If your business uses IBM i to run its daily processes, security must always be at the forefront of your mind. As security systems are developed, so are more sophisticated means of breaching those systems. With that in mind, many companies are turning to multi-layer security tools that protect their data, and by extension, their operations. Below is a list of 8 must-have security tools to improve your IBM security system.

 1.      Multi-Factor Authentication: Multi-Factor Authentication or MFA is a key element of many business security packages, and IBM security systems are no different. Look for tools that require MFA user validation for many different IBM i services, including: Telnet 5250 sign ons, FTP servers, REXEC, FTP clients, file servers, DDM/DRDA, and ODBC. If your company already uses an authenticator app on an outside server, a dedicated IBM multi-factor authentication tool can be integrated with your existing technology to add even more protection.

 2.      Data Encryption: Data that is stored, archived, or transferred should be processed with a high level of encryption for maximum security. This not only ensures that sensitive information is protected, it also ensures that only certain departments and clearance levels are able to view it. Data encryption tools are usually packaged with data compression features that make large files, objects and reports easier to save, store, and transfer. Be sure the tool you choose has encryption features that meet your business’s security needs.

 3.      Access Management: Access management is a key factor when considering IBM i security tools. Who can and cannot access certain files, data, reports, and servers not only keeps your systems organized, but it also reduces the risk of human error and data breaches. Access management tools should allow you to grant or refuse access individually or by clearance level, as well as allowing for emergency access by certain members of staff. Some of the more sophisticated tools can even grant access to certain IP addresses and be scheduled to grant access at certain times or for a certain duration. This type of automation can save you time in the long run and make access easy and secure for the people who need it.

 4.       File Editing Protection: Who is allowed to access and alter programs, files, and reports may already be set up by your access management tools, however other programs may also attempt to access and change files to make them comply with system processes or program updates. File editing protection tools allow you to make a list of programs that can and cannot access certain data and make changes or can prompt you to when a program attempts to access a file.

 5.      Exit Point Monitoring & Intrusion Detection and Protection: IBM i exit point monitoring & intrusion detection and protection programs serve as a firewall for IBM i systems. Using exit points, they monitor and grant IBM i user access and control what users are permitted to do once access is granted. They protect user access through all IBM i communication protocols, including TCP/IP, FTP, ODBC, Telnet, etc. They can also limit IBM i access by IP address.

Protecting both native IBM i objects and Integrated File System (IFS) objects, many packages provide a simulation mode where you can first test and evaluate IBM i access controls before going live. Some packages also provide graphical business intelligence features to isolate and analyze specific events, and you can generate many pre-packaged reports using report generators and schedulers.

 6.      System Security Audit tools: IBM i security audit & compliance tools provide real-time monitoring for system-related activities. These packages can respond to potential threats in real-time by alerting IT responders or taking immediate corrective action to counter the threat. Security auditing can be filtered so that only critical events are monitored.

 IBM security monitoring tools can provide real-time transmission of IBM i (AS/400) security event information to Security Information Event Management (SIEM) systems, for integrating IBM i security data into enterprise wide SIEM solutions. Some tools also integrate monitoring information with Help Desk and Service Desk solutions such as ServiceNow, automatically generating service tickets when an IBM i security event occurs.

 Many packages include query and report generators where you can view security data in real-time or receive scheduled reports that can be distributed on a regular basis. Pre-packaged reports are often included for auditing & compliance documentation, which can be used to answer and document auditor reporting demands & prove compliance.

 7.      Anti-Virus and Anti-Ransomware: It is unreasonable to expect one security system to provide all the IBM monitoring you require when it comes to the safety and security of your hardware and software systems. That’s why additional anti-virus and anti-ransomware tools are crucial for reducing the chances of a cybersecurity attack. Because IBM i operating systems are integrated with company networks through Integrated File System (IFS) drive mapping, the risks of spreading or sharing a virus or ransomware are high. Today’s best anti-virus and anti-ransomware tools can spot potential or active threats in real time and react before any damage can be done.

 8.      Security Management and Compliance: Depending on your industry, there may be one or more regulatory or government security policies that you must comply with. Look for tools that will keep you compliant with the latest policies whether for PCI, SOX, HIPAA, or other requirements.

 These tools can audit and score your current security policies, helping you to identify security weak spots in your environment. Some packages can alert you to changes in critical IBM i security configurations, such as changes in User Activity, System Values, Network Attributes, User Profile Attributes, or Object Authorities. This type of IBM monitoring can be scheduled to happen automatically, with reports being delivered to you as often as you need.

 While not every company needs every form of security available for IBM i, a suite of programs and plugins can keep your sensitive data and your operations safe from unseen threats. By adding one or more IBM security tools to your IBM i systems, you can have peace of mind and focus your time and energy on other aspects of running your business.