SAMPLE DELIVERABLE FOR PE DEAL TEAMS

IT Due Diligence Sample Deliverable.

Below is a sanitized sample of the confidential technology due diligence report Fluid delivers to private equity deal teams, principals, and investment committees within 5 to 10 business days.

CONFIDENTIAL M&A DELIVERABLE

Project Titan - IT Due Diligence Assessment

Target: Specialty Industrial Services Co ($65M Rev | 185 Users)
Prepared by: Fluid MSP M&A Practice
Date: June 2026

1. EXECUTIVE SUMMARY

Target exhibits moderate technology debt and significant cybersecurity vulnerability. While core line-of-business software is operational, server infrastructure is reaching end-of-life and backups are un-isolated.

We estimate total 100-day remediation capital expenditure at $115,000, offset by $3,400/month in SaaS license consolidation savings. We recommend factoring this budget into transaction pricing.

TRANSACTION RISK GRADE
GRADE C+
MODERATE TECH DEBT

2. AUDIT DOMAIN RISK FINDINGS

Cybersecurity & EDR Telemetry CRITICAL

Target company lacks 24/7 Managed Detection and Response (MDR). Workstations operate basic consumer antivirus. High vulnerability to ransomware.

Score: D+
Server Infrastructure & Storage HIGH RISK

3 core Active Directory servers operate on Windows Server 2012 R2 (End-of-Life). Storage array is 94% full with zero redundant SAN controller.

Score: C-
Backups & Ransomware Recovery HIGH RISK

Backups execute to a local USB device attached to the primary domain controller. Zero air-gapped or immutable cloud backup isolation.

Score: C
Identity & MFA Control MODERATE

MFA is enforced on Microsoft 365, but not on administrative VPN access or local domain controllers.

Score: B-
SaaS Software Licensing Debt MODERATE

SaaS sprawl identified: 14 unmonitored software subscriptions active. 22% of Microsoft 365 licenses are unassigned but actively billed.

Score: B
System Documentation & Runbooks LOW RISK

Basic network diagrams exist, but lack automated IP registries, disaster recovery SOPs, and credential vaults.

Score: B+

3. ITEMIZED 100-DAY REMEDIATION BUDGET MODEL

Remediation Category Target Timeline Estimated Capex Opex Impact
Cybersecurity & MDR Rollout Days 0 - 10 $18,500 $1,200/mo
Windows Server 2012 Cloud Migration to Azure Days 10 - 45 $42,000 $2,800/mo
Air-Gapped Immutable Cloud Backup Isolation Days 10 - 30 $14,500 $950/mo
Endpoint MDM & Zero-Trust MFA Deployment Days 30 - 60 $16,000 $800/mo
SaaS License Rationalization & Vendor Consolidation Days 60 - 100 $8,000 -$3,400/mo (Savings)
Fluid Managed IT & SOC Operations (Recurring) Ongoing $16,000 Setup $8,500/mo
Need an official diligence report for an active LOI transaction? Order Full IT Due Diligence Audit →