Item: IBM Security QRadar EDR
Rating: 8
Author: Dr. Paul Nemirovsky

Use Cases and Deployment Scope

We leverage IBM Security QRadar EDR capability to protect endpoints from cyberattacks, detect anomalous behavior and remediate security issues. The business problems we address with this service are the endpoint security of the enterprise IT systems, including network and IT infrastructure systems, automatic threat remediation, informed cybersecurity decision-making with attack visualization storyboards

Pros and Cons

Detect known and unknown endpoint security threats
Remediate these threats near real time
Automation in threat detection
Threat attack attack visualization storyboards
Alert management authomation

IBM Security QRadar EDR is expensive to use
Requires a complex and confusing training
Labor intensive to support
Complex to integrate with SOC/NOC (security operations center/network operations center) services

Return on Investment

NOCs and SOCs heavily use IBM Security QRadar EDR and IBM Security QRadar EDR reduced labor costs to identify endpoint security threats and the treat remediation
IBM Security QRadar EDR offers a consistent approach to endpoint threat identification and resolution, reduces enterprise security operations support costs
In general, IBM Security QRadar EDR enhances enterprise security posture

Easy Tasks

Threat identification
Threat visualization
Threat resolution

Automation

This automation capability offers a great promise, however, this capability still requires a lot of maturity

Alternatives Considered

We had a lot of experience with IBM security products and services, and IBM Security QRadar EDR offered a low risk approach to endhance endpoint secuirty protection.

Key Insights

Do you think IBM Security QRadar EDR delivers good value for the price?

Not sure

Are you happy with IBM Security QRadar EDR's feature set?

Yes

Did IBM Security QRadar EDR live up to sales and marketing promises?

Did implementation of IBM Security QRadar EDR go as expected?

Yes

Would you buy IBM Security QRadar EDR again?

Yes

Other Software Used

Microsoft Defender for Endpoint, VMware Carbon Black EDR

Likelihood to Recommend

Well suited: Complex, large scale enterprises with thousands of endpoints to secure, well trained security support groups, significant training budget.
Less appropriate: small and medium enterprises with limited security resources and talent. Limited training resources.

IBM Security QRadar EDR endpoint security

Overall Satisfaction with IBM Security QRadar EDR