Mergers & Acquisitions
Cyber due diligence: assume compromise before you close
An acquirer inherits the target's intrusions, regulatory exposure and suppliers. Test for compromise, price what you find and ring-fence until validated. The report sets out the considerations and practical implications discussed in the article.
- Format
- PDF · 14 pages
- Published
- Published Oct 2026
- Article
- Read the article
What's inside
- 01An acquirer inherits the target's breaches, not only its balance sheet
- 02Breach prevalence makes 'no known incident' a weak assurance
- 03Diligence starts late and still misses what matters
- 04Price the exposure: breaches now take longer and cost more
- 05Test for intrusion and supplier risk, not just for policy