy Approach based on
Bank feedback and develop a single working
revision of the CIAM Strategy Approach
document based upon review and input from
Yes Bank
• Deliver the updated CIAM Strategy Approach
document, turn over the document to the Bank
Project Manager for sign-off
• Client Milestone: CIAM Strategy Approach
document
• Create a CIAM Strategy Approach executive
presentation
• Deliver the CIAM Strategy Approach Report
• Executive Presentation
19
IBM Security Verify Consumer IAM (CIAM)
Implementation High Level Plan

*Note: This is a simulated high level implementation plan. Based on the detailed
understanding of the current state at bank, the actual revised plan will be shared

2
0
CIAM – Discovery Phase
Key Activities Key Deliverables
• facilitate a Requirements Gathering and Planning Workshop at your location, for up to ten of your
participants for up to two hours, on a mutually agreed date and time to:
• Planning and requirement analysis document will be owned by
• review your security documentation including security policies, strategies, standards, and business
Digital Banking app team and IBM Security Verify Access team
processes. Such review typically includes up to ten documents of up to 20 pages per document; will provide inputs to it.
• review your CIAM requirements, and mobile app assets;

• review the availability and value of sources of authoritative information; and

• review existing CIAM infrastructure, as applicable, to determine its role in the final CIAM solution;

• conduct assessment interviews with your key managers and staff. The interviews will be Bank / Partner Responsibility
conducted remotely, via teleconference, for up to one hour each. Such interviews are designed to:

• verify your current documented CIAM environment (if applicable), and mobile-based infrastructure;
• provide documentation (such as security policies, strategies, standards, and
documented business processes) related to CIAM in your environment;
• identify current and recommended CIAM administrative processes; and

• identify business challenges you anticipate being addressed by the proposed CIAM solution;
• identify and schedule your personnel for participation in workshops and
interviews as required;
• identify the user consolidation / migration requirements from existing repositories to new CIAM
framework;
• schedule conference and meeting rooms for workshops and interviews as
• identify the integration requirements with your digital mobile banking app; required; and
• identify any MFA requirements;
• provide access to your personnel (for example, system administrators,
• document Delivery Partner’s findings in a Planning document; network administrators, and business process owners) on a timely basis to
• review the draft document with your Point of Contact by telephone or other electronic means; provide detailed information needed to create the Architecture and System
• perform one revision of the Planning document, if required, and deliver the final Planning document Design documents; and
to your Point of Contact; and

• conduct a review of the final document for up to ten of your participants for up to two hours. Such
review will be conducted remotely or onsite, as mutually agreed.

21
CIAM – Sprint & Testing
Key Activities Key Deliverables
• document the conceptual design of the proposed ISAM solution
• Architecture document
• install and configure required middleware, user registries, databases, and applications
required to support the IBM Security Verify Access ; • System Design Document
• configure the ISAM system for storage of your user, group, and configuration data; • UAT support
• configure ISAM groups;
• Production rollout
• import user data from your authoritative, data sources, into IBM Security Verify Access
repositories and assign them to groups;

• digital certificates for communications with protected objects, LDAP servers, IBM
Security Verify Access servers, and related application management servers;
Bank / Partner Responsibility
• IBM Security Verify Access servers for communications with policy and LDAP servers;
• provide all hardware and software components for the CIAM system;
• junctions to protected objects;
• provide, install and configure all load balancing and failover network components as
• ACLs to control access to the protected objects;
required;
• Advanced Access Control configuration for OTP;
• provide daily backup and recovery services for each of the Web access manager
• logging and auditing on each server to specify log locations and enabling auditing; server systems and data;
• a single administrative domain; • provide network support to facilitate additions and modifications to existing network
• perform functionality testing for capabilities required for your environment. infrastructure required to support the new Web access management systems;
• configure the IBM Security Verify Access system for storage of your user and group • procure and install SSL certificates as required;
data;
• manage DNS entries for the CIAM system components;
• import user data from your authoritative, data sources, into IBM Security Verify Access
repositories and assign them to groups; • Provide remote connectivity for implementation teams
• SIT, UAT and Production rollout

22
CIAM: Scope
Overview
The scope for providing centralized CIAM solution is as follows:
• Develop core user Access management framework for the consumer user
entities
• Access Management infrastructure will be used by approximately 2 million
users that will exist in LDAP.
• Implementation of IBM Security Verify Access v10 for providing
authentication, authorization, web SSO and MFA
• Access Management infrastructure will be architected for high-availability
in 1 production environments
• Access Management solution shall be deployed on Yes Bank data centre
• Access Management Solution will be deployed in 3 environments - DEV,
TEST, & PROD
• Consolidation of user repository to have single source of customer data
for authentication and coarse-grained authorization
- Recommendations for any data cleansing to Yes Bank
- Migration from one existing user repository
- Establish single identity profile for all customer users with basic info as
required
• Streamlined & seamless access management to the mobile channel
- Integration with one digital mobile banking app
- Authentication support for digital mobile banking app
- Centralized Authentication & Coarse-grained authorization
- Session Management
- Single Sign-on
• Social Id Integration
- Integration with up to two social id platforms
- Support for sign-up using Social Id to fetch profile data
- Support for Login using Social Id
• Support of user account administration via exposed Access Management
API’s
- API’s for Creating, Reading, Updating & Deleting user accounts
- API’s for Authentication, Authorization
- Digital mobile banking app would call exposed API’s
- Digital mobile banking app would implement user self-service – sign-up,
forgot/change password, profile management capabilities using the IBM
Security Verify Access APIs
23
Functional
Based on our understanding of Yes Bank requirements we
will cover the following functional use cases for the digital
mobile banking app:
• Understand the customer on-boarding and interaction
journeys for the digital mobile app
• Identify the CIAM interaction points as part of the digital
mobile app customer journeys and define the flows
• Define a customer identity profile in under lying
repository that accommodates the current and future
apps
• Define customer registration flows
• Define customer authentication flows
• Define customer self-service to manage customer
identity profile and any related information
• Define customer credential management
• Define multi-factor authentication scenarios and types
to improve the level of security assurance
• Define Single Sign-On scenarios
• Define password reset and change flows
• Define the audit logs to be provided
• Migration of existing users from current Yes Bank
application platform to the new platform
Technical
• Project kick-off and initiation workshop including:
• Define project plan, approach and timelines.
• Define scope and prioritize business problems to solve.
• Define high-level conceptual solution architecture
overview.
• Perform assessment of current requirements
associated with the business and technical
environment.
• Implement latest version of the following IBM Security
Verify Access solution in development, test, and
production environments
• Expose the REST APIs for the following user
management functions:
- Create users
- Modify users
- Delete users
- Read users
• Implement OIDC authentication flow for integration with
new digital mobile banking app
• Implement the MFA based on one of the supported
factors available in IBM Security Verify Access to be
used for new digital banking app under which scenarios
• Implement Password Selfcare – forgot user ID and
forgot password scenario
• Expose identity context and make them available
through REST APIs for digital banking app
consumption
• Expose REST APIs for user authentication and
authorization.
CIAM: Project plan
W1 W2 W3 W4 W5 W6 W7 W8 W9 W10 W11 W12 W13 W14 W15 W16 W17 W18 W19 W20 W21 W22 W23 W24 W25 W26 W27 W28 W29 W30 W31 W32 W33 W34 W35 W36 W37 W38 W39 W40
PMO

Digital Capability Development

Discovery

Env. Build
Design
Env. Build
Design Sprint Demo

CIAM API
Development Sprint Demo

CIAM API
Development
Sprint Demo

Refinement

Integration
Sprint Demo

Refinement

Integration Sprint Demo

Refinement CS

Integration O. SIT S1 O. SIT S2 Soft-Launch

O. UAT BD
S. UAT 7 S. UAT 8

PT

Yes Bank

24
CIAM: Project plan – 1a Soft Launch
W1 W2 W3 W4 W5 W6 W7 W8 W9 W10 W11 W12 W13 W14 W15 W16 W17 W18 W19 W20 W21 W22 W23 W24 W25 W26 W27 W28 W29 W30 W31 W32 W33 W34 W35 W36 W37 W38 W39 W40
PMO

Digital Capability Development

Discovery
Env. Build
Design
Env. Build
Design
CIAM API
Development
CIAM API
Development

Refinement CS

Integration O. SIT S1 O. SIT S2 Soft-Launch

O. UAT
S. UAT 4 S. UAT 5
BD
PT

IBM VAPT 1

Yes Bank

25
 Why IBM?
• IBM is the only OEM to combine CIAM + RBA (Fraud Management) Capabilities in single Integrated Platform
• IBM Security Verify Integrated Platform is powered by AI / ML stack for prevention and detection of Digital Identity
risks that leverages multiple parameters of Anomaly detection, Velocity patterns, Known fraud patterns and
Consortium data
• IBM provides Fraud Analytics specialist services team of fraud and identity risk experts to support for policy tuning /
continuous improvement
• IBM provides Customer Success Manager (CSM) to ensure deployment is a success
• IBM is the only OEM ranked in Leader’s quadrant by Forrester Wave for Combined CIAM + RBA (Fraud Management)
Capabilities
• IBM is the only OEM ranked in Leader’s quadrant by Kuppingercole Wave for Combined CIAM + Fraud Reduction
Intelligence Platforms (FRIP) Capabilities

• IBM is the only OEM to provide complete ownership of Software + Infra + Implementation Services that helps to
achieve Cost Effective TCO and provides single accountability, reduced costs and better ROI for Yes Bank

• IBM provides bundled Trusteer Rapport solution that can help Yes bank to achieve remediation on customer's
infected endpoint by automatically blocking, removing financial malware and help to detect phishing sites
IBM AND <CLIENT> CONFIDENTIAL
Thank you

Follow us on: © Copyright IBM Corporation 2020. All rights reserved. The information contained in these materials is provided for
informational purposes only, and is provided AS IS without warranty, of any kind, express or implied. Any statement of
direction represents IBM’s current intent, is subject to change or withdrawal, and represent only goals and objectives. IBM,
the IBM logo, and other IBM products and services are trademarks of the International Business Machines Corporation, in
ibm.com/security the United States, other countries or both. Other company, product, or service names may be trademarks or service marks
of others.

securityintelligence.com Statement of Good Security Practices: IT system security involves protecting systems and information through prevention,
detection and response to improper access from within and outside your enterprise. Improper access can result in
information being altered, destroyed, misappropriated or misused or can result in damage to or misuse of your systems,

ibm.com/security/community including for use in attacks on others. No IT system or product should be considered completely secure and no single
product, service or security measure can be completely effective in preventing improper use or access. IBM systems,
products and services are designed to be part of a lawful, comprehensive security approach, which will necessarily involve
additional operational procedures, and may require other systems, products or services to be most effective. IBM does not
xforce.ibmcloud.com warrant that any systems, products or services are immune from, or will make your enterprise immune from, the malicious
or illegal conduct of any party.

@ibmsecurity

youtube.com/ibmsecurity