Securing Your M&A Activity with Cybersecurity Due Diligence
summary
Explains exactly which checks change valuations: verify deal‑room jurisdiction and retention, force strong MFA (prefer hardware tokens over SMS), audit key management and tenant separation, and run a red team test if time allows. Cites breaches that alter deal math — Marriott‑Starwood losing 380 million records (~$70M reported cost), Telstra finding a breach two weeks before close, PayPal acquiring a processor later found compromised years earlier. Recommends immediate data‑room selection, three‑month protocols and red team, six‑month continuous monitoring.
AI-written summary · about
chapters (16)
- 0:00Intro
- 1:23Raised Risk Profile
- 3:03Deal Room - Jurisdiction
- 3:55Deal Room - Data Governance
- 5:05Deal Room - Data Retention
- 5:48Deal Room - Access Control
- 7:14Deal Room - Application Security
- 8:28Buy Side - Advisors
- 10:05General Deal Risk - Extension to Cyber
- 11:06Marriott - Starwood Data Breach
- 17:35Sell Side - Security Testing Validation
- 18:52Difference between compliant and Secure!
- 20:56Sample Test - Dynamic Risk Assessment
- 22:57Cyber DD - Insights You Need to Know
- 25:14Apply - Buy Side
- 26:51Apply - Sell Side
related talks
50mNavigating M&A Security Challenges: A Deep Dive into a Case Study
43mAvoiding the Four Biggest Mistakes That Will Blow Up an M&A
16mSecurity, Fraud, and Compliance
50mIt’s an Acquired Taste
08mEnhancing Cybersecurity with Multi-Factor Authentication
44mCybersecurity - Protecting the Organisation's Technological Assets
22mSecurity and Risks
33mCybersecurity Strategic Activity, Recent Trends & Predictions