How a Lower Mid-Market Private Equity Firm Built a Pragmatic & Effective Cybersecurity Program Without Burdening Its Portfolio Companies
About the Firm
A U.S.-based private equity firm with investments across multiple industries takes a majority-ownership approach to supporting its lower middle-market portfolio. The firm is known for its operational involvement, helping more than a dozen portfolio companies grow and protect enterprise value through strategic oversight, tools, and resources.
A Clear Need for Practical Cybersecurity Oversight
Like many firms in the private equity space, this team faced a familiar challenge: cybersecurity was clearly important, yet there wasn’t a consistent or efficient way to identify, prioritize, and track progress across a diverse portfolio.
Each portfolio company had a different level of maturity and risk exposure, and without a single person responsible for cyber (but most often not a full FTE), not surprisingly, there were gaps that could impact valuation, operations, and reputation.
The firm needed a cybersecurity partner that understood private equity dynamics, someone who could deliver real results without adding unnecessary cost or complexity.
A Pragmatic, PE-Savvy Partnership
Enter Black Creek Cybersecurity led by Brad Strahorn, a cybersecurity veteran with deep roots in private equity. Black Creek offered the PEG something rare: a fiercely independent, no-fluff approach grounded in real-world PEG dynamics.
Brad worked closely with the firm to implement his Top 7 Cyber Poverty Line framework, a straightforward model designed to lift every PortCo above the minimum acceptable baseline of cybersecurity controls. Instead of generic checklists or bloated security assessments, the focus was on the essentials only, no buzzwords, no fear tactics, and definitely no unnecessary tech spend.
To bring it all together, Black Creek deployed its PortCo Shield Dashboard, a proprietary, lightweight tool that gives PEGS a single-pane-of-glass view into cyber status and progress across all PortCos. With this dashboard, the firm can now:
- Determine which PortCos are above or below the Cyber Poverty Line
- Track completion of key actions.
-
- Identify and resolve bottlenecks early – The reality is that SMB PortCos have a lot on their plates and can’t always move as fast as one would hope, but the process ensures balls don’t get dropped outright.
- Quickly manage and remediate cyber incidents that occur
The process was collaborative, pragmatic, and intentionally low-burden. Brad’s unique balance of expertise with plainspoken explanations, and deep operational empathy made it easy for both PEG and PortCo stakeholders to engage and act. More than that, when cyber incidents inevitably occur, Black Creek are hands-on – ensuring incidents are prioritized and remediated, while keeping PEG and Port Co leadership aware of the situation.
Measurable Progress, Zero Drama
The impact has been clear: the firm now has a unified, practical cybersecurity baseline across its entire portfolio. Risks are identified and mitigated faster, and the investment team has clearer insight into where to focus resources, without distracting operating teams from growth initiatives.
As one senior technical leader at the firm shared:
“Brad didn’t just bring cybersecurity expertise, he brought Private Equity fluency. He understands the pressure we’re under and delivered a solution that actually works for our world. Black Creek has been a steady, practical partner, clear, responsive, and focused on what matters. Their cybersecurity program isn’t just a strong first line of defense; it’s also a real asset when it comes to exit prep. They’ve helped us raise our posture across the portfolio quickly and built real confidence with our deal teams.”
PortCoShieldTM Chart 2: This chart shows the Top 7 Score for each PortCo over time. You can clearly see the steady improvement over time
Ready to raise the bar on your PortCo cybersecurity program?
If you’re a PEG looking for real cybersecurity impact without the noise, Black Creek Cybersecurity might be the partner you’ve been waiting for.
If you’d like to find out more about the Cyber Poverty Line and how Black Creek Cyber can help you manage risk across your portfolio, reach out for an obligation-free chat.