Illumio partners now have access to the company’s new Incident Response (IR) Partner Program.

The program aims to help organizations respond, contain and recover faster during ransomware and other breaches. It’s already responsible for successfully minimizing the impact of dozens of active ransomware attacks globally. It brings Illumio’s zero trust segmentation (ZTS) platform into digital forensic and incident response (DFIR) providers’ practices.

With Illumio‘s ZTS platform, response teams can gain immediate network visibility, restore operations quicker and prevent reinfection. That reduces the risk from and impact of a cyberattack.

Enabling Illumio Partners During Data Breaches

Ben Harel, Illumio’s head of IR and managed services, said customers have always used Illumio to prevent data breaches from spreading.

Illumio’s Ben Harel

“What is different with the IR Partner Program is that we are deploying Illumio into live data breaches alongside specific partners,” he said. “The IR Partner Program is a formalization of that use and expands the offering to additional partners to bring faster response, containment and recovery to more organizations.”

During the recovery process, attackers are often still active in the environment. That historically prohibited businesses from bringing systems back online. Now, by deploying Illumio ZTS into the active breach, DFIR teams can see risky connections and halt all traffic between infected endpoints and servers.

“Illumio is deployed into live data breaches as the restoration and forensic efforts begin,” Harel said. “We enable partners with a dedicated team of breach experts that work alongside the project managers and different parties to assist in restoring operations quicker by utilizing Illumio.”

Illumio offers DFIR providers:

Input from Illumio Partners Critical

Partner input is critical for the development of any program, Harel said.

“We have a team with many years of IR experience in the space that has been on the other side and has experienced what it’s like to be in the trenches of recovery,” he said. “In addition, we have tweaked the program using input from some of the best DFIR and recovery firms in the business.”

The program will provide customized access to Illumio‘s product designed for the workflow of DFIR and recovery teams, Harel said.

“Every firm runs engagements a little differently,” he said. “As part of onboarding, we collect and build a customized IR version of our product. In addition, we provide the product 90 days free during breach engagements.”

In addition to the new program, Illumio continues to innovate to help customers take a proactive approach to ransomware. It has added new dashboards and an improved user interface (UI) in Illumio ZTS. That makes it easier for customers to manage their Illumio deployments and reduce their risk from the next cyberattack, the company said.