logo

Case Study: Astorg

Enhancing Risk Management for PE specialist Astorg Ahead of DORA (Digital and Operational Resilience Act)

MOBSTR is helping private equity firm build resilience ahead of incoming EU regulation

The EU’s Digital Operational Resilience Act (DORA) will force a step change in attitudes to cyber-risk management among financial services companies. The legislation is not due to come into force until January 2025, but those in the know are already putting in place the enhancements to threat intelligence, supply chain monitoring, incident response and risk management that it demands.

Unfortunately, for many organisations, mobile risk is still a blind spot. Not so, private equity firm Astorg, which sought MOBSTR out to help enhance cyber-resilience across 275 iOS devices, according to the CTO.

MOBSTR Dashboard

An attractive target

Astorg has been creating value for the past 25+ years, managing billions of euros in funds for its investors. Those figures alone make it an attractive target for threat actors. Yet for its team of knowledge workers, access to a range of iOS business applications is critical to enhancing the workplace productivity on which the company is built. The challenge is that unvetted use of these applications, even within Apple’s walled garden, can unwittingly expose organisations to the risk of vulnerabilities, malware and privacy issues.

“We needed a solution to assess the technical specifications and potential security issues with the mobile applications that we manage and deploy to our fleet,” explains Astorg’s CTO. “MOBSTR had the best approach in our opinion, with a fresh vision.”

The MOBSTR difference

MOBSTR offers a SaaS-based mobile application security testing and ratings platform designed to help businesses better manage their mobile app-based risks. It delivers AI-based risk analysis, machine learning-powered security scans and real-time alerts to help organisations minimise and continually monitor their exposure to mobile application risks. It supports iOS and Android and offers simple-to-view holistic security ratings to support compliance efforts and streamline remediation.

“Deployment has been absolutely seamless,” says the CTO. “The MOBSTR team is always accessible and willing to listen to our needs or suggestions. They implemented a few new functionalities that we suggested very quickly.”

DORA and beyond

Adding MOBSTR to its security infrastructure has helped Astorg continually manage and improve security posture, putting it in a good place for DORA compliance. But the benefits go way beyond that – enabling the firm to ensure its staff have all the tools they need to create value most effectively for the firm, without compromising on security.

“We now have a better vision of the applications we deploy and a better risk management platform. We’re more aware of what the applications we use do and what risks are involved,” says Millet. “This helps us meet our regulatory requirements, especially with DORA that will come into effect soon.”

Customer: Astorg is a Top 50 private equity firm with €22 billion (£19bn) worth of assets under management.

It employs over 160 staff, split between six global offices.

Sector:Financial services

Challenges: Compliance with upcoming DORA legislation, which mandates improved risk management for financial services firms

Ensuring staff productivity without compromising on security

Solution: MOBSTR

Benefits: Helping to build a firm foundation for DORA compliance
Supports staff whilst mitigating cyber-risk from mobile apps

Contact Us

Looking for help with third party risk management and compliance?

Contact us now