Strategic acquisition further positions IBM to deliver secure, compliance-ready and industry-specific public cloud capabilities to clients in highly regulated industries
ARMONK, NY — June 15, 2020 — IBM (NYSE: IBM) today announced it has signed a definitive agreement to acquire Spanugo, a US-based provider of cloud cybersecurity posture management solutions. To further meet the security demands of its clients in highly regulated industries, IBM will integrate Spanugo software into its public cloud.
Late last year, IBM announced it designed the world’s first financial services public cloud to help address the requirements of financial services institutions for regulatory compliance, security and resiliency. Once available, it will provide preventative and compensatory controls for financial services regulatory workloads, multi-architecture support and proactive and automated security, leveraging the industry’s highest levels of encryption certification. The addition of Spanugo software will help accelerate the availability of a security control center that will enable IBM clients to define compliance profiles, manage controls and, in continuous real time, monitor compliance across their organization.
“IBM is committed to building the industry’s most secure and open public cloud for business. With the acquisition of Spanugo, we have taken another major step in advancing IBM’s differentiated capabilities in security and compliance for our enterprise clients, including those in highly regulated industries,” said Howard Boville, SVP, Cloud, IBM. “Bringing Spanugo’s technology into our financial services public cloud will help provide our clients with evidence of their ongoing compliance, in real time.”
As clients move increasingly significant and sensitive workloads to the cloud, management of security and compliance becomes more complex. For businesses in highly regulated industries, including financial services, healthcare, insurance, telco and more, cloud environments are most useful when they are approved for sensitive information and run workloads subject to strict regulatory and compliance guidelines. When an organization is audited, for example, Spanugo’s technology can efficiently and transparently demonstrate cybersecurity compliance in real time. Additionally, it delivers a continuous process of cloud security improvement and adaptation to reduce the likelihood of a successful attack. Spanugo software will be incorporated into a suite of capabilities within IBM public cloud services.
“Spanugo’s strong domain knowledge and experience in security posture management is a natural complement to IBM’s public cloud offerings,” said Doc Vaidhyanathan, cofounder and chief product officer, Spanugo. “By joining IBM on its mission to be the most secure public cloud for the enterprise, we’re able to deeply serve businesses across industries that require verifiable, audit-ready, real-time cybersecurity posturing.”
IBM continues to invest in the security capabilities of its public cloud having previously announced new services that further its focus as the leading secure and open public cloud for business. As part of this, we introduced the industry’s strongest commercially available cryptographic technology for the cloud called “Keep Your Own Key.” This gives enterprises the ability to retain control of their own encryption keys — and the hardware security modules that protect them — so customers are the only ones who can control access to their data.
For more information, visit www.ibm.com/cloud