Cybersecurity Consulting
Pre-Acquisition Cybersecurity Due Diligence
We assess the cybersecurity posture of a company you plan to acquire before the deal closes. The risks you would inherit become clear before price and contract negotiations.
What it is
Cybersecurity due diligence is a technical assessment conducted alongside financial and legal due diligence. It examines the target's internet-facing assets, identity infrastructure, past incidents, and security organization. Where access is permitted, it also searches for signs of an undetected compromise. Findings are categorized as those requiring resolution before closing and those to be known before integration.
Scope
- External attack surface review without accessing the target's systems
- Investigation of leaked credentials and indicators of data leakage
- Review of security policies, incident logs, and audit reports
- Interviews with the target's IT and security teams
- Where permitted, identity infrastructure review and compromise assessment
- Security conditions for post-closing network integration
The need
When organizations need it
- When due diligence starts after a letter of intent is signed.
- When the target reports a past cyber incident or data breach.
- After closing, before connecting the two companies' networks and identity systems.
Method
How we work
-
External view
We review the target's internet-facing assets and leaked information without accessing its systems.
-
Documents and interviews
We review policies, incident logs, and audit reports, and interview the target's teams.
-
Technical review
Where permitted, we examine the identity infrastructure and critical systems, and look for signs of compromise.
-
Decision report
We categorize findings as pre-closing or integration conditions. We specify the remediation scope for each finding.
Outcome
What you have at the end
You identify the cyber risks you would inherit before the deal closes. Your price, contract, and integration plan are based on concrete findings.
Frequently asked questions
Can the review be performed without access to the target's systems?
Yes. The first phase is conducted externally, using internet-facing assets and open sources. The deeper technical review is performed when permitted by the parties.
Can it be performed after the deal has closed?
Yes. A compromise assessment before network integration looks for signs of undetected attackers in the acquired environment. This reveals risks before they reach your network.
Do you also assess data protection compliance?
We review the technical measures on systems holding personal data. Legal compliance assessment is the responsibility of your legal advisors.
Cybersecurity Consulting
Other services in this area
Let's talk about this service.
Tell us briefly what you need. We will agree on the scope and timing together in the first meeting.
Schedule a Meeting