---
id: 2758
title: "CISOs: Do You Know the Security Risks of Your Organization's Next M&A?"
source_domain: hackerone.com
source_url: "https://www.hackerone.com/blog/cisos-do-you-know-security-risks-your-organizations-next-ma"
published_at: "2022-06-14T16:00:00Z"
tags: ["attack-surface", "risk-management", "ciso", "report", "hackerone", "mergers-acquisitions", "due-diligence"]
phying_url: "https://phying.com/item/2758"
lang: en
---

# CISOs: Do You Know the Security Risks of Your Organization's Next M&A?

## Summary

HackerOne CISO Chris Evans argues M&A due diligence often misses inherited security risk: survey data shows organizations defend only 63% of their attack surface, so acquisitions can import a 37% gap.

## Intelligence Metadata

- **Sources:** hackerone.com
- **Published:** 2022-06-14T16:00:00Z
- **Original:** https://www.hackerone.com/blog/cisos-do-you-know-security-risks-your-organizations-next-ma
- **Phying News:** https://phying.com/item/2758