We've been predicting more consolidation in the GRC--and security--related software markets for a while now. In particular, we've been expecting the mega-vendors to pick up smaller companies. No one here was predicting IBM's acquisition of Gaurdium (for an undisclosed sum that was perhaps in the $225 to $250 million range), though analysts tell PC World that there was lots of talk about Gaurdium and the DAM (database activity monitoring) niche in general as of late. 

On the surface, the IBM deal makes perfect sense. Guardium offers solutions for real-time monitoring of databases, to prevent outside attacks and the like. More to the point, it is one of the few with a solution optimized for mainframes. Its products are expected to be rolled into IBM's Information on Demand product offering. There are also rumors, notes one analyst, about Imperva. In his view, Sentrigo, AppSec, and Secerno are also possibilities. Interested parties might include another big ERP-type players like Oracle or perhaps Symantec, EMC or McAfee. 

For more:
- here's the PC World article

Related Articles:
Continuous monitoring and auditing: The reality
Most respected financial IT vendors
IBM's data governance council gets good press
IBM seeks global reporting standards optimized for risk
IBM moves ahead with risk reporting initiative