Sophos acquires Arco Cyber

Cybersecurity company Sophos has acquired UK-based cybersecurity assurance company Arco Cyber to help build out its AI-enhanced cybersecurity governance capabilities. Arco Cyber aims to help organisations improve their security posture while meeting compliance obligations.

The acquisition forms part of Sophos’s strategy of helping organisations improve their cybersecurity posture and governance through Sophos CISO Advantage, a set of capabilities designed to deliver the knowledge and operating discipline of a CISO to organisations which may not have dedicated security leadership.

Sophos’s approach combines agentic AI, integrated platforms and trusted human expertise delivered in partnership with managed service providers and managed security service providers.

The company plans to use Arco Cyber to add capabilities to help organisations continuously validate the effectiveness of security controls, and to map those controls to risk and compliance frameworks.

Sophos CEO Joe Levy said research suggests that fewer than 32,000 of the estimated 359 million organisations worldwide have a dedicated CISO.

“There is no shortage of exemplary security technology in the market. What’s missing for most organisations is the ability to govern those tools, understand whether controls are actually working, and make informed decisions about risk,” he said. “Arco has built a platform and a team that offers clarity, accountability and proof. That work directly supports our strategy, and it gives customers a stronger foundation for simplifying compliance and managing cyber risk with confidence.”

Arco Cyber will act as a dedicated team within Sophos CISO Advantage, while its technology and expertise will be integrated into the Sophos Central platform.

Image credit: iStock.com/burcu demir