Reviewing IT in Due Diligence

Bryan Altimas has over 32 years’ experience of technology risk management, having led teams performing technology due diligence, and having advised organisations in numerous business sectors, locations and circumstances on the effectiveness of their technology strategy in delivering business objectives. He is a qualified accountant, Certified Information Systems Auditor (CISA) and Certified in Risk and Information Systems Control (CRISC). He left KPMG in 2014 after 17 years, having contributed to their IT due diligence methodology.Chris Wright is a qualified accountant and Certified Information Systems Auditor (CISA) with over 30 years’ experience providing financial and IT advisory and risk management services. He worked for 16 years at KPMG, where he managed a number of IT due diligence reviews and was head of information risk training in the UK. He has also worked in a wide range of industry sectors including oil and gas, small and medium enterprises, public sector, aviation and travel.

"I found this book very interesting. Due diligence is one of those functions that happens way before us 'IT'ers' get involved and so this is a useful insight into the work that happens up front and the evidence we can obtain for our work even if we were not involved in the initial due diligence." Chris Evans, ITSM Specialist "Being new to this subject I found the guidance solid and presented in an excellent style. I found it an excellent and informative read." Brian Johnson, CA

• 1: Introduction to Due Diligence2: Why is IT Important in Due Diligence?3: Systems Reviews4: IT Security5: Data Reviews6: Reviewing Projects and Changes in Progress7: IT Service Provision and Value for Money8: Reporting IT Due Diligence Assignments9: Post Due-Diligence