Application security, Compliance Management, Network Security, Security Strategy, Plan, Budget

CA makes DLP play with acquisition of Orchestria

CA this week became the latest major security vendor to pick up a data-loss prevention (DLP) provider, when it acquired Orchestria.

The deal, terms of which were not disclosed, will allow CA to integrate Orchestria's DLP technology into its identity and access management solutions.

"Organizations will now be able to consolidate and strengthen their security postures by including information-centric policies in the process of centrally managing users and roles, and their access throughout the enterprise," CA said in a news release announcing the acquisition.

The purchase jives with recent buyouts of DLP providers, in which larger security software vendors have scooped up smaller players with the goal of incorporating their data security technology into established security solutions. During the past two years or so, security bellwethers such as Symantec, McAfee and Trend Micro all have made DLP acquisitions.

"DLP technology is a feature," said Mike Rothman, former analyst and now chief marketing officer of eIQ Networks. "It's being built into content gateways and as evidenced by the Microsoft/RSA deal from late last year, it is making it's way into the server infrastructure. Symantec has similar designs for the Vontu technology they acquired."

He said the CA-Orchestria deal eliminates yet another DLP-specific provider.

"Companies that haven't been acquired at this point are going to struggle," he told via email on Tuesday. "In this kind of economic environment, getting a large enterprise to take a gamble on a small company, when they can get similar technology from a larger one [through partnerships], is tough to do."

And even though DLP is maturing, many organizations still are reluctant to deploy it, he added.

"The technology is still pretty complicated for a mid-market, who don't have intense compliance pressures," Rothman said.

New York-based Orchestria has more than 500 customers across 33 countries, according to the company. CA said it does not anticipate any firings as a result of the deal, scheduled to close later this month.

This is the third security-related pick-up by CA in the past three months. The Islandia, N.Y.-based vendor acquired identity management firm IDFocus in October and Eurekify, an enterprise role management provider, in November.

Get daily email updates

SC Media's daily must-read of the most current and pressing daily news

By clicking the Subscribe button below, you agree to SC Media Terms and Conditions and Privacy Policy.