Those will be a huge part of the actual due diligence process. I've been on the receiving end of a very intrusive one, and it was essentially an arduous multi-

Those will be a huge part of the actual due diligence process. I've been on the receiving end of a very intrusive one, and it was essentially an arduous multi-week long audit. (IIRC four weeks of evidence collection, followed by ~8 days of intensive interviews.) With the main difference to audits being that on the requesting side, there was someone who actually understood how security, human processes and business all intersect. 7 audits in one year was a bit much.