01
Identity-Stack Sprawl
What the 2024 Snowflake customer-leak cluster and identity-driven cases teach about typical SaaS acquisition targets — and which DD questions must be asked before LOI.
DD implication · EV impact 2–8% typical
Held · July 2026
FREE WEBINAR · 15 JULY 2026Cyber Due Diligence in M&A — what investment teams must check in 2026.
Market data · 3 cyber patterns · Pre-LOI-ready methodology
Global M&A volume jumped to USD 4.7 trillion in 2025 — up 43% year-over-year. Nearly a quarter sits in tech targets. That changes what cyber due diligence must look like — and how fast it must deliver. This 60-minute webinar synthesises the McKinsey 2026 numbers, three recurring cyber patterns, and a concrete pre-LOI-ready methodology for DACH investment teams.
What you take away
Three cyber patterns, three cases, one DD framework.
Each pattern is analysed against publicly documented breach cases 2024–2026 and translated into the negotiation mechanics of SPA, R&W insurance and post-close remediation.
02
Vendor Concentration Risk
How the 2024 Change Healthcare cluster redefined single-vendor dependencies in tech stacks — and which R&W underwriter responses to expect on DACH tech deals.
Underwriter response · Escrow 2–5% EV typical
03
Supply-Chain Exposure
MOVEit, 3CX, XZ Utils — how recurring supply-chain cases tighten Software Bill of Materials requirements in the pre-close phase, with implications for DD scoping.
Material risk · Walkaway or SPA restructure
All cases discussed are publicly documented. The analytical synthesis ties them to current threat intelligence (BSI Lagebericht, ENISA Threat Landscape, Verizon DBIR 2026) and to McKinsey's 2026 M&A trends.
Agenda
60 minutes. Focused. With live Q&A.
The detailed agenda is shared in the confirmation email before the session. Planned sections:
01Market context 2026: what McKinsey's USD 4.7 trillion market means for cyber DD
02Three cyber patterns in tech M&A — concrete cases and EV-impact ranges
03Live walkthrough: pre-LOI-ready cyber DD on a typical SaaS target
04Post-close levers: how Compliance Sprint and vCISO hold posture across the hold period
05Q&A — confidential, off-record, not recorded
Speaker
Fabian „Fabe“ Hausner
Founder, Woodlands Advisory GmbH
SAP Global Security Advisory Lead
- Enterprise security architecture and post-acquisition cyber integration at SAP — including the Signavio acquisition context
- Enterprise-security advisory at SAP — cloud, identity, compliance
- Practice focus: cyber due diligence, ISO 27001 / NIS2 / DORA audit readiness, vCISO mandates for DACH mid-market
- Founder Fabe Capital GmbH · Heidelberg
Format & logistics
60 minutes. Confidential. Not recorded.
- Duration
- 60 min45 min keynote · 15 min Q&A
- Platform
- Google MeetJoining link via email
- Confidentiality
- Off-recordNot recorded · no re-sharing
- Access
- By registrationBusiness email · prompt confirmation
Held · July 2026
This webinar has already taken place.
The next date will be announced here.
Book an intro call →Related Services
Many clients combine multiple services – for maximum impact.
Growth needs security. Not someday – now.
Whether you face a transaction, need a certification or want to professionalise your security strategy – Woodlands delivers predictable results at boutique speed.
Schedule Initial Consultation →
20 minutes. Confidential. No obligation.