ITDueDiligenceRequestListTargetCo

Copyright20122013AlzhanDevelopmentLLC.Allrightsreserved.http://www.ITDueDiligenceGuide.com

ItemID

ItemDescription

Provided
Not
Applicable
DataRoom
Location

Comments
ITStaff
Anorganizationchartforthetechnologystaff.Include
employeenames,titles,fullorparttimestatusand
localorremotelocation.

AlistofallITemployees,asummaryoftheir
responsibilitiesandcopiesoftheirresumes.

Alistofanyinactiveemployees,statingthereasonfor
theirinactivestatusandtheprognosisfortheirreturn.

Alistofterminatedemployeesforthepastthreeyears,
andanyconfidentiality,nonsolicitation,severance
agreementsetc.thatapplytothem.

Copiesofanynoncompeteornonsolicitation
agreementssignedbytheemployees,andalistofany
employeeswithoutsuchagreements.

Alistofanyopenpositionsandplannedhiresinthe
technologyorganization,includinganticipatedsalaries.

Alistofallstaffsalariesandbonusesforthepastthree
yearsandanyraisesorbonusesexpectedinthenext
twelvemonths.

Adescriptionofanyexisting,pendingoranticipated
lawsuitsrelatedtoITorITemployees.

Adescriptionofhowthetechnologystaffcollaborates.
Adescriptionofthetrainingandeducationthatthe
technologystaffreceives.

Alistofnewhiresrequiredtoaccomplishplannednew
objectivesordevelopmentprojects.

ITDueDiligenceRequestListTargetCo
Copyright20122013AlzhanDevelopmentLLC.Allrightsreserved.http://www.ITDueDiligenceGuide.com

ItemID

ItemDescription

Provided
Not
Applicable
DataRoom
Location

Comments
Products
AlistanddescriptionofallITorsoftwareproductssold
orbuiltforinternaluse.Foreach,includedelivery
method,keycompetitors,numberofactivecustomers,
status(inproduction,planned,beta,etc,),highlevel
marketstrategyandanyuniqueorproprietary
technology.

Adescriptionofanyadministrativeinterfacesto
existingproductsandsystemsandalistofallpeople
whohavehadaccessforthepastthreeyears.

Copiesofanydocumentsrelatedtoindustry
certificationsforanyofthecompanysproducts.

Alistingofallawardsorindustryrecognition,datesand
selectioncriteria.

Anestimateofhowthecompanyssoftwareand
systemswouldhandleasignificantincreaseinvolume.

Theopportunitytoseeademonstrationofallproducts,
internaltoolsandsupportsoftware,including
administrativeinterfaces.

Adescriptionofanyproductsunderdevelopmentor
productprototypes/wireframes.

Adescriptionofthewaycustomerdataisstoredinthe
database.Iseachcustomersdatastoredseparately?

Adescriptionofanyproductssoldbasedonthedata
thecompanycollectsfromitscustomers,oranydirect
resaleofraworsummarycustomerdata.

SoftwareDevelopmentProcess
Adescriptionofthesoftwaredevelopmenttoolsand
environmentutilizedbythecompany.

Adescriptionoftheversioncontrolprocessand
system(s)utilized.

ITDueDiligenceRequestListTargetCo
Copyright20122013AlzhanDevelopmentLLC.Allrightsreserved.http://www.ITDueDiligenceGuide.com

ItemID

ItemDescription

Provided
Not
Applicable
DataRoom
Location

Comments
Adescriptionoftheprocessforapprovingand
developingnewsoftwareproductsorfeatures.

Adescriptionofanyoutsourcedsoftwaredevelopment
arrangementsandcopiesoftherelatedagreements.

Adescriptionofthesoftwaredevelopmentmodelthat
isused(examplesincludeAGILEorwaterfall).

Adescriptionoftheprocessinplaceforidentifying,
trackingandcorrectingproductbugs.

Adescriptionoftheprocessfordesigningproductuser
interfaces.

Adescriptionofthedatabasedesignprocess.
Adescriptionastohowproductsecurityisconsidered
duringproductdevelopment.

Adescriptionofthesoftwaredevelopmentcoding
standardsusedbythecompany.

Documentation
Alistofpeoplewithaccesstothecompanyssource
codeforthepastthreeyears.

Alistofanysoftwaredevelopedbythecompanyfor
whichthesourcecodeisnolongeravailable.

Productdevelopmentroadmapsforthenexttwelve
months.

Copiesofanyendusersoftwaredocumentation.
Monthlytrafficreportsincludingpageviews,unique
visitorsandtopreferrersforthepastthreeyearsand
estimatesfornexttwelvemonths.

Copiesofanydatadictionariesforbothproductsand
systemsdevelopedforinternaluse.

Copiesofanyinternalorpublicwhitepapersorcase
studiesdescribingthetechnology.

ITDueDiligenceRequestListTargetCo
Copyright20122013AlzhanDevelopmentLLC.Allrightsreserved.http://www.ITDueDiligenceGuide.com

ItemID

ItemDescription

Provided
Not
Applicable
DataRoom
Location

Comments
SoftwareUtilized
Alistofproductdevelopmenttoolsutilized,including
costsandcurrentlicensingterms.

Alistanddescriptionofdatabasesoftwareutilized,
includingtheversion,licensingmodelandcosts.

Alistofallsoftwarelicensesmaintainedbythe
company.

Alistofanythirdpartytoolsorcontentthatare
utilizedbyorembeddedwithinthecompanyssoftware
products.

Adescriptionofthewaythecompanytracksthe
softwareitlicensesforitsownuse.

Adescriptionoftheinternaltechnologysystems:email,
network,payroll,accounting,customerrelationship
managementetc.

Alistofanysoftwarethatisnotproperlylicensed.
Hardware
Alistofallcomputerserverhardware,whetheritis
ownedorleased,andcurrentvalue.Includeoperating
systemsandversions.

Aninventoryofalllaptopsanddesktopcomputers,
includingmodel,approximateage,approximatecost,
operatingsystem,operatingsystemversion,and
whetherthecomputerisleasedorowned.

Adescriptionofhowcomputersystemsare
maintained.

Aninventoryofanycompanyownedmobileortablet
devicesissuedtoemployees.

NetworkandInfrastructure
Anetworkdiagramshowingnetworkentrypoints,
firewalls,serversetc.

ITDueDiligenceRequestListTargetCo
Copyright20122013AlzhanDevelopmentLLC.Allrightsreserved.http://www.ITDueDiligenceGuide.com

ItemID

ItemDescription

Provided
Not
Applicable
DataRoom
Location

Comments
Alistofanymonitoringtoolsinplaceforthecompanys
ITinfrastructure.

Adescriptionofthecurrentserver/hosting
environment.Isithostedinhouse,viaathirdparty,
etc.?Describetheuseanycloudbasedresourcessuch
asAmazonWebServicesorMicrosoftWindowsAzure.

Adescriptionoftheprocessbywhichthesalesand
operationsstaffcommunicatesalesandmarketing
informationtotheITstaffsopropercapacityplanning
canbeperformed.

Adescriptionofanyredundanciesbuiltintothehosting
platformandhardware.

Anexplanationofanyunschedulednetworkorsystem
downtimeinthepasttwelvemonths.

BackupandRecovery
Copiesofanyexistingdisasterrecoveryand/or
businesscontinuityplans.

Copiesofanybackuppolicies,anddetailsregarding
howlongtheyhavebeeninplace.

IntellectualProperty
Alistofalldomainnamescontrolledbythecompany
(alsoTwitterhandlesandcorporateLinkedIn,Facebook
andothersocialnetworkingaccounts).

Alistofanypatentsortrademarksappliedfororheld
bythecompanyrelatedtocompanytechnology.

Alistofanycopyrightsrelatedtosoftwaredeveloped
bythecompany.

Adescriptionofanysoftwareescrowdepositsrelated
tothecompanyssoftwareproducts,andcopiesofany
relatedagreements.


Customers

Adescriptionofthetechnicalsupportprocess.
ITDueDiligenceRequestListTargetCo
Copyright20122013AlzhanDevelopmentLLC.Allrightsreserved.http://www.ITDueDiligenceGuide.com

ItemID

ItemDescription

Provided
Not
Applicable
DataRoom
Location

Comments
Alogofcustomertechnicalsupportcalls/questionsfor
thepastfourmonths.

Adescriptionoftheimplementationprocessforanew
customer.


Quality

AdescriptionofthesoftwaredevelopmentQA/testing
process.

Alistofknownsoftwarebugs/limitations/
outstandingcustomerfeaturerequests.


Financial

Adescriptionofthewaynewsoftwaredevelopment
projectsandongoingmaintenancearecapitalizedand
expensed.

Alistofthetechnologycapitalexpendituresforthe
pastthreeyearsandthoseplannedfornexttwelve
months.

SecurityandCompliance
Adescriptionofhowthecompanystaysuptodateon
allvendorsoftwarepatches.

Adescriptionofanysystemvulnerability,intrusion
detectionorpenetrationtestingthathasbeen
performed.

Alistanddescriptionofanyfirewallsmaintainedbythe
company,includingtheirpurposeandanymonitoring
thatisperformedonaregularbasis.

Adescriptionofanywirelessnetworksmaintainedby
thecompany,includingpasswordprotectionanddata
encryptionsettings,andanymonitoringthatis
performedonaregularbasis.

ITDueDiligenceRequestListTargetCo
Copyright20122013AlzhanDevelopmentLLC.Allrightsreserved.http://www.ITDueDiligenceGuide.com

ItemID

ItemDescription

Provided
Not
Applicable
DataRoom
Location

Comments
AdescriptionofanyVPNsorotherremoteaccess
systemsthatallowaccesstothecompanysnetworks,
includingpasswordprotectionanddataencryption
settings,andanymonitoringthatisperformedona
regularbasis.

Adescriptionofthehowaccesstothecompanys
sourcecodeandothercriticalresources(documents,
contractsetc.)ismonitoredandtracked.

Forwebbasedproducts,adescriptionoftheprocessof
releasingchangestotheproducts,includingtheuseof
anytestorstagingservers,andthelevelofaccessthat
developershavetotheproductionenvironment.

Acopyofanyacceptableusepolicyregardingcompany
computersandsystemsthatallpersonnelarerequired
tosign.

Alistofanyusersthatarenotsubjecttothestandard
securitypoliciesofthecompany.

Adescriptionofanysituationsinwhichusersor
networkadministratorsshareaccesstosystems.

Alistofanyregulatoryrequirementsrelatingto
technologytowhichthecompanyissubject,anda
descriptionastohowthecompanycomplies.

Alistofanynonemployeeswhohaveaccesstocritical
companyinformation(sourcecode,documentation,
etc.).

Adescriptionofthecommunicationandcoordination
betweencompanyhumanresourcesstaffandtheIT
stafftoremoveaccessforemployeesandcontractors
thatareterminated.

Adescriptionofanyencryptionofcompanyorproduct
dataduringtransmissionoratrest.

ITDueDiligenceRequestListTargetCo
Copyright20122013AlzhanDevelopmentLLC.Allrightsreserved.http://www.ITDueDiligenceGuide.com

ItemID

ItemDescription

Provided
Not
Applicable
DataRoom
Location

Comments
Adescriptionofhowanydatathatisnolongerneeded
ispurgedordestroyed,andcopiesofanydata
retentionpolicies.

Adescriptionofpasswordpoliciesforthecompany
networksandsystems,includinglengthandcomplexity,
andanyexpirationpolicies.

Acopyofanyproceduresinplacetoidentify,report
andremediateanysecuritybreaches.

Adescriptionofanybackgroundchecksperformedon
potentialnewemployeespriortotheirbeinghired.

Adescriptionofanyphysicalaccessrestrictionsto
criticalcompanyassetssuchasserversanddata.

CopiesofanyIToperationalorsecurityaudit(i.e.SSAE
16,SAS70)performedinthepastthreeyears.

Adescriptionofanysecuritybreachesinthepastfive
years.

Adescriptionoftheprocessforoperatingsystemand
securityupdatesforemployeecomputersandservers.

Alistofanyserver,laptopordesktopwithoutantivirus
softwareinstalled.

IfthecompanyisbasedintheEuropeanUnion,explain
howthecompanyswebsitescomplywiththeEU
CookieLaw.

AcopyofthecompanysBYOD(bringyourown
device)policy,ifoneexists.

AgreementsandOtherLegalDocuments

Copiesofanyhostingcompanyagreements.
Copiesofanythirdpartysoftwareortechnology
agreements.

Alistofanyexternalcontractorsorconsultantswho
havebeeninvolvedinthedevelopmentofanysoftware
orsystemsandcopiesofanyagreementswiththose
contractors.

ITDueDiligenceRequestListTargetCo
Copyright20122013AlzhanDevelopmentLLC.Allrightsreserved.http://www.ITDueDiligenceGuide.com

ItemID

ItemDescription

Provided
Not
Applicable
DataRoom
Location

Comments
Detailsofanycontractuallyobligatedproductfeatures
orservicelevelagreements.

Copiesofcustomersoftwarelicenseorsubscription
agreementtemplates.

Copiesofanyhardwaremaintenanceorsupport
agreements.

Adescriptionofthecompanyspropertyandliability
insurancecoverageasitrelatestocomputerequipment
andmarketedproducts.

Copiesofanytelecommunicationsagreements.
Copiesofcustomerandsuppliercontractswithchange
ofcontrolandassignmentprovisions.


Other

Asourcecodereview.









ITDueDiligenceRequestListTargetCo
Copyright20122013AlzhanDevelopmentLLC.Allrightsreserved.http://www.ITDueDiligenceGuide.com

Now,ConsiderBuyingtheBook
TheITDueDiligenceGuideincludesmuchmorethanthischecklist.

Itsanebookthatprovidesadetailedexplanationofeachquestiononthechecklistwhy
itsimportantandwhatthepotentialanswerscantellyouaboutyouracquisitiontarget.
ItalsoincludesanITduediligencereporttemplatetohelpyoucreateaduediligencereport
inaformatthatwillbeusefultofinancialexecutives.
Youcanseeasamplechapterandothersupportingcontenthere:
http://www.itduediligenceguide.com/samplecontent/
Click the button below tobuy thebook:

OrvisitthelinkbelowtopurchasetheITDueDiligenceGuide:
http://www.itduediligenceguide.com/purchaseebook/
Forlessthanthecostofonehourofaconsultantstime,youcanbewellonthewaytoan
effectiveITduediligenceprocess.