© Copyright Acquisition International 2024 - All Rights Reserved.

Article Image - Current Approach to Due Diligence  Requires Rethink
Posted 30th April 2015

Current Approach to Due Diligence Requires Rethink

Completing a corporate transaction without rigorous financial due diligence is unthinkable. Yet, despite numerous well publicised incidents of cybercrime, investors remain blasé about the potential impact of cyber risks on long term value.

Mouse Scroll AnimationScroll to keep reading

Let us help promote your business to a wider following.

Current Approach to Due Diligence Requires Rethink
Image

Current Approach to Due Diligence Requires Rethink

Completing a corporate transaction without rigorous financial due diligence is unthinkable. Yet, despite numerous well publicised incidents of cybercrime, investors remain blasé about the potential impact of cyber risks on long term value.

Deals continue to be made without understanding the potential impact of this ticking time bomb, which U.S. Deputy Treasury Secretary Sarah Bloom Raskin has warned could be “the most pressing operational risk of our time”.

Hackers are becoming increasingly adept not only at penetrating networks, but also avoiding detection once inside corporate systems. Indeed, most significant breaches are uncovered, only after cyber criminals have been lurking inside corporate systems for weeks or months.

To understand the value of an investment and reduce the likelihood of a future catastrophic event, companies and their advisers must ensure cyber resilience is assessed alongside other strategic criteria, before a deal is completed. Leaving a review until after a deal has been signed is a very significant mistake.

A security assessment starts with a wide-ranging review, carried out by an external third party. However, just because the security review is being done at the same time as a financial review, it must not be confused with an audit. It is crucially important for investors to avoid the all-too-common pitfall of treating the security assessment as a checklist audit of security systems. Such an IT audit often does nothing more than confirm that a company meets a certain predefined infrastructure standard. It almost never considers the actual circumstances in which a company operates and tends to ignore the risks that are unique to each company, even though those risks cause the greatest vulnerability. Instead, a proper security assessment must be a customised and risk-focused review, aimed at understanding actual risks and suggests bespoke risk mitigation options.

In addition to identifying security gaps in hardware and software used by a company, a security review will determine the extent to which security is seen as a companywide priority. Everyone involved in using the IT systems has a crucial role to play. Therefore, an important part of good security is ensuring that employees are knowledgeable about their role in protecting company data and do not become the weak link in the security chain. Individuals must be taught to be vigilant about their behaviours, which will make it more difficult for attackers to catch someone unaware. Users also need to understand what to do if they suspect a problem with their computers or activities.

Careless executives or employees represent a significant risk to cyber security, according to a poll of US companies. The Stroz Friedberg ‘On the Pulse: Information Security Risk in American Business’ survey found that a key challenge for companies is to strengthen cyber security awareness among top executives. The survey found that 87% of senior managers regularly use personal email or cloud account to work remotely, placing such information at a much greater risk of being breached. More than half (58%) of senior management also reported that they had accidentally sent sensitive information to the wrong recipient, compared to just one quarter of workers overall.

The strategy to protect information must recognise also that cyber security extends beyond the data held directly by an enterprise. Key assets, including commercial contracts, intellectual property and strategic plans, are commonly held by third parties involved, such as financial or legal advisers. A determined hacker will not only aim to penetrate a corporate network but also target the company’s legal advisers, consultants suppliers and anyone else likely to have valuable information. Corporates must, therefore, ensure their lawyers, brokers, accountants and suppliers are also secure. Indeed, both the UK and US governments have specifically warned law firms that they are the targets of sophisticated hackers and must be better prepared to defend their networks.

Senior executives and their professional advisers can no longer be blind to cyber risks. As such threats become increasingly commonplace and costly, the resilience of the entire supply chain, including financial and legal advisers, must be addressed, so that the long-term value of an investment can be safeguarded from the very beginning.

Seth Berman is executive managing director of Stroz Friedberg, an investigations, intelligence and risk management company. 

Categories: M&A, Strategy


You Might Also Like
Read Full PostRead - Eye Icon
Blockchain is the Inevitable Future of Banking
Innovation
24/07/2018Blockchain is the Inevitable Future of Banking

Fiorenzo Manganiello is a Professor of blockchain technologies at the Geneva Business School and Associate Director of Banque Profil de Gestion, a Swiss private bank.

Read Full PostRead - Eye Icon
Creating Innovative Digital Content Solutions
Innovation
08/05/2019Creating Innovative Digital Content Solutions

Integra is a leading digital content services company providing innovative source-to-publish solutions to global publishers and digital learning solutions to organizations across diverse industry verticals. Following their success in AI’s Global Excellence A

Read Full PostRead - Eye Icon
Driving Global Developments
Leadership
01/04/2021Driving Global Developments

As the world has become more globalized, business has had to move to match it. With every country working to different standards, it’s little surprise that many have struggled to make the best possible investments in time and resources. Named Most Innovative

Read Full PostRead - Eye Icon
Payday Advance & Payday Loan Difference
Finance
07/02/2022Payday Advance & Payday Loan Difference

Today, almost everyone has probably used payday loans at banks or MFIs offering payday loans online at least once in their life. Financial difficulties periodically arise for any person. Therefore, it is necessary to resort to the help of financial organizatio

Read Full PostRead - Eye Icon
Perspective – Four New Firms Acquired
News
01/12/2023Perspective – Four New Firms Acquired

Perspective Financial Group Acquires Four New Firms with More Growth Set to Come Perspective Financial Group has purchased an additional four financial advisory firms, taking the group’s total to 12 acquisitions in 2023. The four acquisitions are: Bright

Read Full PostRead - Eye Icon
Ones to Watch in IP, 2016 – Australia
Legal
01/07/2016Ones to Watch in IP, 2016 – Australia

MacMillan Trade Marks Attorneys provides expert advice in all areas of Australian trademarks and intellectual property (IP). They specialise in providing international clients with efficient and effective protection and enforcement for their trademarks and IP

Read Full PostRead - Eye Icon
Experience in Economics Bring Great Greek Success
Legal
05/01/2021Experience in Economics Bring Great Greek Success

Experience is one of the most valuable things that a lawyer can have in their arsenal of services when working on behalf of a client. An experienced lawyer can reach into their own knowledge to come up solutions that many others simply would not be able to. Th

Read Full PostRead - Eye Icon
Enterprise Password Management: A Comprehensive Guide for Businesses
News
09/10/2023Enterprise Password Management: A Comprehensive Guide for Businesses

Enterprise password management is a crucial aspect of cybersecurity, focusing on securely controlling credentials for privileged accounts, services, systems, and applications. It is also known as privileged password management, and it helps businesses reduce r

Read Full PostRead - Eye Icon
A Guide to the Types of Collateral
Finance
30/06/2021A Guide to the Types of Collateral

If you are applying for finance such as a Lombard loan, you might have to put forward some form of collateral as a guarantee. What works best as collateral? Let’s take a look at some of the options that you could decide to use.



Our Trusted Brands

Acquisition International is a flagship brand of AI Global Media. AI Global Media is a B2B enterprise and are committed to creating engaging content allowing businesses to market their services to a larger global audience. We have 14 unique brands, each of which serves a specific industry or region. Each brand covers the latest news in its sector and publishes a digital magazine and newsletter which is read by a global audience.

Arrow