fechar
fechar
Sua Rede do Amanhã
Sua Rede do Amanhã
Planeje seu caminho rumo a uma rede mais rápida, segura e resiliente projetada para os aplicativos e usuários aos quais você oferece suporte.
          Experimente a Netskope
          Coloque a mão na massa com a plataforma Netskope
          Esta é a sua chance de experimentar a plataforma de nuvem única do Netskope One em primeira mão. Inscreva-se em laboratórios práticos e individualizados, junte-se a nós para demonstrações mensais de produtos ao vivo, faça um test drive gratuito do Netskope Private Access ou participe de workshops ao vivo conduzidos por instrutores.
            Líder em SSE. Agora é líder em SASE de fornecedor único.
            Líder em SSE. Agora é líder em SASE de fornecedor único.
            A Netskope estreia como líder no Quadrante Mágico™ do Gartner® para Single-Vendor SASE
              Protegendo a IA generativa para leigos
              Protegendo a IA generativa para leigos
              Saiba como sua organização pode equilibrar o potencial inovador da IA generativa com práticas robustas de segurança de dados.
                E-book moderno sobre prevenção de perda de dados (DLP) para leigos
                Prevenção Contra Perda de Dados (DLP) Moderna para Leigos
                Obtenha dicas e truques para fazer a transição para um DLP fornecido na nuvem.
                  Livro SD-WAN moderno para SASE Dummies
                  SD-WAN moderno para leigos em SASE
                  Pare de brincar com sua arquitetura de rede
                    Compreendendo onde estão os riscos
                    O Advanced Analytics transforma a maneira como as equipes de operações de segurança aplicam insights orientados por dados para implementar políticas melhores. Com o Advanced Analytics, o senhor pode identificar tendências, concentrar-se em áreas de preocupação e usar os dados para tomar medidas.
                        Os 6 casos de uso mais atraentes para substituição completa de VPN herdada
                        Os 6 casos de uso mais atraentes para substituição completa de VPN herdada
                        O Netskope One Private Access é a única solução que permite que o senhor aposente sua VPN definitivamente.
                          A Colgate-Palmolive protege sua “propriedade intelectual "” com proteção de dados inteligente e adaptável
                          A Colgate-Palmolive protege sua “propriedade intelectual "” com proteção de dados inteligente e adaptável
                            Netskope GovCloud
                            Netskope obtém alta autorização do FedRAMP
                            Escolha o Netskope GovCloud para acelerar a transformação de sua agência.
                              Vamos fazer grandes coisas juntos
                              A estratégia de comercialização da Netskope, focada em Parcerias, permite que nossos Parceiros maximizem seu crescimento e lucratividade enquanto transformam a segurança corporativa.
                                Netskope solutions
                                Netskope Cloud Exchange
                                O Netskope Cloud Exchange (CE) oferece aos clientes ferramentas de integração poderosas para alavancar os investimentos em toda a postura de segurança.
                                  Suporte Técnico Netskope
                                  Suporte Técnico Netskope
                                  Nossos engenheiros de suporte qualificados estão localizados em todo o mundo e têm diversas experiências em segurança de nuvem, rede, virtualização, fornecimento de conteúdo e desenvolvimento de software, garantindo assistência técnica de qualidade e em tempo hábil.
                                    Vídeo da Netskope
                                    Treinamento Netskope
                                    Os treinamentos da Netskope vão ajudar você a ser um especialista em segurança na nuvem. Conte conosco para ajudá-lo a proteger a sua jornada de transformação digital e aproveitar ao máximo as suas aplicações na nuvem, na web e privadas.

                                      Building Security into Your M&A Process Part 1: Due Diligence

                                      Jun 23 2022

                                      This is the first part of a four-part blog series where I will cover each of these phases of the M&A process and how you can build security into each phase.

                                      If you read the news, you already know that we’re seeing a huge uptick in mergers and acquisitions (M&A). Global M&A volumes hit a record high in 2021—increasing by 64% over the previous year and topping $5 trillion for the first time ever. This activity continues to surge in 2022 as companies use M&A to manage the still-unpredictable economic effects of the COVID-19 pandemic and find their strategic footing. Deals can help them streamline assets, establish or extend digital capabilities, acquire top talent, and otherwise strengthen their competitive positions.

                                      M&As are all about speed and secrecy. Your business development group will start by researching companies—and in the beginning, it’s completely stealth. In fact, the business development group may be the only people who know what specific companies are even being considered. Once that core team identifies a company that fits their plans, they’ll move forward with the formal M&A process—which we’ve defined in four phases. 

                                      Phase One: Due Diligence

                                      The due diligence phase of the M&A process is where information will start being shared between the acquirer (i.e., the buyer) and the target (the company that’s being acquired). 

                                      One of the critical errors that many businesses make to keep things as quiet as possible early on is that they don’t inform their security team that an M&A is being explored. Often a security expert is engaged along with the broader team after the due diligence is done and the letter of intent is signed. But that’s really too late. If I’m that due diligence team, I want to understand the security posture of the target company as early as possible. I need to know what technologies they currently have in place to understand the risk levels and the security team will want to start planning out the day one integration. 

                                      Business development groups should always involve at least one person from the security team among the trusted entities read in early in the transaction process. A security expert will help ensure secure information sharing and they can also help identify some big potential risks before the companies sign a letter of intent. 

                                      Target companies may stop doing investments to boost their profit and loss (P&L) statement—including some things that should have been made for maintaining safe operations. Therefore, a key part of this phase has to be evaluating the target company’s impact on the overall security of the organization. You want to discover all the potential costs and the risks of the transaction in advance. And there may be things that aren’t evident on the surface. A cybersecurity due diligence review should evaluate all aspects of the target’s security—including policies, procedures, account management, regulatory compliance, applications, APIs, and cloud/infrastructure security.

                                      It’s not that different from buying a house. A house inspector helps the buyer understand any repairs that need to be made to keep the house safe, and that information helps with negotiating the final terms of the sale. Or if the inspector discovers problems that are too great a risk (like a cracked foundation), it gives the buyer a chance to move on to another property that’s a better investment.

                                      If I’m working for the acquirer, I’m going to be looking at a target from a security perspective to determine the kinds of investments that will have to be made in order to bring them up to the equivalent of the acquiring company. That will be probably the most quantifiable part of it. The second part, though, is going to be how likely is it that they’ve already had a breach that no one knows about. Early detection of an attack or breach could save the acquirer from unwittingly taking on a material liability that might be both expensive and generate bad press. 

                                      Acquiring companies have suffered hefty losses by discovering a target’s past data breaches only after completing the final deal transactions. This can result in significant fines and reduction in the target company’s overall deal value. You might need to do millions in clawbacks. In one example from a few years ago, Verizon reduced its offer for Yahoo by $350 million after discovering two massive data breaches in Yahoo’s recent past that had not been fully disclosed

                                      Data is also going to start moving back and forth between the two companies during due diligence. The target is going to send financials, and often data will come the other direction from the acquirer as well. Security needs to be able to see these data flows to make sure information sharing is handled properly. 

                                      Stay tuned for Part 2, where I will talk about integration planning and public announcement. For more about how you can fit security into your M&A process, download a copy of the Smoothing Out M&A solution brief.

                                      author image
                                      James Christiansen
                                      James Christiansen is Netskope’s VP of cloud security transformation and leader of the Global Chief Strategy Office. He is focused on enhancing Netskope’s global clients.
                                      James Christiansen is Netskope’s VP of cloud security transformation and leader of the Global Chief Strategy Office. He is focused on enhancing Netskope’s global clients.

                                      Mantenha-se informado!

                                      Assine para receber as últimas novidades do Blog da Netskope