Information Security Officers: How involved are you in the cybersecurity due diligence process during mergers and acquisitions (M&A)?

Security Strategy & RoadmapIT Strategy & Roadmap

Heavily involved (from initial evaluation to post-transaction integration)18%

Moderately involved (only during specific phases)73%

Minimally involved (occasional consultation)9%

Not involved

11 PARTICIPANTS
1.3k viewscircle icon1 Comment
Sort by:
CISO in Insurance (except health)a year ago

Working closely with CIO and COO to understand the architectural landscape and the relevant risks, Investment needed or synergies is a key for a successful M&A activity. Moreover a CISO will almost always give a different perspective to the CEO and we do have tools in our arsenal to evaluate areas that others executives usually oversee. 

Content you might like

What’s the top cybersecurity challenge concerning your organization right now?

AI-driven threats (deepfakes, automated attacks) 18%

Software supply chain risks 19%

Insider risk (both malicious & accidental) 13%

Regulatory compliance 7%

Cloud misconfigurations 10%

Shadow IT (or shadow AI) 14%

Ransomware 6%

Talent shortage in cybersecurity10%

Something else (comment to explain)3%

View Results

I'm looking to go for the Certified CISO certification & training as I'm an aspiring CISO. Any recommendations and additional certifications that I should be doing along with that? I already have CISSP. 

Read More Comments

How can security leaders in smaller organizations stay informed about emerging threats if they don’t have access to formal threat intelligence feeds?

Read More Comments

We are discussing within the company how to structure our response to digital scams and fraud, especially scams involving fake profiles on social media such as WhatsApp. Criminals create fake profiles via WhatsApp with unofficial numbers and contact consumers, obtaining their data and then fraudulently generating payment slips. How is this situation structured in your company? Is there a dedicated area for this? Is it under Information Security? And if it is under Information Security, to whom does the area report—directly to the board/council/senior management, or is it under the IT department?

Read More Comments