predictive

What is due diligence?

Simply put, it’s doing in your homework. Just look at this sample M&A due diligence checklist.

In IT and the law, of course, the term “due diligence” has considerably more precise meanings. WhatIs.com’s definition for due diligence states it as:

…the process of systematically researching and verifying the accuracy of a statement. In everyday language, due diligence is synonymous with “the degree of effort required by law or industry standard.”

The term originated in the business world, where due diligence is required to validate financial statements. The goal of the process is to ensure that all stakeholders associated with a financial endeavor have the information they need to assess risk accurately.

When due diligence involves the offering of securities for purchase, as in an IPO (initial public offering), specific corporate officers are responsible for the proper completion of the process…

As is the case with so many other things in life, context matters. In general, due diligence includes the careful identification and evaluation of data sources, identification of potential risks and any other issues relevant to the statement or scenario in question.
Civil litigation and real estate law are even more specific, as you’ll read in our definition.

IT, as ever, is its own beast.

[Cartoon Credit: ScienceCartoonsPlus.com]

In the context of information technology, due diligence could mean determining whether a new operating system would be incompatible with important existing legacy applications, if a new developer understands the difference between Javascript and Java or whether new servers will fit on existing racks in a data center.

Due diligence can also be applied to careful testing of data or network security, disaster recovery preparedness, or any other critical infrastructure asset.

Failure to meet proper due diligence in these areas could leave the organization or client in question open to data breaches or malware infections.

In this sense, completing due diligence can be taken to be completing the steps that are “industry standard” in a particular area, like penetration testing or other code validation. Software companies that do not meet these goals may be liable for zero-day attacks, customer data breaches or other losses of mission-critical functions that could have been prevented with more stringent preparation.

It’s might be fair to say, for instance, that if TJX had had a better IT audit that mandated a switch to WAP instead of WEP security, one of the biggest data breaches in history might have prevented.

Or maybe not. Either way, the relevant IT guys probably should have done better due diligence before transmitting customer information over a wireless network protected only by weak encryption.

Any DB that doesn’t do due diligence testing to ensure that a database is recoverable from a major hardware of instance failure is similarly negligent.

There are plenty of examples out there. AstuteDiligence.com hosts a list of more general due diligence horror stories, with specific company and individual names redacted. There are some classic scenarios listed — the acquisition of a software company based upon a flashy demo, good PR and a well-designed website that turns out to be a maker of vaporware.

CFO Magazine ran a feature story back in ‘04 about companies that installed safeguards against merger surprises after due diligence failures.

In many circumstances, of course, due diligence works quite well, as Jan Stafford reported in a story about how a bank’s senior systems architect, sought and found a virtualization technology to help facilitate hardware consolidation and operating expenses low during system upgrades.

As Joseph Bankoff, a partner in the intellectual property and technology practice at law firm King & Spalding in Atlanta put it in a 2006 Infoworld article on the topic, “Due diligence is going in and digging a hole in the ground and seeing if there’s oil, instead of taking someone’s word on it.”

After all, you wouldn’t like it if someone else drank your milkshake.

Buzzfeed: Combining online buzz tracking with editorial commentary

Buzzfeed helps you “find movies, music, fashion, ideas, and technology that are on the rise and worth your time,” combining buzz detection with short, pithy posts about whatever the idea happens to be.

Jason Kottke, one of our favorite technology bloggers, was involved in the creation of Buzzfeed — so you can bet the design is worth a look.

Buzzfeed detects new memes by crawling 50,000 different Web sites, crunching that raw data to uncover new ideas as they start to enter the online conversation, not just the blogosphere. Pretty nifty!

Pandora: An online music discovery platform from the Music Genome Project

Pandora is a music discovery service designed to help users find and enjoy music. It’s powered by the Music Genome Project, one of the most comprehensive analyses of music ever undertaken.

According to Tom Westergren, the founder of the project, the analytical engine that drives the service was created by “assembling literally hundreds of musical attributes or “genes” into a very large Music Genome. Taken together these genes capture the unique and magical musical identity of a song - everything from melody, harmony and rhythm, to instrumentation, orchestration, arrangement, lyrics, and of course the rich world of singing and vocal harmony. It’s not about what a band looks like, or what genre they supposedly belong to, or about who buys their records - it’s about what each individual song sounds like.”

After you’ve clicked over to the Web site, all you have to do is enter a few of your favorite songs or artists and Pandora launches “a streaming station to explore that part of the music universe.” The more you listen, the more accurate Pandora becomes in predicting which other artists and tracks will be within your boundaries of taste, much as speech recognition software becomes more accurate with greater use.