GRC Roll-up: IBM Builds Security Division, SharePoint Conference GRC Releases #spc11

4 minute read
David Roe avatar

GRC releases this week are dominated by the SharePoint conference, but there have been a couple of interesting acquisitions too with IBM announcing that it is buying Q1 Labs for enhanced security and what looks like the start of a serious move to develop its security division, while McAfee, recently acquired by Intel,has announced it is buying Nitro.

IBM to Buy Q1

IBM has announced that it is to buy Q1 Labs, a Waltham, Mass.-based provider of security intelligence software for an undisclosed price.

The move aims to accelerate IBM’s efforts to help clients more intelligently secure their enterprises by applying analytics to correlate information from key security domains and creating security dashboards for their organizations. Financial terms were not disclosed.

Following the close of the acquisition, Q1 Labs will join the newly-formed IBM Security Systems division.After the close, IBM intends the new division to be led by Brendan Hannigan, CEO of Q1 Labs.

Q1 Labs’ advanced analytics and correlation capabilities can detect and flag actions across an enterprise that deviate from prescribed policies and typical behavior to help prevent breaches, such as an employee accessing unauthorized information.

IBM plans to apply Q1 Labs’ analytics to drive greater security intelligence capabilities across its security products and services such as identity and access management, database security, application security, enterprise risk management, intrusion prevention, endpoint management and network security.

IBM’s new Security Systems division integrates IBM’s Tivoli, Rational and Information Management security software, appliances, lab offerings and services.

The new division will target a US$ 94 billion opportunity in security software and services, which has a nearly 12% compound annual growth rate, according to IBM estimates

ASG’s Secure SharePoint Content Integration

With the SharePoint conference in Anaheim still underway, there was bound to be at least a couple of GRC-related SharePoint announcements.

Sure enough, cloud computing vendor ASG announced the release of an advanced total content integration and enterprise archiving solution for SharePoint 2010 deployments.

ASG-Total Content Integrator (TCI) for Microsoft SharePoint 2010 offers integration capabilities by associating SharePoint content with content in other business applications, enabling enterprise-class storage and archiving.

ASG-TCI for SharePoint is designed to integrate SharePoint environments with multiple department-level SharePoint deployments and with content repositories for other business applications.

It also offers SharePoint users access to employee- and application-generated content throughout the enterprise via the SharePoint user interface, as well as offer IT the ability to store and archive SharePoint documents for long-term retention, including binary large objects (BLOB), to improve SharePoint scalability and performance.

Using Microsoft's SharePoint Designer, Business Connectivity Services (BCS) and ASG Web Parts, the ASG-TCI for SharePoint solution can integrate and deliver enterprise content within SharePoint pages.

Learning Opportunities

Axceler Demos ControlPoint 4.5

Axceler has also been busy around Anaheim and has been showcasing a couple of products from its governance, administration and migration software. In the GRC space is the recently upgraded ControlPoint.

ControlPoint 4.5 provides new benefits to those responsible for governing their SharePoint environments both on premise and in the cloud. It enables managers to prevent non-compliant activities; manage SharePoint in Office 365; make better decisions with intuitive dashboards and clean up environments before and after their migration.

Imperva Releases SecureSphere for SP

And then there’s data security software vendor Imperva, which has announced the availability of SecureSphere for SharePoint, its data security solution to help businesses protect sensitive data stored in SharePoint.

Although collaboration with SharePoint increases the value organizations get from their unstructured data, protecting broadly accessible SharePoint data from internal and external threats is an ongoing challenge.

User access rights to SharePoint data often do not align with business needs, leaving sensitive data vulnerable, and extranet and public-facing SharePoint web sites face traditional web-based threats and hackers.

SecureSphere for SharePoint features include access rights visibility, audit trail and policy control, and data owner and stale data identification. SecureSphere for SharePoint will be available in late 2011.

McAfee to Buy Nitro

Finally, McAfee, which was recently acquired by Intel, has announced plans to buy Nitro Security to create a security-information and event-management division.

The new entity will focus on security analytics and log management after Nitro is combined with McAfee’s existing security portfolio, which will give organizations greater insight into their endpoints, network infrastructure and threats targeting their networks generally.

Users can use this information via one management console to assess their enterprise and operational risk profile and security posture, analyze and institute a range of corrective actions, such as issuing new configurations, implementing new policies and deploying more recent software updates. The deal is expected to close by the end of the year.