Enterprise Security Weekly (Audio) Dave Lewis talks M&A due diligence, TBD topic, the weekly news - Dave Lewis - ESW #422
19 snips
Sep 1, 2025 
Dave Lewis, Global Advisory CISO for 1Password, dives into the crucial role of cybersecurity in mergers and acquisitions. He highlights common pitfalls and emphasizes the need for thorough security assessments to safeguard organizational value. The conversation also touches on the importance of transparency in breach disclosures, arguing that shared insights could enhance industry learning. Additionally, Lewis discusses the challenges of integrating security measures during organizational shifts and the evolving threats posed by AI in the cyber landscape.
AI Snips
Chapters
Books
Transcript
Episode notes
Involve Security From Day One In M&A
- Include security teams early in M&A due diligence rather than as an afterthought.
- Verify technical claims with scans and evidence instead of relying solely on questionnaires.
Paid Vacation Instead Of Due Diligence
- Dave Lewis described an acquisition review that amounted to a paid vacation with no work product.
- That lax due diligence risked inheriting serious security and operational liabilities.
Prioritize Identity And AI Agent Controls
- Examine identity, account governance, MFA, and segmentation as primary M&A red flags.
- Treat AI agents and their credentials like human identities and plan lifecycle controls.
