Insights
The cyber landscape never stops shifting – and neither should your perspective. Our Insights bring you expert commentary, thought leadership and practical guidance on the issues shaping the alternative investments sector. Stay ahead of regulators, satisfy investors, and strengthen your resilience with analysis from the team that knows your world best.
-
The Drawbridge Cyber Score as a portfolio tool – from measurement to meaningful comparison
By Eric Bernstein, CEO, Drawbridge Cyber risk has become a defining factor in how private equity firms protect value, manage portfolios and demonstrate governance to investors. Yet for many PE sponsors, cyber oversight remains fragmented, reactive or difficult to scale across multiple portfolio companies. In this three-part series, we explore how portfolio-level cyber analytics are…
-
Portfolio company analytics – why cyber oversight now defines value creation
By Eric Bernstein, CEO, Drawbridge Cyber risk has become a defining factor in how private equity firms protect value, manage portfolios and demonstrate governance to investors. Yet for many PE sponsors, cyber oversight remains fragmented, reactive or difficult to scale across multiple portfolio companies. In this three-part series, we explore how portfolio-level cyber analytics are…
-
The Weakest Link Is Rarely Where You’re Looking: Third-Party Cyber Risk Under Reg S-P
By Simon Eyre, Chief Information Security Officer, Drawbridge Why intelligence-led approaches are essential to meet rising threats, regulatory demands and investor expectations Alternative investment firms have strengthened internal cybersecurity significantly over the past decade. Controls are more mature, governance is better defined, and boards are more engaged. Yet many of the most disruptive incidents still…
-
Cyber Risk Intelligence: Turning Data into Resilience for Alternative Investments
By Eric Bernstein, CEO, Drawbridge Why intelligence-led approaches are essential to meet rising threats, regulatory demands and investor expectations The alternative investment industry is entering a new era of scrutiny. Regulators, investors and counterparties are paying closer attention to how firms manage operational risk, and cybersecurity sits at the heart of that conversation. Threat actors…
-
Cyber Security Scoring: A Smarter Way to Benchmark Risk
By Art Murphy A few weeks ago, I sat down with a table full of C-level execs from private equity and hedge funds. The conversation went wide from SEC prep (of course) to cyber hygiene, and then someone mentioned an LP asking about their Drawbridge Score and the whole table paused. No one asked, “What’s that?” They…
-
From Compliance to Confidence
Cyber Resilience as a Strategic Advantage in Alternative Investments By Eric Bernstein, CEO, Drawbridge We continue to see the topic of cybersecurity move from the back office to the investment committee. What was once a compliance obligation is now a defining factor in investor trust and capital allocation. For alternative investment firms, cyber resilience has…
-
SEC Cybersecurity
Where do you stand, and what’s coming for investment advisors? What you should know For firms with assets over $1.5bn, the changes to Regulation S-P will take effect on December 3rd, 2025. In combination with the 2025 SEC Examination Priorities, there is work to be done to meet both the rule and guidance from the…
-
Is AI the death of “Trust but Verify” Cybersecurity?
Cyber security risk assessments take multiple staff members time to complete. Even once that time has been accounted for (usually with HR, Operations, IT and Legal involved) you still need someone to manage the results. You’ll often have remediation work for the IT team, remediation work for HR, and need someone to oversee those actions…
-
Drawbridge Receives SOC 2 Type II Attestation
We are proud to share we have completed our SOC 2 Type II audit. This attestation provides evidence that Drawbridge continues to focus on our strong commitment to security, but also to delivering first class services to our clients by demonstrating we have the necessary internal controls and processes in place to support our clients…
-
Linedata Breach – August 11th, 2025
Linedata’s Icon was targeted in a cyber attack on 11th August, 2025. The attack has resulted in reported outages of Icon while the investigation and recovery process are in progress. Their official statement is available here. The attack highlights that firms should always remain vigilant to an often-quoted phrase, “It’s a matter of when you’ll…
-
Nearly Half of Portfolio Companies Skip Critical Cyber Testing. What Does That Mean for Your Portfolio?
In an evaluation of 1,000 cyber risk assessments, 48% of firms performed external penetration testing less than once a year, if at all. That’s a staggering gap, especially in an industry where timing and risk precision are everything. For private equity firms, this is more than a cybersecurity concern. It’s a portfolio-level business risk. One…
-
AI is moving fast—are your policies keeping up?
Are you treating AI like a helpful assistant—or a ticking time bomb? AI is making our lives easier, no question. However, when introduced into the workplace without clear oversight, it can pose serious risks to your business—from regulatory exposure to cybersecurity threats. AI Risk Management Starts with Clear Policies and Communication Drawbridge’s Simon Eyre and…
