IT & Cybersecurity Due Diligence
IT and cybersecurity due diligence — systems, data protection, security controls, software licences and technology debt before a deal.
- Estimate Cost
- ₹75,000 – ₹4,00,000
- Typical duration
- 14 days
Service overview
Review of target company's IT infrastructure, software architecture, cybersecurity posture, data protection, and tech stack.
Who needs it? / When is it needed?
Tech company acquisitions, digital transformation deals, or businesses heavily reliant on custom software/data.
What to expect from the WCP Professionals
Cybersecurity vulnerability assessment, software code review, IT asset inventory check, and data privacy evaluation.
Key deliverables
IT & Cybersecurity Assessment Report, Tech Debt Analysis, Vulnerability Report.
Standard turnaround time
2 to 4 weeks.
Government fees, timelines & key outcomes
No government fee; the review is advisory.
Key outcomes: identified cyber, data-protection and technology risks, with remediation and integration costs estimated.
Forms & filings involved
- No statutory filing
- Review of compliance with CERT-In incident-reporting directions and the Digital Personal Data Protection Act, 2023 and its Rules
- Findings feed warranties on IT, data protection and IP in the transaction documents
Documents required
IT architecture diagrams, software licenses, cybersecurity audit logs, data privacy policies, source code repositories access.
What we need from you
Access to CTO/IT lead, architecture documentation, and system log access.
Important conditions
Non-disruptive testing protocols during system scans.
Additional information
Identifies legacy system risks and integration costs post-acquisition.
The estimated cost covers indicative professional fees only. Government fees, stamp duty and taxes are payable at actuals.
How it works
- 1. Raise a service enquiry describing your requirement.
- 2. A Relationship Manager reviews it and opens it for bidding.
- 3. Pay into escrow and assign the professional you select.
- 4. Track progress to completion, then accept and release payment.
Frequently asked questions
Why is IT due diligence important?
Security breaches, unlicensed software and outdated systems can create liabilities and large integration costs after the deal.
What does it review?
Architecture, security controls, past incidents, data protection, software licences, IT contracts and key technical staff.
Does data protection law matter?
Yes. The Digital Personal Data Protection Act, 2023 sets obligations whose breach can attract heavy penalties.
What is technology debt?
The cost of fixing outdated or poorly built systems, which affects post-deal investment needs.