Operational Due Diligence (ODD)
-


Linedata Breach – August 11th, 2025
Linedata’s Icon was targeted in a cyber attack on 11th August, 2025. The attack has resulted in reported outages of Icon while the investigation and recovery process are in progress. Their official statement is available here. The attack highlights that firms should always remain vigilant to an often-quoted phrase, “It’s a matter of when you’ll…
-


Nearly Half of Portfolio Companies Skip Critical Cyber Testing. What Does That Mean for Your Portfolio?
In an evaluation of 1,000 cyber risk assessments, 48% of firms performed external penetration testing less than once a year, if at all. That’s a staggering gap, especially in an industry where timing and risk precision are everything. For private equity firms, this is more than a cybersecurity concern. It’s a portfolio-level business risk. One…
-


AI is moving fast—are your policies keeping up?
Are you treating AI like a helpful assistant—or a ticking time bomb? AI is making our lives easier, no question. However, when introduced into the workplace without clear oversight, it can pose serious risks to your business—from regulatory exposure to cybersecurity threats. AI Risk Management Starts with Clear Policies and Communication Drawbridge’s Simon Eyre and…
-


Shifting Cyber Readiness into the Front Office
Cybersecurity has transformed from a once-a-year process to an ongoing effort. Managing risk has become increasingly digital and complex within alternative investment environments. Nowadays, it’s not just regulators you need to impress but your investors as well. In our latest webinar, Drawbridge’s Simon Eyre (CISO) and Louis Cordone (Head of Client Success) sat down together…
-


ON DEMAND: Cyber Risk & Investments | Why It Matters in 2025
Part I – Why Cyber Risk is Now a Material Factor in Investment Decisions 2024 marked a pivotal shift—cybersecurity is no longer just an IT issue; it’s a material investment risk. Cyber incidents now directly impact investment returns, making cybersecurity a critical factor in due diligence, portfolio management, and exit strategies. Learn from Lauri Haas,…
-


The Cyber Security Ecosystem: Trust but Verify
In cybersecurity, independence doesn’t mean going it alone—it means making informed decisions while leveraging a strong network of trusted providers. Alternative investment firms depend on Managed Service Providers (MSPs), cyber risk advisors, and compliance experts to enhance their security, but they must also maintain autonomy in assessing risks, implementing best practices, and verifying protections. This…
-


ON-DEMAND: Cyber Readiness Redefined: Building Confidence for Investors and Managers
Gone are the days of annual cybersecurity reviews. As investor expectations evolve, cybersecurity readiness has become a critical component of risk management and protecting returns. In this webinar, our CISO, Simon Eyre, and Head of Client Success, Louis Cordone, share actionable strategies for mitigating cyber risks in today’s dynamic investment landscape. Key takeaways: Practical methods…
-


Executive Snapshot: Give LPs Real-Time Insight Into Your Cyber Posture
Can you easily demonstrate and explain your compliance needs to executives? If not, you need to make such capabilities a priority, particularly when it comes to cybersecurity. According to the 2024 Investment Management Compliance Testing Survey of 595 industry participants, more than 57% of investment adviser firms reported an increase in the scope and frequency…
-


Drawbridge Debuts Real-time View of Cyber Risk for Alternative Investors
Simplifies cyber governance for executives at alternative investment managers with an on-demand, actionable summary of cyber readiness New York, November 7, 2024—Drawbridge is debuting a real-time executive summary of a manager’s cyber risk program. The aim is to enable alternative investment managers (alts managers) to strengthen executive confidence in their firm’s cyber posture by working…
-


What investors are concerned about in an operational due diligence review
What’s worse than having to address cybersecurity in your Operational Due Diligence (ODD) review? Getting caught with a dismal cyber program riddled with unaddressed vulnerabilities. Consider this unassailable fact: your investors care about strong cybersecurity. During initial ODD, your investors want to identify risks. During periodic, likely annual, reviews, investors want to see whether or…
-


Q&A: Cybersecurity questions posed to ODD professionals
In case you missed it, Drawbridge broadcasted a webinar entitled, Expert Insights on Cybersecurity in ODD on November 15, 2023. We were joined by Christopher Vella, Technical Due Diligence Analyst from Albourne Partners, and Lauri Martin Haas, Managing Director at Prism Alternatives. They are both deeply experienced operational due diligence professionals who shared their insights…
-


[Webinar Recording] Expert insights on cybersecurity in ODD
Ever wish you could get guidance and tips from an independent ODD professional on how to articulate the ins and outs of your cyber program? Watch this webinar recording that features two experienced ODD professionals, Christopher Vella, Technology Due Diligence Analyst from Albourne Partners and Lauri Martin Haas, Managing Director and Principal, Operational Due Diligence…










