Reasonable investigation and assessment before making decisions or entering relationships.
Due diligence is the reasonable investigation conducted before business decisions—acquisitions, vendor selection, partnerships, or investments. Security due diligence assesses an organisation's security posture, identifying risks that could affect the decision. For acquisitions, this includes reviewing security controls, incident history, and compliance status. For vendors, it means assessing their ability to protect your data. Due diligence findings inform risk decisions and negotiating positions.
Why It Matters
The DSC Perspective:
Due diligence prevents costly surprises. Before acquiring companies, engaging vendors, or entering partnerships, understand the security risks involved. Findings should inform decisions and risk treatment.