© Copyright Acquisition International 2024 - All Rights Reserved.

Article Image - Current Approach to Due Diligence  Requires Rethink
Posted 30th April 2015

Current Approach to Due Diligence Requires Rethink

Completing a corporate transaction without rigorous financial due diligence is unthinkable. Yet, despite numerous well publicised incidents of cybercrime, investors remain blasé about the potential impact of cyber risks on long term value.

Mouse Scroll AnimationScroll to keep reading

Let us help promote your business to a wider following.

Current Approach to Due Diligence Requires Rethink
Image

Current Approach to Due Diligence Requires Rethink

Completing a corporate transaction without rigorous financial due diligence is unthinkable. Yet, despite numerous well publicised incidents of cybercrime, investors remain blasé about the potential impact of cyber risks on long term value.

Deals continue to be made without understanding the potential impact of this ticking time bomb, which U.S. Deputy Treasury Secretary Sarah Bloom Raskin has warned could be “the most pressing operational risk of our time”.

Hackers are becoming increasingly adept not only at penetrating networks, but also avoiding detection once inside corporate systems. Indeed, most significant breaches are uncovered, only after cyber criminals have been lurking inside corporate systems for weeks or months.

To understand the value of an investment and reduce the likelihood of a future catastrophic event, companies and their advisers must ensure cyber resilience is assessed alongside other strategic criteria, before a deal is completed. Leaving a review until after a deal has been signed is a very significant mistake.

A security assessment starts with a wide-ranging review, carried out by an external third party. However, just because the security review is being done at the same time as a financial review, it must not be confused with an audit. It is crucially important for investors to avoid the all-too-common pitfall of treating the security assessment as a checklist audit of security systems. Such an IT audit often does nothing more than confirm that a company meets a certain predefined infrastructure standard. It almost never considers the actual circumstances in which a company operates and tends to ignore the risks that are unique to each company, even though those risks cause the greatest vulnerability. Instead, a proper security assessment must be a customised and risk-focused review, aimed at understanding actual risks and suggests bespoke risk mitigation options.

In addition to identifying security gaps in hardware and software used by a company, a security review will determine the extent to which security is seen as a companywide priority. Everyone involved in using the IT systems has a crucial role to play. Therefore, an important part of good security is ensuring that employees are knowledgeable about their role in protecting company data and do not become the weak link in the security chain. Individuals must be taught to be vigilant about their behaviours, which will make it more difficult for attackers to catch someone unaware. Users also need to understand what to do if they suspect a problem with their computers or activities.

Careless executives or employees represent a significant risk to cyber security, according to a poll of US companies. The Stroz Friedberg ‘On the Pulse: Information Security Risk in American Business’ survey found that a key challenge for companies is to strengthen cyber security awareness among top executives. The survey found that 87% of senior managers regularly use personal email or cloud account to work remotely, placing such information at a much greater risk of being breached. More than half (58%) of senior management also reported that they had accidentally sent sensitive information to the wrong recipient, compared to just one quarter of workers overall.

The strategy to protect information must recognise also that cyber security extends beyond the data held directly by an enterprise. Key assets, including commercial contracts, intellectual property and strategic plans, are commonly held by third parties involved, such as financial or legal advisers. A determined hacker will not only aim to penetrate a corporate network but also target the company’s legal advisers, consultants suppliers and anyone else likely to have valuable information. Corporates must, therefore, ensure their lawyers, brokers, accountants and suppliers are also secure. Indeed, both the UK and US governments have specifically warned law firms that they are the targets of sophisticated hackers and must be better prepared to defend their networks.

Senior executives and their professional advisers can no longer be blind to cyber risks. As such threats become increasingly commonplace and costly, the resilience of the entire supply chain, including financial and legal advisers, must be addressed, so that the long-term value of an investment can be safeguarded from the very beginning.

Seth Berman is executive managing director of Stroz Friedberg, an investigations, intelligence and risk management company. 

Categories: M&A, Strategy


You Might Also Like
Read Full PostRead - Eye Icon
What are the Potential Issues with Mergers and Acquisitions?
M&A
28/11/2022What are the Potential Issues with Mergers and Acquisitions?

When two companies combine, it can help the new entity boost its market share and profits. The two main ways of achieving this are through mergers and acquisitions. Mergers occur when separate companies combine to form one company.

Read Full PostRead - Eye Icon
10 Steps to Take to Start Your Own Trucking Business
News
23/05/202310 Steps to Take to Start Your Own Trucking Business

Starting your own trucking company offers a unique opportunity to carve out a niche in the ever-expanding transportation and logistics industry. As an owner, you can enjoy the freedom of being your own boss while reaping the benefits of meeting rising demands

Read Full PostRead - Eye Icon
The Legal Bridge To Success
Legal
18/06/2021The Legal Bridge To Success

Created by entrepreneurs, for entrepreneurs Tecola is a specialist law firm that was recently awarded the Best Niche Technology & Privacy Law Firm of Belgium for 2021.

Read Full PostRead - Eye Icon
Financial Data Breaches: ICO Reports 8,000 Percent Rise
Finance
07/05/2024Financial Data Breaches: ICO Reports 8,000 Percent Rise

According to the Information Commissioner’s Office (ICO), there was an 8,000 percent increase in the number of people affected by financial data breaches in central government between 2019 and 2023.

Read Full PostRead - Eye Icon
First Quarter Update – KBS Corporate
Finance
17/05/2016First Quarter Update – KBS Corporate

KBS Corporate is recognised as one of the UK’s leading providers of company sales services, offering complete project management and consultancy services to shareholders and owner managers who are considering an exit strategy.

Read Full PostRead - Eye Icon
2016 Most Innovative Hedge Fund Manager – USA
Finance
29/06/20162016 Most Innovative Hedge Fund Manager – USA

Vida Capital is an alternative asset manager focused exclusively on longevitycontingent assets, including life settlements, annuities, notes, and structured settlements. Vida seeks to provide strong absolute and risk-adjusted returns. The Vida team are value i

Read Full PostRead - Eye Icon
European Commission Give Green Light for SME Financing before the Summer
Strategy
18/02/2015European Commission Give Green Light for SME Financing before the Summer

SMEs across Europe should be able to benefit from the first funds from the new European Fund for Strategic Investments (EFSI) before the summer.

Read Full PostRead - Eye Icon
Better Capital sale of Calyx Managed Services
Finance
19/03/2015Better Capital sale of Calyx Managed Services

Following a competitive auction process involving a number of interested parties, Calyx Managed Services (“CMS”) was sold to MXC Capital Limited for an enterprise value of £9.0m. The CMS element of the Calyx Group’s most recent valuation was £4.9m.

Read Full PostRead - Eye Icon
Clifford Chance Advise Perceva Acquisition of Vanity Fair brand
M&A
30/07/2015Clifford Chance Advise Perceva Acquisition of Vanity Fair brand

Clifford Chance Advise Perceva Acquisition of Vanity Fair brand



Our Trusted Brands

Acquisition International is a flagship brand of AI Global Media. AI Global Media is a B2B enterprise and are committed to creating engaging content allowing businesses to market their services to a larger global audience. We have 14 unique brands, each of which serves a specific industry or region. Each brand covers the latest news in its sector and publishes a digital magazine and newsletter which is read by a global audience.

Arrow