Optimize your Sales Due Diligence for Security with airSlate SignNow

How to create outlook signature

let's break out the due diligence process into two into two pieces first I think there's going to be an assessment of the basic security of the network of the company that you're looking to acquire or do and deal with are their systems secure do they have the appropriate technological protections in place do they have do the opposite you know system for making sure they have all current patches etc do they have policies you know state-of-the-art policies and procedures do they track nist are the ISO certified what kind of training you know do their employees and consultants do are they relying on cloud are they relying on third-party connections you know how is their physical security with respect to their vendors how do they assess what they're you know the security of their vendors and the risk that those vendors pose in terms of the interconnection to their networks what is what's the relationship with the with the regulator's have they had problems with regulators have they had prior breaches that how do they how they dealt with them are there privacy policies up-to-date so there are kind of a myriad of questions and inquiry and lines of inquiry that you should go through to assess the cybersecurity preparedness of the target so that's bucket one and that's what it deals with I think avoiding bad stuff that sort of too broadly put liabilities penalties reputational harm etc the second bucket is when you're doing a business where there is in particular data and this is really deals with personal data customer data that you need you know you're planning you want to continue using and that you may want to integrate with your own data or with other business units that the applier has and here you're looking at it somewhat differently which is in you know do they have the appropriate consents from the clients to be able to use this data one certainly for how they using it now but are the ability to use it post acquisition and particularly in the manner that you are painting as part of a larger business unit there may be privacy policies over over different periods of time so you may have different groups of people who have consent under different consent rights so you know you have to be mindful of kind of the different tearing the evolution of how the data was collected and how it's being used are they in compliance so in regulatory compliance with their with how they use this tore this data and will they be after the acquisition is done will they are you planning to transport the data outside the jurisdictions of which they currently operate and if so can you do that do you have the consent to do that and you have the regulatory structure to do that so you know that's and that is I think more of a looking forward aspect of the due diligence and that's not so much to avoid liability immediately but to ensure that what you are buying is going to deliver the value that you're expecting