Risk assessment
-


The Importance of Independence
Investors and Allocators that are committed to independent operational due diligence and financial audits, are insisting on the importance of applying independence to cybersecurity. What should you know – Investors and Allocators view cybersecurity as following the footsteps of business financials and they expect independence in the assessment of your cybersecurity. They have identified…
-


How Family Offices can preserve assets and mitigate cyber risk in 2024
Rising inflation interest rate hikes weren’t the only challenges that Family Offices faced in 2023. As Family Offices look to preserve asset values and safeguard their reputation, a lack of adequate cyber controls remains as one of the most significant financial and operational risks. Why you should care – Family Office assets and investments are…
-


Digital Operational Resilience Act (DORA): Bolster your operational resilience today across five pillars
When the Digital Operational Resilience Act (DORA) comes into effect in January 2025, it will impact 21 covered entities from investment firms to ICT third-party service providers. Is your firm ready? Now is the time to evaluate your preparedness and implement the necessary strategies to ensure compliance ahead of the deadline. Unlike previous cybersecurity regulations, GDPR and…
-


What The SEC Cyber Rule Means for Your Firm’s Cybersecurity Risk Management
The alternative investment industry is awaiting a finalized ruling from the Securities and Exchange Commission (SEC) on new proposed cybersecurity rules that were originally introduced February 9, 2022 and will significantly impact firms cyber risk strategy. On March 15, 2023, the SEC released an update on the proposed cybersecurity risk management rules and amendments (“proposed Rule 206(4)-9” and “proposed…
-


What can Investment Managers do today to minimize the work required when the SEC Cybersecurity Rule becomes final this year?
While we await the final decision that is due in April 2024, preparation to comply with the new regulation should begin now in order to show a track record of cybersecurity governance and of course to strengthen your defenses against rising cyber threats. Alternative Investment and Wealth Managers that have significant gaps in their cyber…
-


Podcast: Cybersecurity 5 in 5 February 2023
Cybersecurity 5 in 5 is the official podcast of Drawbridge, a premier provider of cybersecurity software and solutions to the alternative investment industry. The podcast covers the top 5 cyber events and trends that listeners need to know about in just 5 minutes.
-


Are Hackers Phishing in Your Waters? Top Tips to Protect Your Firm
When cybercriminals go phishing, it’s financial firms they want to land. According to research published last month by the Anti-Phishing Working Group, the financial sector (including banks) was the most frequently victimized by phishing in Q2 2022, accounting for 27.6% of all phishing attacks. And there’s a good reason why. As a highly lucrative industry predicted to grow…
-


August 19, 2022: Drawbridge Releases Latest Version of Cybersecurity Program Management Platform
Release continues focus on quality-of-life and functional enhancements. Drawbridge is pleased to announce another update to the Drawbridge cybersecurity program management platform . We completed QA earlier this week and promoted the latest version of the platform to production overnight. Following is a recap of enhancements released this week. Continued Focus on Vulnerability Management Drawbridge continues to…
-


Cyber Security Intelligence: Ransom – Prepare For The Worst
In this contributed article, Drawbridge CISO Simon Eyre highlights the continuing – and growing – threat of ransomware. He also offers four steps to combat ransomware, which are summarized below. Four steps to combat ransomware Preparation and testing (“It’s critical to be able to access [the incident response] plan at a moment’s notice, so make sure…
-


Drawbridge Achieves SOC 2 Type 1 Compliance
Certification reaffirms Drawbridge’s continued commitment to data security and privacy for clients Drawbridge, a premier provider of cybersecurity software and solutions to the alternative investment industry, today announced their achievement of System and Organization Controls (SOC) 2 type 1 compliance. This certification reflects Drawbridge’s commitment to safeguarding critical client data while helping customers bolster their…
-

Six strategic cyber investments for the next six months – and beyond
The original article appears in Cybersecurity Insiders. We are in the midst of what may be a permanent shift to remote and hybrid working models. At the same time, the types of attacks businesses face continue to evolve—and the volume of attacks continues to grow. Drawbridge CEO Jason Elmer shares his take on six critical investments for…
-

Cybersecurity Alert: White House Highlights Elevated Cybersecurity Threat
Earlier this week, U.S. President Joe Biden warned of the increased threat of Russian cyber attacks in response to sweeping sanctions. As the conflict in Ukraine continues, state-sponsored attacks on NATO members and allies are growing in likelihood, and private businesses are also at risk of being targeted. In a statement released by The White…








