IBM completes Guardium acquisition

IBM has completed its purchase of database security firm Guardium.

The terms of the deal were not disclosed but the acquisition will expand IBM's business analytics business, with Guardium incorporated into IBM's information management software operations.

Founder and CTO of Secerno, Steve Moyle, said: “IBM's acquisition of Guardium marks a turning point in security strategy, leading us into what we like to term 'Security 3.0'. Security needs have moved beyond a linear paradigm with a top-down approach, starting at the firewall and moving to the database, to the need for an always-on, circular approach – that encompasses many touch points and actions.

“Companies need to understand the status and security of their information at all times, protecting it across devices, users, environments and threat types. Security 3.0 starts with this protection need in mind, and dictates that we approach security from the outside in, leaving the database with a level of security that will protect data but not stymie information flow. What we expect to witness in 2010 is this level of protection being offered as a standard practice rather than an add-on service.”

Shlomo Kramer, CEO of Imperva, said: “IBM's acquisition of Guardium brings a major player into the data security market. However, in the long run, Big Blue will find that their purchase will not fully meet market needs. Today's enterprises are shifting away from siloed security products in favour of an integrated approach that protects more than just databases.

“Security professionals need to understand how sensitive data is accessed by internal and external users through business applications to block malicious insiders and hackers. IBM may have just added a new product to their extensive catalogue, but they've also created a major integration headache if they wish to fully meet customer demands.”

John Ottman, president and CEO of Application Security, said: “By acquiring Guardium at such a significant multiple, IBM has validated the database security, risk and compliance marketplace. However, this acquisition adds yet another point solution to their already disparate database tools portfolio, and such an 'rfp check box' architecture approach will not satisfy the integrated platform requirements of serious customers seeking enterprise wide data governance."

See original article on scmagazineuk.com