Key Takeaways
- • A new metric in the Sustainability in Private Markets report by EDCI and BCG finds that 56% of private equity-backed businesses conduct at least one type of cybersecurity testing.
- • Twenty-six percent of PE-backed businesses conduct all three types of cybersecurity testing covered by the metric.
- • The data is presented as a data snapshot, indicating portfolio companies are catching up on cybersecurity testing practices.
Summary
A new data point published in New Private Markets draws on the Sustainability in Private Markets report, produced by EDCI and BCG, to examine how private equity-owned companies are approaching cybersecurity testing. According to the report, 56% of PE-backed businesses conduct at least one form of cybersecurity testing, while 26% carry out all three types tracked by the metric.
The figures frame cybersecurity testing as an area where portfolio companies are closing a gap. The primary source is a short data snapshot, and the full article is behind a registration wall, so the specific names of the three testing categories and any year-over-year comparisons are not available in the material reviewed. Readers seeking the methodology, sample size, or breakdown by fund size should consult the full EDCI and BCG report.
For allocators, the metric is a useful benchmark for portfolio-level operational risk oversight. Testing coverage remains incomplete, with nearly half of PE-backed businesses conducting no cybersecurity testing as measured by this metric, which is relevant to general partners assessing portfolio resilience and to limited partners reviewing operational due diligence.
The figures frame cybersecurity testing as an area where portfolio companies are closing a gap. The primary source is a short data snapshot, and the full article is behind a registration wall, so the specific names of the three testing categories and any year-over-year comparisons are not available in the material reviewed. Readers seeking the methodology, sample size, or breakdown by fund size should consult the full EDCI and BCG report.
For allocators, the metric is a useful benchmark for portfolio-level operational risk oversight. Testing coverage remains incomplete, with nearly half of PE-backed businesses conducting no cybersecurity testing as measured by this metric, which is relevant to general partners assessing portfolio resilience and to limited partners reviewing operational due diligence.
Go deeper than the headline
Research every firm in this story, track the ones that matter and get the daily briefing — free for 7 days.