How does a cyber incident affect the sale of a company?
Mostly through what is undocumented rather than through the incident itself. Buyers ask about past incidents in due diligence. One that was detected, contained, reported on time and followed by improvements usually becomes a line in the disclosure letter. One that surfaces late, or that the seller cannot explain, tends to lead to a lower price, an escrow, special indemnities or a delayed closing, because the buyer cannot tell what else may be hidden. Insurers on the buyer's side ask similar questions. Prepare by keeping an incident register, evidence of monitoring and the decisions you took on each serious alert. NetSenX keeps the alert history and an audit log of decisions for the retention period of your plan, and you can export them as evidence.
General information, not legal advice. National laws can add to the EU texts quoted here, for example deadlines, forms or reporting channels: check your own country's rules.
Read next
Related questions
- What is cyber risk appetite, and why should the board set it?
- Should the board get cyber security reports from IT or from outside?
- How do we know our IT provider is doing a good job on security?
- Who should sign off answers to customer security questionnaires?
- How do we explain a cyber incident to customers and the press?