Reprice Contracts and Shortlists After Identity, IRAP and Data Deals

What happened

Integrity360 acquired identity specialist CyberIAM, adding staff and revenue to create a dedicated identity services practice embedded in its managed SOC structure. The deal folds CyberIAM’s IAM, governance, privileged access and customer identity capabilities into Integrity360’s global offerings, changing how identity work is packaged and delivered. Watch whether Integrity360 converts more advisory engagements into recurring managed services and tightens mobilisation windows

Why the category manager should care

Treat this acquisition as a real change to supplier capability and packaging because it shifts standalone identity projects toward integrated managed services

Key facts

• Adds 120 employees and about €18 million in revenue
• Integrates into a global SOC operation with more than 225 analysts
• Covers IAM, governance, privileged access and customer identity services

What happened

JFrog completed an IRAP assessment at the PROTECTED level for its software supply-chain platform, covering Artifactory, Curation and Advanced Security. The review includes SBOM (software bill of materials) and AI model governance evidence aligned to CycloneDX and SPDX standards, which can ease Authority-to-Operate steps for regulated buyers. Watch whether agencies accept the assessment as sufficient or still require deployment-specific configuration evidence

Why the category manager should care

Use IRAP evidence to streamline evaluations for government and regulated procurements, but confirm technical and deployment boundaries before accepting it as substitute evidence

Key facts

• IRAP assessment achieved at PROTECTED level
• Assessment includes Artifactory, Curation and Advanced Security components
• Covers SBOM and model-governance evidence aligned to CycloneDX and SPDX

What happened

Nasuni acquired DryvIQ to add data classification and governance into its file data platform, extending scanning and policy enforcement across cloud and on-prem repositories. The combined product scans hundreds of formats, identifies thousands of document types and applies quarantine, retention and remediation policies across many repositories, which matters operationally for AI datasets. Watch how vendors price cross-repository scanning and whether scanning/remediation are bundled or metered

Why the category manager should care

Require integrated content classification and quarantine capability because it affects what data can be safely used for AI and where it must remain

Key facts

• Scans across more than 550 file formats
• Identifies over 1,000 business document types
• Operates across more than 40 repositories with quarantine and remediation controls

What happened

Research shows many Australian firms have lots of AI licences but lack coordinated training and governance, which creates adoption failure and operational risk. The key operational detail: formal training is a stronger predictor of successful AI adoption than demographic factors, and poor rollouts can produce dangerous automation mistakes. Watch for buyers to start demanding supplier-led training, governance playbooks and acceptance criteria in bids

Why the category manager should care

Treat supplier training and governance support as a contract deliverable because internal capability gaps are a primary cause of failed AI adoption

Key facts

• Analysis draws on research with over 16,000 Australian workers linking formal training to ado
• Examples cite Copilot-style licence proliferation without coordinated rollout or governance