Divestitures and Carve-Outs
Bring ease and speed to your IT divestiture playbook
70%
85%
50%
The Problem
Maximizing value as you disentangle ecosystems is challenging
Divestitures are sensitive, complicated operations that can have far-reaching effects on share value, competitive advantage, and compliance posture. When low-value, high-effort domains—like network and security—block your way forward, they put serious pressure on your timelines.
>50% of business synergies have technology dependencies
PwC
51% of M&A/D deal-makers cite cyber as the top transaction risk
McKinsey
Transition services agreement (TSA) durations average 18 mos.
Deloitte
Solution Overview
Accelerate separation to capture value faster with Zscaler
Streamline separation processes with the cloud-delivered Zscaler platform. Logically separate entities, drastically reduce risk, and save significant effort, such as the need for certain TSA services, turning them from potentially huge value sinks into elegant business enablers.
Logically remove divested assets, users, and data flows
from your network ecosystem—quickly, securely, and with low overhead—on Day 1.
Apply zero trust access to applications under TSAs
for divested users.
Convey more controls on Day 1
quickly lowering your TSA burden from the newly formed or purchased entity.
Protect your crown jewels from exfiltration
by a new buyer during the TSA period.
Establishing a Frictionless Divestiture
Benefits
Join 350+ organizations we’ve helped perform fast, secure IT integrations and divestitures.
Simplify separation
Manage security and connectivity through policy instead of network access controls and segmentation.
Mitigate shared risk
Minimize exposure and grant zero trust access to divested or TSA’d resources while removing divested users from your network.
Scale costs to your needs
Take advantage of demand-based pricing, eliminating major capex spend and unpredictable costs.
Reduce support demands
Hand over security and access controls for divested assets, reducing your TSA burden and easing your timeline.
Solution Details
Zero trust and the separation life cycle
Zscaler works with private equity firms to protect and accelerate their operations with a proven roadmap:
Day 1: Carve-Out
Logically segment in-scope users and resources to protect your security posture during the TSA period.
Hand over security policy control by conveying the carve-out Zscaler tenant to the divested entity.
Reduce the need for extended TSAs while retaining appropriate controls and auditability.
Grant conveyed users zero trust access to apps under TSA without placing them on your network or exposing your data.
Day 2 and Beyond: Separation/Stand-Up
Offer a seamless user experience by connecting users to any app, anywhere, to support interim app rehosting.
Exit security- or network-based TSAs quickly by standing up or taking control of the Zscaler tenant.
Realign traditional network resources to more valuable opportunities with zero IT footprint through Zscaler.
Complete secure, efficient carve-outs with no concerns over circuit provisioning, capex, or supply.
How Zscaler streamlines divestitures
Divestiture roadmap
Control
- Create a carve-out Zscaler tenant that will allow the logical and network traffic separation of in-scope/conveyed user, workload, and application assets and interactions
Segment
- Deploy Zscaler connectors to allow conveyed user access to TSA’d apps and resources in a zero trust architecture
- Forgo the need for a "clone-and-go" network by leveraging the Zero Trust Exchange as the intermediary for conveyed apps
- Move conveyed users to public Wi-Fi, effectively removing them from the network without hurting productivity
Separate
- Integrate other risk profiling capabilities to provide dynamic policy based on security posture
- Use workload-to-workload zero trust capabilities to further separate conveyed or TSA application traffic
TSA exit
- Close out any network or security service TSA
- Hand over tenant administration to the separated entity’s IT provider
- Remove the divested entity's identity provider, if any, from the carve-out tenant’s policy
- Remove any legacy VPN access or similar to TSA’d or conveyed apps
Customer Success Stories
XPO prevents threats and simplifies divestiture
Maxeon maintains business continuity during divestiture
