CA makes DLP play with acquisition of Orchestria

CA this week became the latest major security vendor to pick up a data-loss prevention (DLP) provider, when it acquired Orchestria.

The deal, terms of which were not disclosed, will allow CA to integrate Orchestria's DLP technology into its identity and access management solutions.

"Organizations will now be able to consolidate and strengthen their security postures by including information-centric policies in the process of centrally managing users and roles, and their access throughout the enterprise," CA said in a news release announcing the acquisition.

The purchase jives with recent buyouts of DLP providers, in which larger security software vendors have scooped up smaller players with the goal of incorporating their data security technology into established security solutions. During the past two years or so, security bellwethers such as Symantec, McAfee and Trend Micro all have made DLP acquisitions.

"DLP technology is a feature," said Mike Rothman, former analyst and now chief marketing officer of eIQ Networks. "It's being built into content gateways and as evidenced by the Microsoft/RSA deal from late last year, it is making it's way into the server infrastructure. Symantec has similar designs for the Vontu technology they acquired."

He said the CA-Orchestria deal eliminates yet another DLP-specific provider.

"Companies that haven't been acquired at this point are going to struggle," he told SCMagazineUS.com via email on Tuesday. "In this kind of economic environment, getting a large enterprise to take a gamble on a small company, when they can get similar technology from a larger one [through partnerships], is tough to do."

And even though DLP is maturing, many organizations still are reluctant to deploy it, he added.

"The technology is still pretty complicated for a mid-market, who don't have intense compliance pressures," Rothman said.

New York-based Orchestria has more than 500 customers across 33 countries, according to the company. CA said it does not anticipate any firings as a result of the deal, scheduled to close later this month.

This is the third security-related pick-up by CA in the past three months. The Islandia, N.Y.-based vendor acquired identity management firm IDFocus in October and Eurekify, an enterprise role management provider, in November.

More in News

Privacy-bolstering "Apps Act" introduced in House

The bill would provide consumers nationwide with similar protections already enforced by a California law.

Microsoft readies permanent fix for Internet Explorer bug used in energy attacks

Microsoft is prepping a whopper of a security update that will close 33 vulnerabilities, likely including an Internet Explorer (IE) flaw that has been used in targeted website attacks against the U.S. government.

Weakness in Adobe ColdFusion allowed court hackers access to 160K SSNs

Up to 160,000 Social Security numbers and one million driver's license numbers may have been accessed by intruders.