Case Study: a leading private equity firm decreases portfolio risk with Optiv

a private equity firm meets GDPR compliance in 4 months with Optiv

A private equity firm needed to meet GDPR compliance requirements for its portfolio companies within a strict four-month timeframe. The challenge was to gain a complete view of how data was processed and stored across its holdings without using intrusive agents. The firm engaged Optiv to develop a scalable assessment process.

Optiv created a tailored solution using a tiered ranking system and a combination of inside-out and outside-in analysis. This involved questionnaires, interviews, and external risk reviews. As a result, Optiv provided the private equity firm with detailed risk reports for each portfolio company and an aggregate board-level report, enabling informed decisions to lower business risk. The project successfully met the GDPR deadline, involved over 100 stakeholder interviews, and equipped the client with a repeatable methodology for cybersecurity assessments.

Private Equity Firm