Кейсы и публикации

Публикация: Technical Due Diligence чек-лист 2026 — для инвесторов и стратегических покупателей

Структура чек-листа (150+ пунктов):

  1. Architecture & Scalability: Microservices vs monolith, API design, event-driven, caching, CDN, multi-region, DR/BCP, RTO/RPO, chaos engineering.
  2. Security Posture: SAST/DAST/SCA в CI/CD, secrets management, zero-trust network, WAF, DDoS protection, incident response, SOC 2 / ISO 27001 status.
  3. Data & Privacy: Data classification, encryption (at rest/in transit), key management, GDPR/152-ФЗ/CCPA compliance, DPIA records, data retention, backup/recovery tested.
  4. Engineering Excellence: CI/CD maturity, test coverage (unit/integration/e2e), code review process, technical debt ratio (SonarQube), documentation, onboarding time.
  5. Team & Processes: Org structure, seniority ratio, bus factor, hiring/retention, compensation benchmark, on-call culture, incident postmortems.
  6. IP & Open Source: Patent portfolio, trademark, copyright, OSS license compliance (SBOM, FOSSA/Black Duck), copyleft risk, attribution.
  7. AI/ML Specific (2026 addendum): Model governance, training data provenance, bias testing, explainability, drift monitoring, adversarial robustness, model registry, A/B testing framework.

Scoring Framework: Категория 1-5 (Critical/High/Medium/Low/Info) + effort estimate для remediation. Traffic light summary для IC memo.

Скачать (Excel + PDF): xlsx | pdf


← Назад к списку новостей