ARMONK, N.Y. — IBM has introduced its new Autonomous Security for Cloud (ASC) solution, a generative AI-powered service designed to help organizations accelerate their cloud adoption while ensuring robust security and compliance. In partnership with Amazon Web Services (AWS), the ASC solution will leverage Amazon Bedrock’s generative AI technology to automate and streamline cloud security management, addressing key challenges such as misconfigurations and compliance failures.

As highlighted in IBM’s 2024 Cloud Threat Landscape report, security and compliance remain major concerns for organizations transitioning to cloud-based environments. Industries such as financial services, manufacturing, and the public sector, which are subject to strict regulations, face the additional challenge of outdated, manual compliance processes that struggle to keep pace with rapidly evolving cloud infrastructures. ASC aims to address these issues by using generative AI to automate security controls and enforce compliance policies, significantly reducing the manual effort required for cloud security management.

The ASC solution will provide continuous monitoring, proactive threat mitigation, and immediate adjustments, all while supporting a tailored approach to security by considering each client’s chosen control framework. ASC will not only automate hygiene maintenance and resolve misconfigurations but also address long-term policy drift, ensuring that cloud environments remain secure and compliant as they evolve.

“Generative AI-driven automation is a game-changer for organizations managing complex cloud environments,” said Dave Vellante, Chief Analyst at theCUBE Research. “It empowers businesses to quickly adapt, enforce, and control data policies, reducing the operational burden and mitigating risks.”

Dimple Ahluwalia, IBM’s Global Business Information Security Officer, added: “With ASC, we’re empowering organizations to manage their cloud security policies more effectively and improve their compliance posture, enabling businesses to drive greater value and transformation.”

The ASC solution is designed to assist organizations in several key areas:

• Leveraging large language models (LLMs) and retrieval-augmented generative (RAG) applications to understand and apply client-specific security standards;
• Inferring AWS-native technical controls to match clients’ workloads with regulatory requirements;
• Monitoring and deploying security controls autonomously to prevent misconfigurations; and
• Using cloud-native automation to address non-compliance issues.

IBM’s ASC solution, which will be available globally starting in December 2024, marks a significant step in the company’s ongoing partnership with AWS. It will help clients accelerate their cloud transformation by ensuring seamless security integration, driving compliance, and mitigating risks. IBM consultants, with their expertise in both cloud transformation and AWS, will offer tailored assessments, continuous monitoring, and proactive management to support the ongoing success of the solution.

For more information on the ASC solution, visit IBM’s official page here.