TheInfoPro

Written by Daniel Kennedy, Research Director for Information Security

On Oct. 4, IBM announced the acquisition of security information and event management (SIEM) provider Q1 Labs for approximately $575 million, according to The 451 Group’s M&A KnowledgeBase. This is at least the third SIEM solution IBM will have established under its umbrella, but potentially also the most expansive solution when it comes to capturing the emerging combination of log management, network monitoring and security monitoring solution space. With this acquisition, IBM plans to create a new Security Systems division led by Q1’s current CEO, Brendan Hannigan.

Originally published as a ThursdayTIP to the respondent network of TheInfoPro. Would you like to receive all of the ThursdayTIP reports when they are fist released? Sign up here for TheInfoPro’s respondent network.

This move follows Hewlett-Packard’s acquisiton of ArcSight nearly a year ago, and precedes further consolidation in the space; NitroSecurity was also announced as being brought into Intel’s McAfee last week. With this shakeup, IBM is poised to occupy the fourth spot in SIEM market share, according to the results of respondent interviews for the Wave 14 Information Security Study. HP’s acquisiton of ArcSight makes it the de facto leader of the space, with 6% of in plan implementations also going its way. EMC’s enVision product (RSA) and Symantec round out the top of the pack.

SIEM enterprise market share, 14th security study.

The most recent information security study shows SIEM installations at a fairly mature 53% in use in enterprise environments, with 6% of respondents seeing new implementations in their short-term plans and 18% having SIEM installations on the radar in their longer-term project planning. Thirty-three percent (33%) of respondents see increased spending in 2012 on SIEM solutions, with 60% projecting a flat spend into next year.

What do respondents think of the product IBM has acquired? The trend in responses bends positive:

• “Q1 Labs’ product is very innovative.”
• “[We’ll look at] enVision, Q1 Labs, Symantec.” (In response to a question about spending plans for 2012 for SIEM solutions.)
• “We are in woeful need of consolidation. We are evaluating whether to continue on with enVision or use something new. We did a POC with Q1 Labs, or [we may] go to SecureWorks as a third party.”
• “Just had this discussion; there are others, like Q1 Labs and EMC enVision.” (In response to a question about switching off another SIEM vendor’s product.)
• “The company [Q1 Labs] is innovative. They remain fresh in terms of feature set. They are a small company, and they are subject to being swallowed up! They need to keep the system ‘capable’ at all times, especially keeping up with the patches.”

Possibly Related Posts:

• Unified Communications Solutions
• Heat Index Reveals Hot Infosec Technologies
• The Ascent of 10GigE
• Storage Vendors See Mixed Q4
• High-risk Staff? Executives and IT Are Equally Risky

• Larger vendors are leading in choice for infrastructure upgrades, points to potential M&A targets
• Forty percent (40%) of organizations are increasing security budgets in 2010
• Sixty percent (60%) of organizations already utilizing cloud-based infrastructure services or intending to do so in the next two years.

New York – February 23, 2010 – TheInfoPro, an independent research company for the IT industry, today released the results of its Information Security Study, which showed that 40 percent (40%) of enterprises are planning to increase their 2010 security budgets. …

Possibly Related Posts:

• Spending on Information Security Continues to Outpace the Rest of Corporate IT According to Latest Bi-Annual Study of the Global 2000 by TheInfoPro
• Enterprises Report that Internal Change & Learning are the Biggest Roadblocks in Moving to Cloud Based IT Infrastructures
• Latest IT Market Study From TheInfoPro: F1000 Enterprises 2011 Storage Spend Continues at a Strong Pace
• TheInfoPro Server Study: Operational Efficiencies, Not Compensation, Give Larger Organizations Cost Advantage Over Midsize Companies
• Fortune 1000 and MidSize Enterprise Organizations Say Immediate Spending Includes Telepresence and Unified Communications