Acquisitions - Your Latest Zero Day
Explore the complexities of information security during acquisitions in this 51-minute conference talk from Louisville InfoSec 2013. Delve into risk categories, pre-due diligence processes, and minimum necessary requirements for Week 1 of an acquisition. Learn about separating but equalizing systems, adapting to different business models, and understanding attestation requirements. Examine strategies for moving common security platforms, managing increased connectivity, and handling Exchange 2010 migrations. Discover approaches for assessing companies with multiple websites, addressing copier security, and distinguishing between QA and production environments. Gain insights on documentation practices, effective interviewing techniques, and the importance of retaining key personnel. Conclude with guidance on closing meetings, issue tracking, change management, integration processes, and evaluating business value through assessment results.