Continuing the conversation on cybersecurity leaders’ concerns is Mergers and Acquisitions. Divestitures fall within this category as companies sell off portions of their business. Cybersecurity concerns are a distinct part of mergers and acquisitions because of the significant cybersecurity risk posed by target companies. The domains are roughly aligned with how companies address mergers and acquisitions. There is a lifecycle, but that depends on the organization and if they have worked with a third party to develop an M&A program, processes, and procedures. This is generalized to that perspective. It does take a lot of effort to move from merger or acquisition into the final target integration state unless the company acquired will be operating standalone. However, any one manner of operation still generates concerns for cybersecurity leadership.

Anyone can use and modify this public domain document to meet their needs.