IBM to buy ISS for $1.3 billion
update IBM made a resounding move into security on Wednesday, acquiring Internet Security Systems for $1.3 billion. — The all-cash transaction of about $28 per share is meant to bolster IBM's ability to deliver security services to corporations, the company said.
Context & Ripple Effects
IBM has agreed to pay roughly $28 per share in cash — about $1.3 billion — for Internet Security Systems, a publicly traded managed-security specialist, explicitly to strengthen the security services it sells to corporations. There is little runway in the corpus before this deal, so the significance rests on the structure of the move itself: rather than building security capability organically, IBM is buying an installed base of corporate security customers outright.
First-order effects
- ISS shareholders exit into an all-cash payout at about $28 per share, while ISS's managed security and intrusion-prevention business folds into IBM's corporate services portfolio.
- Corporate customers can now buy security monitoring from IBM bundled alongside the rest of their IBM services relationships instead of contracting a standalone security vendor.
Second-order effects
- Standalone security providers lose pricing leverage wherever buyers weigh a pure-play contract against IBM's ability to absorb security into a broader services agreement.
- Other large IT services vendors come under pressure to answer with their own security acquisitions rather than partner resales, since the buyer of a security firm captures the customer relationship outright.
Third-order effects
- If diversified IT services houses keep absorbing security specialists, the pure-play public security company thins out as a category and security migrates from a boxed product decision to a line item inside outsourced infrastructure contracts.
The trend: Enterprise security is shifting from standalone product vendors toward embedded capabilities inside big-vendor service portfolios, with acquisition rather than organic build as the entry route.