Hello Gourav – in addition to what you stated, I believe the CIO should evaluate his/her staff to see who has the capacity to help with the integration. If the potential acquisition is unsophisticated in terms of IT infrastructure or employees, themselves, then the CIO’s staff is going to have to be able to step in and help users and determine what is going to be needed from an equipment standpoint.
Furthermore, the CIO is going to need to decide how to ensure that the acquisition’s network is separated from the main network until all security protocols are enabled.
Finally, the acquisiton staff is going to have to be trained so that any social engineering ploys won’t damage the network.
