Eastern Pacific Shipping’s CoolCo Acquisition Harmonizing Security Postures in Weeks, Not Months, Without Productivity Incidents

EPS used Reclaim to assess, align, and validate CoolCo's security posture during acquisition, achieving M&A security integration in weeks without productivity disruption.

INDUSTRY Shipping & Maritime
COMPANY SIZE Privately held, global maritime operations
HQ Singapore

Unified Single posture view across EPS and CoolCo
In Weeks Security policy harmonization accelerated
Disruption-free No productivity incidents during integration

Executive Summary

Eastern Pacific Shipping (EPS), one of the world’s leading privately held ship management and ownership companies, operates a complex security estate that spans shore offices and its fleet of vessels at sea. By the time EPS acquired CoolCo, the company had already standardized on Reclaim Security as its preemptive exposure remediation platform, with measurable gains in tools ROI, threat resilience, and operational efficiency across the existing estate (covered in a separate case study).

The acquisition brought an entire additional organization into the fold: a new fleet of LNG carriers, new shore users, and an unknown security posture, on an integration timeline that rarely flexes for security. Through Reclaim, EPS extended the same preemptive approach across the acquired estate, harmonized CoolCo’s policies to the EPS baseline in weeks, and absorbed the new assets into one continuously validated posture, all without productivity incidents. Security integration kept pace with the broader integration effort during the M&A. That is the outcome every security leader wants and the one most teams struggle to deliver.

“M&A puts every part of the business under pressure, and security is usually where you discover gaps last. With Reclaim, that order was reversed. Within days we had a unified view of both EPS and CoolCo, a clear plan to harmonize policies, and the confidence to deploy hardening changes through PIPE™ knowing the business would not be disrupted. Security integration kept pace with the broader integration effort, which is exactly what we needed.”

Max Wong, General Manager, IIT, Eastern Pacific Shipping

<span style="font-family: Poppins, sans-serif; font-size: 16px; font-weight: 600; color: #425B76; white-space: nowrap;">Download this case study (PDF)</span>

The Challenge : Three M&A security risks at once, on a stack that was itself moving

The CoolCo integration brought three classic M&A security risks together at the same time::

Unknown posture. The acquired environment came with its own security configurations, inherited risks and differing operational practices that needed to be assessed and aligned. Without rapid clarity, the team would inherit risk it had no way to size.

Time pressure. Integration timelines rarely flex for security. The team needed clarity in weeks, not quarters, and a way to harmonize policies on the same pace.

Productivity risk. Hardening the new estate too aggressively would break people’s day during one of the most sensitive moments in any acquisition. Hardening too gently would leave the door open.

And underneath it all, a moving target. CoolCo was concurrently transitioning to a new enterprise security platform and consolidating its endpoint protection across its shore and vessel operations. The team had to harmonize security controls while the underlying technology environment continued to evolve. A manual approach would have stretched policy alignment across many months, with no reliable way to predict how each change would land on the newly acquired users.

The Solution: Preemptive Exposure Remediation Adapted to the M&A Timeline

Reclaim extended its business-aware exposure remediation automation across the CoolCo estate using a four-step playbook tailored to the M&A reality:

Posture Assessment and Gap Analysis

The CoolCo environment was onboarded quickly. Reclaim produced a side-by-side view of CoolCo’s posture against EPS’s, so every gap across endpoint, identity, and email was visible on one page rather than surfacing mid-rollout. The team inherited clarity, not surprises.

Security Stack Replacement Tracking

As CoolCo’s security platforms were consolidated as part of the integration, Reclaim tracked coverage progress in real time and ensured security controls remained consistent throughout the migration, preventing protection gaps during the transition. The stack migration moved fast, and the security posture did not slip.

Convergence With PIPE™ Impact Prediction

For every gap between EPS and CoolCo posture, Reclaim simulated the productivity impact of harmonizing controls before any change reached the new users. PIPE™ used real behavioral data from both organizations to predict how each harmonization change would affect users, devices, and applications. No surprises during a sensitive integration.

Phased RolloutWithContinuous Validation

The converged baseline was deployed in rings, starting with audit-mode for the most sensitive controls. The full migration and alignment of CoolCo’s security policies to the EPS baseline, which would typically stretch over many months, was completed in a matter of weeks.

The Reclaim Competitive Edge: Business-Aware Exposure Remediation

What made this work was not raw automation. It was business-aware exposure remediation. Most M&A security integrations force a choice between speed and safety: move fast and risk breaking the newly acquired user base, or move carefully and stretch the integration over many months while inherited exposures sit open. PIPE™ removed that tradeoff. By predicting the impact of every harmonization change before deployment, the team could harden the acquired estate at the pace the business needed, with the confidence that came from knowing exactly what would and would not be disrupted.

Continued Partnership

The CoolCo integration is now part of one continuously assured posture. The same principles that drove the original EPS partnership now apply across the unified estate:

Continuous assurance of both posture and productivity across the combined shore and vessel fleet, with the platform surfacing changes in security configuration, shifts in asset behavior, and newly released security capabilities, each with crystal-clear instructions on what happened, why it matters now, and what to do about it. Where appropriate, Reclaim takes the action automatically.

Continuous expansion of preemptive remediations to match the pace at which threats develop, ensuring that as adversaries adopt new techniques (including AI-enabled attack workflows), the protections covering both EPS and the acquired estate keep pace without new procurement.

The result is a converged posture stronger than either organization had on its own, maintained by a partnership that turns every future change, whether driven by a new threat, a new asset, or the next M&A, into a managed, predictable event.

About Eastern Pacific Shipping

With a history spanning 60 years, Eastern Pacific Shipping Pte. Ltd. (“EPS”) is a leading shipping company that is committed to the green and technology-driven growth of the industry. Headquartered in Singapore for the past 30 years, EPS is driven by its mission to be the safe and efficient transportation provider of choice to the shipping industry. Empowering that mission is a 7,000 strong and growing workforce across sea and shore. They oversee a versatile fleet of over 350 vessels and 37 million deadweight-tonnes across core segments of containership, PCTC, dry bulk, gas and tanker vessels. Following the completion of its merger with CoolCo, EPS has further strengthened its gas shipping platform. EPS’ shore team is fully integrated with in-house commercial, finance, innovation, IT, legal, manning, operations, and technical departments.