Due Diligence and Risk Analytics

Introduction and Context

Due diligence is the disciplined investigation of a target before an acquisition, merger, investment, or other control transaction. It is not merely an information-collection exercise. Its purpose is to test the assumptions underlying price, financing, integration, governance, and risk allocation. A well-designed process converts incomplete and potentially biased information into decision-useful evidence.

In takeover management, diligence performs four linked functions:

1. Verification—testing whether management representations and published accounts are reliable.
2. Discovery—identifying liabilities, dependencies, opportunities, and risks not visible in headline financial statements.
3. Valuation adjustment—translating findings into cash flows, discount rates, multiples, or transaction adjustments.
4. Contractual protection—allocating residual risk through conditions precedent, warranties, indemnities, escrows, price adjustments, covenants, and termination rights.

A central professional principle is that diligence must be decision-led. The question is not simply “What information can be collected?” but “Which uncertainty could change whether we transact, what we pay, or how the transaction is documented?”

Learning Objectives

By the end of this chapter, the reader should be able to:

• design an integrated diligence programme across financial, commercial, operational, legal, tax, human-capital, technology, cybersecurity, intellectual-property, ESG, and integrity domains;
• distinguish evidence, management assertion, assumption, risk, and opportunity;
• use materiality, probability, scenario analysis, and risk-adjusted valuation to prioritize findings;
• identify red flags and trace them to valuation and contractual consequences;
• evaluate the limitations, ethical issues, and governance requirements of diligence and AI-enabled analytics; and
• communicate findings in a form suitable for investment committees, boards, lenders, and transaction counsel.

1. The Architecture of Integrated Due Diligence

1.1 Scope, materiality, and deal thesis

Diligence begins with the acquisition thesis. If the thesis is revenue growth, the critical work may concern customer retention, market size, pricing power, and sales capacity. If it is a cost synergy thesis, procurement contracts, workforce arrangements, technology architecture, and site footprints become central. The same target can therefore require different diligence emphasis for different buyers.

Materiality should be assessed in more than one dimension:

• Financial materiality: possible effect on enterprise value, cash flow, debt capacity, or purchase price.
• Strategic materiality: effect on the acquisition thesis or competitive position.
• Legal or regulatory materiality: ability to complete or lawfully operate the business.
• Reputational materiality: effect on stakeholder trust, licence to operate, or brand value.
• Time-critical materiality: risks that require action before closing.

A useful risk statement has the form: event or condition → consequence → likelihood → evidence → proposed response. For example: “A top customer can terminate on change of control; loss would reduce annual EBITDA by 12%; likelihood is medium because renewal negotiations are unresolved; evidence is the executed contract; response is consent before closing and a downside valuation case.”

1.2 Workstreams and integration

The workstreams are interdependent. Financial forecasts may rely on customer contracts reviewed by commercial diligence; tax exposures may arise from legal entity arrangements; cybersecurity findings may affect business continuity and warranty drafting; employee retention may determine whether projected synergies are achievable.

A practical governance structure includes:

• a deal sponsor accountable for the investment thesis;
• a diligence leader responsible for scope, timetable, evidence quality, and issue escalation;
• specialist leads for each workstream;
• a central issue register with owner, severity, evidence, valuation effect, mitigation, and status; and
• an independent challenge function, especially for high-value or management-led transactions.

A data room does not constitute diligence. Documents must be indexed, dated, authenticated where necessary, linked to assertions, and tested for completeness. Missing information is itself evidence: repeated inability to provide payroll data, customer concentration schedules, source-code ownership records, or tax filings should not be treated as neutral.

2. Core Diligence Workstreams

2.1 Financial due diligence

Financial diligence assesses the quality, sustainability, and cash conversion of reported performance. Its principal outputs are normalized earnings, sustainable working capital, debt-like items, one-off exposures, forecast reliability, and the bridge from accounting profit to cash flow.

Key procedures include:

• reconciling management accounts to audited financial statements and bank records;
• testing revenue recognition, cut-off, rebates, returns, contract modifications, and deferred revenue;
• separating recurring operating performance from one-time gains, owner expenses, restructuring costs, and unusual related-party transactions;
• analysing gross margin by product, customer, geography, and channel;
• examining working-capital seasonality and the difference between reported and sustainable working capital;
• confirming debt, leases, guarantees, factoring, pensions, litigation provisions, and contingent liabilities; and
• challenging forecasts against historical conversion, capacity, order backlog, market growth, and customer evidence.

A common valuation bridge is:

Enterprise value is the value attributed to the operating business. Debt-like items are obligations economically similar to financing debt; cash-like items are immediately available excess resources. The formula is a transaction convention, not an accounting identity. Definitions must be agreed because items such as leases, deferred consideration, restricted cash, customer deposits, and factoring can be classified differently.

Normalized EBITDA is often expressed as:

Adjustments should be supported by evidence and should be applied consistently. Adding a cost back as “one-off” is inappropriate if it is necessary to operate the business or likely to recur after acquisition.

For cash conversion:

The ratio is dimensionless and meaningful only over a defined period, with consistent treatment of taxes, interest, working-capital movements, and exceptional items. A high ratio in one year may conceal underinvestment or delayed supplier payments.

Illustration. Suppose reported EBITDA is $40 million, a documented non-recurring litigation cost is $3 million, and an owner-related expense that will disappear is $1 million. A recurring maintenance cost of $2 million has been incorrectly proposed as an add-back. Sustainable EBITDA is therefore $44 million, not $46 million. At an 8× valuation multiple, the unsupported $2 million add-back would overstate enterprise value by $16 million.

2.2 Commercial and market diligence

Commercial diligence tests whether the target’s revenue is defensible and scalable. It examines market definition, competitive structure, customer economics, pricing, churn, pipeline quality, channel power, regulatory demand drivers, and substitutes.

Important analyses include customer concentration, cohort retention, net revenue retention, win rates, backlog conversion, price-volume-mix analysis, and customer interviews. A forecast based on a sales pipeline should distinguish signed orders, approved purchase orders, qualified opportunities, and unqualified leads.

Customer concentration is not automatically a defect. A long-term contract with a financially strong customer may be less risky than thousands of short-term customers with high churn. The analysis must consider contractual duration, switching costs, renewal history, margin, payment behaviour, and change-of-control provisions.

Commercial red flags include unexplained revenue acceleration before sale, declining renewal rates masked by new-customer growth, channel stuffing, dependence on a founder’s relationships, non-transferable licences, and market growth assumptions inconsistent with external evidence.

2.3 Operational and supply-chain diligence

Operational diligence evaluates the target’s ability to deliver its business plan. It covers capacity, utilisation, quality, maintenance, safety, production yields, inventory, logistics, suppliers, business continuity, and capital expenditure.

Analysts should distinguish theoretical capacity from practical capacity. Bottlenecks may arise from labour, tooling, regulatory approvals, a single machine, software licences, or a critical supplier. Inventory should be tested for ageing, obsolescence, consignment terms, and physical existence.

A useful operational question is whether forecast growth requires merely higher utilisation or a step-change investment. If capacity is already constrained, forecast revenue may require capital expenditure, recruitment, qualification, and lead time not reflected in the model.

2.4 Legal and regulatory diligence

Legal diligence maps the rights and obligations that transfer, survive, or require consent. It normally covers incorporation, authority, ownership, material contracts, borrowing, security, litigation, regulatory licences, competition law, employment, data protection, real estate, insurance, and change-of-control provisions.

The review should identify:

• contracts that cannot be assigned or transferred;
• termination rights triggered by the transaction;
• exclusivity, most-favoured-customer, non-compete, and minimum-volume clauses;
• unregistered subsidiaries or inaccurate corporate records;
• unperfected security interests;
• unresolved claims, investigations, or licence breaches; and
• restrictions affecting foreign ownership, sector regulation, or merger control.

Legal risk cannot be reduced to a list of documents. Counsel must assess enforceability, governing law, remedies, limitation periods, collectability, and the probability that an issue becomes material after closing.

2.5 Tax diligence

Tax diligence tests historical compliance and future tax economics. It includes corporate income tax, indirect taxes, payroll taxes, withholding, transfer pricing, customs, tax incentives, uncertain tax positions, audits, losses, and transaction taxes.

Questions include whether returns and payments are timely, whether intercompany pricing is defensible, whether tax losses are usable after a change of control, and whether the target’s operating model creates permanent-establishment or indirect-tax exposure. A tax asset should not be valued at face value if utilisation depends on future profits, ownership continuity, jurisdiction, or legislative stability.

Tax findings may affect purchase price, structure, warranties, indemnities, pre-closing covenants, or the choice between an asset and share transaction.

2.6 Human capital and organisational diligence

People risk is frequently underestimated because financial models treat employees as costs rather than capability. Review leadership dependence, retention, succession, compensation, incentives, labour relations, workforce classification, pensions, immigration, health and safety, culture, and post-merger integration capacity.

Key indicators include regretted attrition, vacancy rates, absenteeism, pay equity, incentive eligibility, employee claims, concentration of knowledge, and dependence on contractors. A transaction may destroy value if key engineers, sales leaders, or regulated personnel leave before integration.

Retention arrangements should be designed ethically and transparently. They should not conceal an inability to address cultural or governance problems through short-term payments.

2.7 Technology, data, and cybersecurity diligence

Technology diligence evaluates whether systems support the business plan and can be integrated at reasonable cost. It covers architecture, technical debt, resilience, software licences, cloud commitments, data quality, development practices, system dependencies, disaster recovery, and vendor concentration.

Cybersecurity diligence should assess governance, identity and access management, vulnerability management, logging, incident response, backup integrity, penetration testing, privacy controls, and prior incidents. The question is not whether the target claims to be secure, but whether controls are evidenced and whether residual exposure is acceptable.

A serious incident may create regulatory notification duties, customer claims, remediation expense, business interruption, and reputational loss. It should therefore be reflected in both valuation and contractual protection. However, a checklist score is not a probability estimate; professional judgment and scenario analysis remain necessary.

2.8 Intellectual property diligence

IP diligence establishes what the target owns, what it merely licenses, and whether it can continue using critical assets after closing. It covers patents, trademarks, designs, copyrights, trade secrets, domain names, open-source software, employee inventions, contractor assignments, licence restrictions, infringement claims, and renewal obligations.

Particular attention is required where value depends on software or proprietary know-how. Source-code escrow, third-party components, open-source licence compliance, incomplete invention assignments, and former-employee access can materially weaken the acquisition thesis.

2.9 ESG and integrity diligence

ESG diligence should be connected to financial and legal consequences rather than treated as a branding exercise. Environmental review may identify contamination, remediation, permits, carbon costs, water dependency, and climate-related physical or transition risks. Social review may cover labour standards, community impacts, product safety, human rights, and supply-chain conditions. Governance review includes board effectiveness, related parties, controls, whistleblowing, and anti-bribery systems.

Integrity diligence examines beneficial ownership, sanctions, politically exposed persons, corruption allegations, fraud, money laundering, conflicts of interest, litigation patterns, and the conduct of intermediaries. It must be risk-based and legally compliant; adverse information should be corroborated rather than converted into unsupported suspicion.

3. Risk Analytics: From Findings to Decisions

3.1 Risk taxonomy and scoring

A risk register should separate inherent risk, control effectiveness, residual risk, and response. A simple prioritisation score is:

Probability and impact must use defined scales, such as 1–5, and the multiplication is ordinal prioritisation rather than a precise expected-loss calculation. It should not imply that a “4” probability is exactly twice a “2”. For financial modelling, expected loss is more rigorous:

Here, p_i is the probability of scenario i, L_i is the loss if that scenario occurs, and the scenarios should be mutually exclusive and collectively exhaustive for the modelled exposure. Expected loss is not a prediction of the actual outcome; it is a decision aid under uncertainty.

3.2 Scenario and sensitivity analysis

Base, upside, and downside cases should change the operational drivers that produce the outcome, not merely apply arbitrary percentage discounts. Typical drivers include volume, price, churn, gross margin, implementation delay, capex, tax, working capital, and synergy timing.

Sensitivity analysis changes one or more assumptions while holding others constant. Scenario analysis changes a coherent set of assumptions. Monte Carlo analysis can be useful where probability distributions are defensible, but false precision is dangerous when evidence is sparse.

For a discounted cash-flow model:

where FCF_t is free cash flow in period t, r is the discount rate, TV is terminal value, and n is the number of forecast periods. This assumes cash flows are defined consistently with the discount rate, timing conventions are consistent, and the terminal value is economically sustainable. A common perpetuity-growth terminal value is:

where g is the perpetual growth rate and r > g. This formula is highly sensitive to small changes in r and g, so diligence should challenge terminal assumptions rather than use them mechanically.

3.3 Translating findings into valuation

A finding may affect valuation through:

• lower forecast revenue or margin;
• delayed or reduced synergies;
• additional capex or working capital;
• higher tax or remediation expenditure;
• a higher discount rate due to risk; or
• a lower transaction multiple because of quality, concentration, or governance concerns.

The preferred approach is usually to model identifiable cash-flow effects directly. A blanket discount rate increase may double-count risk already reflected in downside cash flows. Similarly, a price reduction is not always an adequate response where the risk threatens legality, financing, reputation, or the ability to operate.

3.4 Translating findings into contract terms

Contractual responses include:

Warranties address the truth of stated facts, subject to negotiated limitations. Indemnities allocate specified losses, often without requiring the buyer to prove a general breach. Conditions precedent address matters that must be resolved before closing. Covenants govern conduct between signing and completion. These mechanisms are not substitutes for diligence: a poorly capitalised seller may be unable to satisfy even a valid indemnity.

4. A Disciplined Diligence Process

A robust process proceeds through six stages.

Stage 1: Define the decision. Document the investment thesis, deal perimeter, jurisdictions, critical assumptions, materiality thresholds, and intended valuation method.

Stage 2: Design the request list. Request evidence by risk, not by an unstructured document catalogue. Identify owners, deadlines, confidentiality restrictions, and acceptable substitutes.

Stage 3: Test assertions. Triangulate management explanations with contracts, external data, customer evidence, bank records, system extracts, interviews, and physical inspection.

Stage 4: Analyse exceptions. Record each issue with description, evidence, affected entity, probability, impact, owner, proposed action, and whether it changes price or terms.

Stage 5: Integrate and challenge. Conduct cross-workstream sessions. For example, reconcile commercial growth with capacity, hiring, systems, cash flow, tax, and IP rights. Invite a red-team review to challenge the deal thesis.

Stage 6: Decide and monitor. Present a clear recommendation: proceed, proceed with conditions, renegotiate, defer, or terminate. Post-closing, convert unresolved risks into a 100-day plan with measurable owners and milestones.

5. Illustrative Case: Northstar Components Acquisition

This is a fictional illustrative case.

Background

Northstar Components, a manufacturer of industrial sensors, is considering the acquisition of SignalWorks for an enterprise value of $240 million, based on reported EBITDA of $30 million and an 8× multiple. The strategic thesis is access to SignalWorks’ patented calibration software and a combined distribution network.

Problem

The buyer must determine whether the EBITDA and growth forecast are sustainable and whether the software and customer relationships will transfer. Management forecasts 20% annual revenue growth, stable margins, and $8 million of annual synergies by year three.

Analysis

Financial review identifies $2 million of recurring maintenance expenditure incorrectly added back to EBITDA and $3 million of temporary owner costs that will disappear. Normalized EBITDA is therefore:

At 8×, the corrected base enterprise value is $248 million, but this does not mean the buyer should automatically increase its offer. Commercial review finds that 28% of revenue comes from one customer whose contract permits termination on change of control. Probability-weighted analysis assigns a 25% probability to losing the account and estimates a $4 million annual EBITDA impact for three years. The undiscounted expected EBITDA loss is:

The actual valuation effect must discount timing, consider replacement sales, and account for tax and working capital; $3 million is only a preliminary expected operating impact.

IP review discovers that two former contractors never assigned inventions and that a critical software module incorporates open-source code under a licence requiring disclosure of modifications. Technology review also finds unsupported operating systems and no tested recovery from a ransomware event. Legal review identifies an environmental permit renewal due before completion.

Approach and solution

The buyer adopts the following position:

• use $31 million as normalized EBITDA but apply a downside case for customer loss;
• require customer consent before closing or price the account as at risk;
• require executed IP assignments and open-source remediation before completion;
• establish a specific cyber indemnity, obtain incident records, and require a tested recovery plan;
• retain part of consideration in escrow for environmental and tax exposures;
• revise synergy timing because integration depends on software remediation and key-person retention; and
• make permit renewal and specified regulatory approvals conditions precedent.

Outcome

The parties agree a lower headline price with a completion-accounts mechanism, a targeted indemnity package, and a retention plan for software engineers. The buyer does not rely on the indemnities to justify ignoring the cyber and IP findings; pre-closing remediation reduces uncertainty and protects operational continuity.

Learning points

First, reported EBITDA is not the same as sustainable EBITDA. Second, a contractual right can be more important than historical customer behaviour. Third, IP ownership and cyber resilience are valuation issues because they affect future cash flows. Finally, the best diligence outcome is not the longest report but a defensible decision and enforceable risk allocation.

6. Governance, Ethics, and Technology

Diligence involves sensitive personal, commercial, and sometimes privileged information. Teams must observe confidentiality, data-protection law, insider-trading restrictions, competition law, privilege protocols, and records-retention requirements. Access should follow least privilege, and personal data should be minimized, protected, and deleted when no longer needed.

Professional integrity requires independence from deal pressure. Analysts should report adverse findings even when management or sponsors prefer a rapid closing. Conflicts of interest, success-fee incentives, selective disclosure, and confirmation bias should be disclosed and managed.

AI tools can assist with document classification, clause extraction, anomaly detection, duplicate identification, and issue summarisation. They should not replace legal judgment, source verification, or accountability. Risks include hallucinated conclusions, missed context, biased training data, confidential-data leakage, and incorrect interpretation of jurisdiction-specific clauses. Human reviewers should validate outputs against source documents, maintain audit trails, and prohibit unsupported AI-generated assertions from entering investment papers.

7. Challenges and Limitations

Diligence is constrained by time, incomplete access, seller incentives, inconsistent data definitions, cross-border law, and the possibility that future conditions differ from historical evidence. No process can eliminate uncertainty. A clean report may mean that no issue was found, not that no issue exists.

Other limitations include:

• historical financial data may not represent post-acquisition structure;
• risk scores can create false objectivity;
• scenario probabilities may be judgmental;
• specialists may optimise their workstream without seeing system-wide effects;
• contractual protection may have limited value if loss is difficult to prove or the seller lacks resources; and
• excessive requests can damage trust and delay the transaction without improving decisions.

The appropriate response is transparency: distinguish fact from assumption, state confidence levels, identify information gaps, and show how conclusions change under alternative evidence.

Best-Practice Checklist

A professional diligence programme should:

• begin with the deal thesis and decision criteria;
• use a materiality framework covering financial, strategic, legal, reputational, and operational effects;
• triangulate management statements with independent evidence;
• treat missing or delayed information as a potential risk signal;
• integrate workstreams rather than report them in isolation;
• quantify cash-flow effects where supportable and avoid false precision;
• avoid double-counting risk in cash flows, discount rates, and multiples;
• distinguish conditions precedent, warranties, indemnities, covenants, and price mechanisms;
• test the seller’s ability to honour contractual protection;
• document assumptions, limitations, and unresolved issues; and
• convert post-closing risks into accountable integration actions.

Chapter Summary

Due diligence is an evidence-based decision system linking investigation to valuation, transaction structure, contractual protection, and post-closing execution. Integrated review must cover financial performance, commercial sustainability, operations, law, tax, people, technology, cybersecurity, intellectual property, ESG, and integrity. Materiality should reflect more than accounting size; strategic, regulatory, reputational, and time-critical effects may dominate.

Risk analytics provides prioritisation through probability, impact, expected loss, sensitivity, and scenario analysis, but models must state assumptions and avoid false precision. Findings should be translated into identifiable cash-flow changes wherever possible and then allocated through price mechanisms, conditions precedent, warranties, indemnities, escrows, covenants, or remediation. Ethical governance, confidentiality, independence, evidence quality, and human accountability are essential, including when AI tools are used. The professional objective is a defensible decision—not a superficially complete checklist.

Key Terms

Due diligence: Structured investigation of a transaction target before commitment.

Materiality: Significance of an issue to financial, strategic, legal, or other decisions.

Normalized EBITDA: Earnings before interest, tax, depreciation, and amortisation adjusted for sustainable operating performance.

Enterprise value: Value attributed to the operating business before specified financing adjustments.

Debt-like item: Obligation treated economically as debt for transaction purposes.

Working-capital adjustment: Purchase-price adjustment for difference between delivered and agreed sustainable working capital.

Commercial diligence: Analysis of market, customers, competition, pricing, and revenue sustainability.

Red flag: Evidence of a potentially significant adverse condition requiring escalation or response.

Risk register: Controlled record of risks, evidence, owners, impacts, and responses.

Expected loss: Probability-weighted estimate of loss across defined scenarios.

Sensitivity analysis: Assessment of model output when selected assumptions change.

Scenario analysis: Evaluation of coherent alternative sets of assumptions.

Condition precedent: Matter that must be satisfied before a transaction may complete.

Warranty: Contractual statement of fact subject to agreed qualifications and remedies.

Indemnity: Contractual promise to compensate specified loss.

Escrow: Consideration retained by a third party or controlled account to secure obligations.

Intellectual property: Legally protected creations, identifiers, inventions, and proprietary knowledge.

Cybersecurity diligence: Review of controls and exposures relating to information systems and data.

Integrity diligence: Investigation of corruption, sanctions, ownership, fraud, conflicts, and ethical conduct.

Red-team review: Independent challenge designed to expose weak assumptions and confirmation bias.

Review Questions

Short Answer Questions

1. Why is diligence more than document collection?
2. Distinguish normalized EBITDA from reported EBITDA.
3. What is the purpose of a condition precedent?
4. Why can missing information itself be a red flag?
5. State two limitations of risk scoring.

Long Answer Questions

1. Explain how financial, commercial, operational, and legal diligence should be integrated in an acquisition.
2. Discuss the principal methods by which diligence findings influence valuation.
3. Compare warranties, indemnities, escrows, covenants, and conditions precedent.
4. Explain the role of technology and cybersecurity diligence in a software-dependent acquisition.
5. Evaluate the ethical and governance requirements of AI-assisted diligence.

Analytical / Application Questions

1. A target reports EBITDA of $50 million, including a $4 million recurring maintenance cost incorrectly treated as an add-back and $2 million of genuinely non-recurring costs. Calculate normalized EBITDA and explain the valuation consequence at a 7× multiple.
2. A customer representing 20% of revenue may terminate on change of control. Design a diligence and transaction response that addresses commercial, legal, valuation, and contractual dimensions.
3. A target has an environmental issue with uncertain remediation cost, a possible cyber incident, and unassigned software inventions. Construct a prioritized risk register and recommend whether each issue should be modelled, remediated before closing, indemnified, or treated as a termination matter.

Multiple Choice Questions with Answers

Question 1

Which statement best describes the primary purpose of acquisition due diligence?

A. To collect the largest possible number of documents

B. To eliminate all uncertainty before signing

C. To test assumptions and translate evidence into decisions, valuation, and risk allocation

D. To replace the need for transaction contracts

Correct Answer: C. To test assumptions and translate evidence into decisions, valuation, and risk allocation

Question 2

Reported EBITDA is $30 million, a recurring $2 million maintenance cost was incorrectly added back, and $3 million of owner costs will disappear. What is normalized EBITDA?

A. $25 million

B. $31 million

C. $35 million

D. $29 million

Correct Answer: B. $31 million

Question 3

Which item is most appropriately addressed as a condition precedent when unresolved before closing?

A. A minor historical stationery expense

B. A customer consent required to prevent termination on change of control

C. A small variance in monthly electricity cost

D. A completed employee satisfaction survey

Correct Answer: B. A customer consent required to prevent termination on change of control

Question 4

Expected loss is calculated, in the chapter’s framework, as:

A. Probability plus impact

B. Impact divided by probability

C. The sum of probability-weighted scenario losses

D. The highest possible loss multiplied by revenue

Correct Answer: C. The sum of probability-weighted scenario losses

Question 5

Which finding most directly indicates an intellectual-property ownership problem?

A. High inventory turnover

B. Unexecuted invention assignments from critical contractors

C. A diversified customer base

D. A tested disaster-recovery plan

Correct Answer: B. Unexecuted invention assignments from critical contractors

Question 6

Why should recurring maintenance expenditure generally not be treated as an EBITDA add-back?

A. It is always a financing cost

B. It is necessary to sustain normal operations

C. It is prohibited by all accounting standards

D. It automatically creates a tax asset

Correct Answer: B. It is necessary to sustain normal operations

Question 7

Which statement correctly distinguishes scenario analysis from sensitivity analysis?

A. Scenario analysis changes a coherent set of assumptions; sensitivity analysis changes selected assumptions

B. Scenario analysis is always historical; sensitivity analysis is always legal

C. Sensitivity analysis eliminates uncertainty; scenario analysis creates it

D. They are identical techniques with different names

Correct Answer: A. Scenario analysis changes a coherent set of assumptions; sensitivity analysis changes selected assumptions

Question 8

A contract permits termination upon change of control. Which combination is generally most responsive?

A. Ignore the clause because historical renewals were strong

B. Obtain consent, reflect downside risk, and consider a closing condition

C. Increase the forecast without further review

D. Classify the contract as cash-like

Correct Answer: B. Obtain consent, reflect downside risk, and consider a closing condition

Question 9

Which is a central limitation of AI-assisted diligence?

A. It cannot sort documents

B. It guarantees jurisdictionally correct legal conclusions

C. It may miss context or generate unsupported conclusions and therefore requires human validation

D. It prevents confidential-data leakage by design

Correct Answer: C. It may miss context or generate unsupported conclusions and therefore requires human validation

Question 10

Which response best reflects integrated diligence governance?

A. Allow each specialist to report independently without reconciliation

B. Use an issue register linking evidence, impact, owner, valuation effect, and contractual response

C. Permit management to remove adverse findings from the final report

D. Use only a single financial ratio to rank all risks

Correct Answer: B. Use an issue register linking evidence, impact, owner, valuation effect, and contractual response