CDD and FDD really have a different focus. It is true that some of the most critical systems to operations will likely be in focus during CDD, and things like exposure of customer information should become apparent. The company’s IT infrastructure deserves its own look to ensure vulnerabilities are understood, including user access, to determine not only breaches that might already have taken place, but also immediate post-acquisition actions that may be needed to sure up the IT environment, even before full integration is undertaken.
