IBM Buys Logiq for UK Sovereign Cybersecurity Consulting

In its September 24, 2026 announcement, IBM UK said it had acquired Logiq Consulting, a UK cybersecurity consultancy serving defence, government and critical national infrastructure clients. The purchase adds security assurance, Secure by Design, secure systems engineering and managed services to IBM Consulting. IBM did not disclose the financial terms.

In a statement dated September 24, 2026, Logiq confirmed it had become an IBM company and said its Bristol-founded business had grown to more than 235 employees. Logiq also brings the DISX secure collaboration portfolio. The deal therefore gives IBM a specialist team and an operated service for sensitive work, rather than merely another product to sell.

What IBM gains from Logiq’s specialists

Logiq’s consultancy works on security decisions made while systems are designed and delivered. Assurance examines whether controls meet a programme’s requirements; Secure by Design brings security into choices about architecture and operation from the outset. Secure systems engineering carries those choices into implementation, while managed services extend responsibility into the life of a system.

That sequence matters in regulated work. A client may need to justify who can access sensitive information, how it moves between organisations and what evidence shows that controls continue to work after a change. A product can supply part of the technical answer, but it cannot by itself make those design decisions or maintain the supporting assurance. The acquisition gives IBM Consulting people with experience across those tasks and a service that addresses a specific collaboration need.

UK government requirements explain the appeal

UK government cyber security guidance says digital services and technical infrastructure within the scope of government spending must comply with the appropriate Cyber Assessment Framework profile and cross-government Secure by Design principles. It also calls for delivery teams to establish a high-confidence view of their approach early and maintain it as projects evolve. Those requirements create continuing design and assurance work, not just a check at the point of purchase.

The guidance concerns government spending in its stated scope; it is not a single rule imposed on every critical-infrastructure operator or defence supplier. Equally, Logiq’s NCSC-assured status identifies an attribute of the acquired consultancy. It should not be taken as blanket approval of every future IBM engagement or every DISX deployment. The commercial value IBM is pursuing lies in applying specialist judgement to each client’s requirements, alongside the technology and operational support needed to meet them.

DISX brings an operated collaboration service

Logiq’s DISX service description presents a Microsoft 365-based managed environment for organisations working with UK Defence. It is delivered in a sovereign cloud environment by security-cleared personnel and designed for work at the OFFICIAL-SENSITIVE classification. Alongside familiar collaboration tools, the service includes controlled access and information-sharing paths, monitoring, configuration management and records that support assurance.

This makes DISX distinct from Logiq’s advisory work. Consultants can help design and assess a secure system; the managed service operates controls around a collaboration environment after deployment. For a supplier exchanging sensitive material with defence organisations, that operating boundary affects authorised users, device standards, changes to configuration and the evidence available for review. Logiq offers different deployment profiles, and its listed features and connectivity vary with the selected profile and requirements. The portfolio should therefore not be treated as one uniform configuration.

Where the deal could strengthen IBM Consulting

IBM places Logiq alongside SiXworks, its existing UK defence and public-sector digital transformation business. The fit is commercially clear: IBM can bring specialist security design and assurance into broader transformation work, then offer an operated collaboration environment where the client’s requirements call for one. That is an assessment of how the acquired capabilities can work together, rather than evidence of a combined contract win.

Independent industry analysis reaches a similar reading of the deal. TechMarketView’s assessment describes Logiq as a targeted addition to IBM’s UK defence and public-sector capabilities and identifies retention of its specialist talent as a challenge. That distinction matters to the competitive case. IBM has acquired both an established service and the expertise behind it; the advantage will depend on keeping that expertise useful within larger client engagements.

What remains unknown

The acquisition is complete, but its financial impact cannot yet be measured from the public disclosures. The purchase price was not disclosed, and there is no published result showing that IBM has won work because of the combination. A detailed integration timetable is also absent. For now, the confirmed change is that Logiq’s UK consultancy, managed services and DISX portfolio sit within IBM’s wider consulting proposition for clients handling sensitive information.