Acquisitions can change ownership of security teams, systems, and data, creating risks around access, integration, compliance, and incident response.
Search across headline titles and summaries.
Background for this topic.
An acquisition is the purchase of a company, business unit, or technology by another organization, transferring control of its people, systems, and data. In information security, the event matters because the buyer may inherit unfamiliar networks, cloud services, software, credentials, suppliers, and unresolved security issues.
Before integration, security due diligence should identify exposed systems, critical vulnerabilities, active threats, prior incidents, and obligations governing personal or regulated data. After closing, teams must control access between environments, remove unnecessary accounts, verify asset ownership and logging, and bring inherited systems into vulnerability-management and monitoring processes. Connecting legacy infrastructure too quickly can create new attack paths, while poorly planned changes can hinder detection or incident response. Privacy and compliance reviews should confirm that data use, retention, and cross-border transfers remain lawful under the combined organization.
CyberArk announced the Zilla deal on the same day leading identity and access governance provider SailPoint returned to the public markets.
Cuts Hit Duplicative Roles, Positions Rooted in Secureworks Being a Public CompanySophos laid off 6% of its staff just days after closing its $859 million acquisition of Secureworks. The job cuts will streamline duplicative roles following the Feb. 3 close of the Secureworks deal as well as reduce positions that are no longer needed since Secureworks delisted as a public company.
Acquisition of Startup Adds Modern Identity Governance to CyberArk’s Identity SuiteCyberArk has acquired Zilla Security for up to $175 million, adding modern identity governance and administration capabilities with AI-driven automation for faster deployments, streamlined access reviews, and efficient provisioning to secure human and machine identities.
De-dupes some roles, hints others aren't needed as the infosec scene shifts Nine days after completing its $859 million acquisition of managed detection and response provider Secureworks, Sophos has laid off around six percent of its staff.…
The combined companies will create a seamless ecosystem of trust, governance, risk, and compliance.