What we found
The target's IT environment was functional but carried the characteristics common to privately held businesses that have grown without a centralized technology strategy: application sprawl, underinvestment in security, and IT spending that wasn't well-documented or consistently governed.
None of those findings were disqualifying. But each carried a post-close cost, and the deal team needed a defensible number to work with, not a list of risks without price tags.
The team included an advisor with direct experience at a competitor of the target. That context shaped which findings warranted the most attention.