June 19, 2017 By Daniel Donhefner 3 min read

This week, we are celebrating here in Poland and, in truth, across our wider European and global security team. We are proud and pleased to announce the official opening of our newly refurbished and greatly expanded X-Force Command Center in Wroclaw, Poland, the latest addition to IBM’s global X-Force footprint.

Since 2012, IBM has operated a highly successful and capable security operations center (SOC) in Wroclaw. This has been rehoused in a facility with three times more space than the original. It allows us to expand our team of 160 people here, which is set to grow by 20 to 25 percent, and also gives us the space to host clients and partners who wish to see how our teams keep their businesses safe.

IBM Expands Its X-Force Command Center

This advancement from an IBM SOC to one of the X-Force Command Centers is an exciting one. It will enable us to collaborate at a deeper and more intricate level with the IBM X-Force best-of-breed global infrastructure and world-renowned research team. It also introduces new levels of cognitive security tools and services. The center, by default, operates as part of the global Managed Security Services (MSS) infrastructure, which delivers to clients who prefer a fully Europe-based service.

The staff in the Wroclaw X-Force Command Center comprises our existing security analyst team, in addition to several newly hired experts. We have forged many great collaborations in Poland with various academic institutions, training technical and nontechnical staff in cybersecurity business and skills to ensure a top-quality local supply of skilled workers.

A European Focus

Our investment in the new Wroclaw Center is designed to provide a global MSS capability to our customers based in the European Union (EU). With various data protection rules and client needs, it is important to provide as much flexibility as our clients require. Our regular services will be delivered through a link from our global network, where expertise is shared and analysts from our centers work with clients. The network is staffed by more than 1,400 security professionals who provide around-the-clock service to clients.

We also have two data centers based in the EU to ensure that data never leaves the jurisdiction and the work is carried out by only European teams. The data is managed with no interruption to service, so our teams are fluid, moving and learning from one project to another over our global network while retaining compliance with regulations and clients’ wishes.

The center will also act as the hub in the company’s global network for General Data Protection Regulation (GDPR) expertise and specialized services, helping organizations respond to data breaches and security incidents in a compliant manner.

Our first clients are currently using the European-dedicated service and we look forward to providing this option to more. Clients that moved from global to European delivery have experienced no difference in terms of customer experience. For other clients who do not need the full service, we share data with the global network in accordance with Privacy Shield rules. Clients can also include EU Model Clauses for data privacy when using the global service.

Cognitive Capabilities

One of the most exciting new functionalities offered from Wroclaw is the IBM Cognitive capability, based on tools such as QRadar Advisor with Watson, which transforms the center into what we call a Cognitive MSS Center. This allows us to quickly analyze billions of data points and make intelligent decisions about threats as they appear.

The center is also piloting the new Havyn interface for cognitive security services. This voice-powered interface uses Watson’s speech recognition and natural language processing to construct queries for QRadar Advisor, then acts as an assistant to the analyst when monitoring a situation or looking for incident-related data.

Havyn also facilitates the interaction between the IBM X-Force Command Center and the client team, again through voice-powered interfaces, which provides immediate and proactive access to relevant data. This allows IBM clients to easily monitor their security posture and risk level.

The Best MSS in the Business

Today, we are also celebrating IBM’s recent recognition as the best MSS provider in the business at the SC Media awards, held at Infosecurity Europe in London this past June.

With these modernized and improved powers, as well as the world-class skills of our staff and the connections to the X-Force network, this evolution is a momentous step for the IBM team in Wroclaw. I look forward to its performance being a source of pride not just locally, but for the whole IBM client and staff community in Europe and beyond.

Discover How IBM X-Force Command Centers Are Changing Security

More from

When ransomware kills: Attacks on healthcare facilities

4 min read - As ransomware attacks continue to escalate, their toll is often measured in data loss and financial strain. But what about the loss of human life? Nowhere is the ransomware threat more acute than in the healthcare sector, where patients’ lives are literally on the line.Since 2015, there has been a staggering increase in ransomware attacks on healthcare facilities. And the impacts are severe: Diverted emergency services, delayed critical treatments and even fatalities. Meanwhile, the pledge some ransomware groups made during…

AI and cloud vulnerabilities aren’t the only threats facing CISOs today

6 min read - With cloud infrastructure and, more recently, artificial intelligence (AI) systems becoming prime targets for attackers, security leaders are laser-focused on defending these high-profile areas. They’re right to do so, too, as cyber criminals turn to new and emerging technologies to launch and scale ever more sophisticated attacks.However, this heightened attention to emerging threats makes it easy to overlook traditional attack vectors, such as human-driven social engineering and vulnerabilities in physical security.As adversaries exploit an ever-wider range of potential entry points…

4 trends in software supply chain security

4 min read - Some of the biggest and most infamous cyberattacks of the past decade were caused by a security breakdown in the software supply chain. SolarWinds was probably the most well-known, but it was not alone. Incidents against companies like Equifax and tools like MOVEit also wreaked havoc for organizations and customers whose sensitive information was compromised.Expect to see more software supply chain attacks moving forward. According to ReversingLabs' The State of Software Supply Chain Security 2024 study, attacks against the software…

Topic updates

Get email updates and stay ahead of the latest threats to the security landscape, thought leadership and research.
Subscribe today