IT Due Diligence Report

Especially in the case of a company acquisition or takeover, the migration of one or more departments, or during an audit, an IT Due Diligence Report becomes necessary. The report involves disclosing and meticulously examining information with regard to a planned takeover or analysis of the IT system landscape. Technology-related areas of the company are audited and evaluated. Depending on your specific objective, the IT Due Diligence Report is tailored accordingly.

Contents and tasks of an IT Due Diligence Report

In an IT Due Diligence Report, all IT costs of a company, including its locations and associated companies or departments, are first gathered: the so-called CAPEX and OPEX – CAPital EXpenditures are capital expenditure and OPerational EXpenditures describe ongoing operational expenditure.

The entire IT structure of the company can be graphically presented upon request. An overview of the LAN/WAN infrastructure is created, and the associated costs and ongoing contracts are gathered.

Servers and clients are inventoried, evaluated and, if necessary, schematically presented. This procedure resembles a complete hardware and software inventory of the company. This naturally also includes all printers, ERP systems, as well as purchased and licensed software and concluded framework agreements. A standalone item is the recording of licensing.

Physical on-site conditions are also included in the report, such as server rooms, time recording terminals, barcode systems and access control systems that are connected to the IT.

IT security concepts are also included and analysed: We examine your firewall, your email system, antivirus/spam systems as well as Mobile Device Management. Server lists and all granted access rights, such as domain admin accounts are also listed in the report.

Your corporate policies are also recorded in the report, as well as existing framework and maintenance contracts. This includes any contracts relating to software, hardware, your telephone system, air conditioning systems, emergency power units and whatever else is under contract in the company. Contact persons for your business software are identified and listed; if no contact person has been defined, a person will be determined together with you.

We provide you with an overview of current and upcoming IT projects, supply you with suggestions for improvement for your support and troubleshooting upon request, identify business risks in connection with IT, and prepare the necessary action plans for you.

Your backup concepts and plans are analysed and, if necessary, benchmarked against legal requirements. From this, we derive necessary 'Actions to Take' and create an action plan accordingly.

With regard to ITIL we prepare a report on resolved/executed incidents, requests or changes that your team has already processed in the past. This allows the expected workload to be better estimated and the staffing requirements to be planned appropriately.

General questions regarding private use of company equipment, mobile use of IT devices (Bitlocker), password policies, email distribution lists, virus scanners and workplace policies are answered during the report process. Last but not least, a budget summary is included in the report.

Book an appointment→

External service provider as support for creating an IT Due Diligence Report

Engaging an external service provider for the IT Due Diligence Report makes complete sense. The conditions are analysed and compiled in the report impartially and objectively. First of all, a comprehensive consultation on the individual contents of an IT Due Diligence Report should take place. This creates a shared understanding of the report's benefits. The level of detail in the report is tailored to your requirements and needs. Following an as-is assessment across all locations, in person where necessary, responsibilities are established to determine who provides which information for the report. Time horizon planning is of course also taken into account.

Before, during and after the preparation of the report, a consultant will be at your side as a point of contact. Once the report has been completed, the next steps towards IT transition can be planned and starting points for migration defined.

A systematic examination and documentation of all IT matters is becoming increasingly important in the age of digitalisation. The report considers all technical aspects of your company, with all their risks, but also opportunities. In comparison to the finance-oriented Commercial Due Diligence Report, the IT Due Diligence Report deals with technological topics. Which reports you have prepared and can use to your best advantage is entirely up to you.

Your partner for IT Due Diligence

As company size increases, so does the complexity and volume of existing IT processes. You should therefore act as early as possible to identify risks and opportunities promptly and respond to them. Together with you, we define which focus areas you wish to set in the report and then take care of data collection for the report, analysis and the elaboration of further steps and plans.

We would be delighted to discuss in a personal meeting whether and in what form an IT Due Diligence Report makes sense for you. We tailor the report specifically to your needs and apply more than just a standardised checklist with comprehensive technical expertise.