<p>An advertising organization grew through acquisition of several companies. The business entailed collecting and processing personal information from citizens in the U.S. and E.U. Regulations such as GDPR and the lack of visibility to cyber risk was a serious concern for their board.</p>