marketplace

What is due diligence?

Simply put, it’s doing in your homework. Just look at this sample M&A due diligence checklist.

In IT and the law, of course, the term “due diligence” has considerably more precise meanings. WhatIs.com’s definition for due diligence states it as:

…the process of systematically researching and verifying the accuracy of a statement. In everyday language, due diligence is synonymous with “the degree of effort required by law or industry standard.”

The term originated in the business world, where due diligence is required to validate financial statements. The goal of the process is to ensure that all stakeholders associated with a financial endeavor have the information they need to assess risk accurately.

When due diligence involves the offering of securities for purchase, as in an IPO (initial public offering), specific corporate officers are responsible for the proper completion of the process…

As is the case with so many other things in life, context matters. In general, due diligence includes the careful identification and evaluation of data sources, identification of potential risks and any other issues relevant to the statement or scenario in question.
Civil litigation and real estate law are even more specific, as you’ll read in our definition.

IT, as ever, is its own beast.

[Cartoon Credit: ScienceCartoonsPlus.com]

In the context of information technology, due diligence could mean determining whether a new operating system would be incompatible with important existing legacy applications, if a new developer understands the difference between Javascript and Java or whether new servers will fit on existing racks in a data center.

Due diligence can also be applied to careful testing of data or network security, disaster recovery preparedness, or any other critical infrastructure asset.

Failure to meet proper due diligence in these areas could leave the organization or client in question open to data breaches or malware infections.

In this sense, completing due diligence can be taken to be completing the steps that are “industry standard” in a particular area, like penetration testing or other code validation. Software companies that do not meet these goals may be liable for zero-day attacks, customer data breaches or other losses of mission-critical functions that could have been prevented with more stringent preparation.

It’s might be fair to say, for instance, that if TJX had had a better IT audit that mandated a switch to WAP instead of WEP security, one of the biggest data breaches in history might have prevented.

Or maybe not. Either way, the relevant IT guys probably should have done better due diligence before transmitting customer information over a wireless network protected only by weak encryption.

Any DB that doesn’t do due diligence testing to ensure that a database is recoverable from a major hardware of instance failure is similarly negligent.

There are plenty of examples out there. AstuteDiligence.com hosts a list of more general due diligence horror stories, with specific company and individual names redacted. There are some classic scenarios listed — the acquisition of a software company based upon a flashy demo, good PR and a well-designed website that turns out to be a maker of vaporware.

CFO Magazine ran a feature story back in ‘04 about companies that installed safeguards against merger surprises after due diligence failures.

In many circumstances, of course, due diligence works quite well, as Jan Stafford reported in a story about how a bank’s senior systems architect, sought and found a virtualization technology to help facilitate hardware consolidation and operating expenses low during system upgrades.

As Joseph Bankoff, a partner in the intellectual property and technology practice at law firm King & Spalding in Atlanta put it in a 2006 Infoworld article on the topic, “Due diligence is going in and digging a hole in the ground and seeing if there’s oil, instead of taking someone’s word on it.”

After all, you wouldn’t like it if someone else drank your milkshake.

Craigslist.org: Online urban community networking

Craigslist just keeps expanding, bringing its transformative mix of forums, apartment and job listings, want ads and personals to many more communities. Craigslist now offers listings for jobs, housing, goods, services, romance, local activities, advice and much more for 450 cities worldwide, all community moderated, and, astoundingly, largely free. Has your city — or country — been listed yet? If so, keep an eye on your local newspaper, as the free and fluid online marketplace for classifieds and apartment listings that Craigslist provides are a primary driver behind the financial woes of traditional newsprint journalism.

Craigslist was founded in early 1995, by Craig Newmark, in San Francisco, CA. According to Craigslist, the networks of sites receive over 5 billion page views a month, serving more than 15 million users during that span month. In fact, Craigslist users self-publish 14 million new classified ads each month, to go with more than 750,000 new job listings each month and more than 50 million user postings in 100 topical forums.

All of that is managed by 23 Craigslist employees working out of a Cictorian house in the Inner Sunset neighborhood of San Francisco. The site supports those modest operations by charging below-market fees for job ads in 7 cities and for broker apartment listings in NYC. By doing so, Craigslist may now be the leading classifieds service in any medium.

We’ve certainly found great deals on apartments, event tickets, used electronics and all manner of other good, along with thoroughly outrageous personal ads and even a new friend or two. In fact, this editor found a job, a large CRT TV on the cheap and a new place to live this year though “CL.”