AWS Security ChangesHomeSearch

AWS prescriptive-guidance documentation change

Service: prescriptive-guidance · 2025-07-16 · Documentation low

File: prescriptive-guidance/latest/strategy-mergers-security/phases.md

Summary

Complete restructuring of documentation page - removed technical content about M&A security phases, AWS security assessments, and service references (e.g., Amazon Inspector, AWS Security Hub). Added navigation elements, content collections, and general AWS marketing/resources links.

Security assessment

The changes remove existing security-focused content (risk assessments, compliance tools, security service implementations) rather than addressing vulnerabilities or adding security features. New content focuses on site structure and general resources without security context.

Diff

diff --git a/prescriptive-guidance/latest/strategy-mergers-security/phases.md b/prescriptive-guidance/latest/strategy-mergers-security/phases.md
index 0be405357..43212f55f 100644
--- a//prescriptive-guidance/latest/strategy-mergers-security/phases.md
+++ b//prescriptive-guidance/latest/strategy-mergers-security/phases.md
@@ -1 +1 @@
-[](/pdfs/prescriptive-guidance/latest/strategy-mergers-security/strategy-mergers-security.pdf#phases "Open PDF")
+Skip to main content
@@ -3 +3,4 @@
-[Documentation](/index.html)[AWS Prescriptive Guidance](https://aws.amazon.com/prescriptive-guidance/)[Value creation during M&A and divestitures: cybersecurity and compliance ](welcome.html)
+  * English
+  * [Contact us](https://aws.amazon.com/contact-us/?nc2=h_ut_cu)
+  * Support 
+  * My account 
@@ -5 +7,0 @@
-Strategy and target identification phaseDue diligence and deal fulfillment phaseIntegration phasePost-transaction value creation phase
@@ -7 +8,0 @@ Strategy and target identification phaseDue diligence and deal fulfillment phase
-# How AWS can help
@@ -9 +9,0 @@ Strategy and target identification phaseDue diligence and deal fulfillment phase
-In May 2020, a leading financial services company in the US reached out to AWS Professional Services for help with a series of long-term acquisitions across the globe. They asked AWS to help assess the security posture of all its targeted acquisitions, develop a remediation plan for security leadership to discuss with the business to be acquired, and help with remediation activities of all findings that posed a risk to the merger. The customer wanted a long-term plan to support their multi-year M&A roadmap. The Chief Information Security Officer (CISO) was looking for specific remediation activities with costs and resource requirements spread across the timeline of the acquisition deal. These types of inquiries surfaced after courts ordered seller companies that were slow to disclose data breaches during 2013-2016 to pay hundreds of millions of dollars in settlement to victims, which resulted in reduced offers from buyer companies.
@@ -11 +11 @@ In May 2020, a leading financial services company in the US reached out to AWS P
-AWS has been successfully advising corporate directors in governing digital transformation and emerging technologies. AWS has expertise in empowering customers from various industries on digital platforms. AWS Professional Services can help customers strengthen their regulatory and risk posture operating at the three lines of defense (3LoD)—that is, control implementation, control management and oversight, and control assessment.
+  * [ ](https://aws.amazon.com/?nc2=h_home)
@@ -13 +12,0 @@ AWS has been successfully advising corporate directors in governing digital tran
-AWS can aggregate insights on technology risks, which are fundamental data points to advising a company’s audit committee and risk committee. The following sections describe the challenges companies face throughout four M&A and divestitures phases, and where AWS can help:
@@ -15 +14 @@ AWS can aggregate insights on technology risks, which are fundamental data point
-  * Strategy and target identification phase
+  * Filter: All
@@ -17 +16,2 @@ AWS can aggregate insights on technology risks, which are fundamental data point
-  * Due diligence and deal fulfillment phase
+  * Sign in
+  * [Create Account](https://portal.aws.amazon.com/gp/aws/developer/registration/?nc2=h_su&src=header_signup)
@@ -19 +18,0 @@ AWS can aggregate insights on technology risks, which are fundamental data point
-  * Integration phase
@@ -21 +19,0 @@ AWS can aggregate insights on technology risks, which are fundamental data point
-  * Post-transaction value creation phase
@@ -22,0 +21 @@ AWS can aggregate insights on technology risks, which are fundamental data point
+AWS Prescriptive Guidance
@@ -23,0 +23 @@ AWS can aggregate insights on technology risks, which are fundamental data point
+  * [Home](/prescriptive-guidance/)
@@ -24,0 +25 @@ AWS can aggregate insights on technology risks, which are fundamental data point
+  * [Migration tools](/prescriptive-guidance/migration-tools/)
@@ -26 +27 @@ AWS can aggregate insights on technology risks, which are fundamental data point
-## Strategy and target identification phase
+  * [Large migrations](/prescriptive-guidance/large-migrations/)
@@ -28 +29 @@ AWS can aggregate insights on technology risks, which are fundamental data point
-During the formulation of the thesis (the argument of the buyer’s opportunity—including gross profit, top line revenue, asset value, and strong customer basis—should they choose to complete the deal) and target identification, potential buyers have less visibility into the security and compliance posture of the target company. This reduced visibility is attributed to various reasons, such as concerns about intellectual property and inadvertent disclosures of regulatory privileged and confidential information. 
+  * [Accelerating cloud transformation](/prescriptive-guidance/accelerating-cloud-transformation/)
@@ -30 +30,0 @@ During the formulation of the thesis (the argument of the buyer’s opportunity
-Asset management has been a known challenge for companies that are geographically dispersed and that have many third-party connections. This makes the technology asset identification process harder, especially when determining interrelationships among systems that might be affected by the divestiture. [AWS Systems Manager Inventory](https://docs.aws.amazon.com/systems-manager/latest/userguide/systems-manager-inventory.html) provides visibility into a customer’s Amazon Elastic Compute Cloud (Amazon EC2) and on-premises computing environment on the seller’s side. AWS account structure and AWS Organizational Units (OUs) are fundamental during this process, because OUs can be created to park accounts and resources for businesses that are scoped to be sold. In addition, AWS provides assistance in the following ways:
@@ -32 +31,0 @@ Asset management has been a known challenge for companies that are geographicall
-  * The decoupling nature of AWS technology makes it easier for executives to select the businesses targeted for the divestiture.
@@ -34 +32,0 @@ Asset management has been a known challenge for companies that are geographicall
-  * In an effort to make diligence easier for the buyer, AWS can incorporate clear value of the technology advancement and quantify the technology risk in the value realization.
@@ -36 +34,2 @@ Asset management has been a known challenge for companies that are geographicall
-  * AWS Professional Services can perform AWS security assessments to enable strategic envisioning, regulatory risk predictions, business value and threat analysis, risk reduction, acceleration of results, and avoidance of obstacles with security and compliance.
+  * [AWS](/)›
+  * [Prescriptive Guidance](/prescriptive-guidance/)
@@ -38 +36,0 @@ Asset management has been a known challenge for companies that are geographicall
-  * For customers who are aspiring for regulatory attestations, such as Payment Credit Card Industry (PCI) or Health Information Trust Alliance Common Security Framework (HITRUST CSF), AWS Security Assurance Services, LLC (AWS SAS) is a fully owned subsidiary of Amazon Web Services that helps AWS customers with regulatory readiness.
@@ -40,0 +39 @@ Asset management has been a known challenge for companies that are geographicall
+# AWS Prescriptive Guidance
@@ -41,0 +41 @@ Asset management has been a known challenge for companies that are geographicall
+Resources from AWS technology experts and AWS Partners to help accelerate cloud adoption and modernization
@@ -43 +43 @@ Asset management has been a known challenge for companies that are geographicall
-## Due diligence and deal fulfillment phase
+## Guides
@@ -45 +45 @@ Asset management has been a known challenge for companies that are geographicall
-Industry best practices advise the buyer to complete the following steps:
+Guidance for planning and implementing strategies, with focus on best practices and tools, for architects, managers, and technical leads
@@ -47 +47 @@ Industry best practices advise the buyer to complete the following steps:
-  * Perform an overall evaluation of the security governance and operating model.
+Loading
@@ -49 +49 @@ Industry best practices advise the buyer to complete the following steps:
-  * Evaluate investments on the security program and automation (or lack of automation).
+Loading
@@ -51 +51 @@ Industry best practices advise the buyer to complete the following steps:
-  * Evaluate the effectiveness of the risk management programs and board-level oversight on risks that affect business goals and regulatory posture.
+Loading
@@ -53 +53 @@ Industry best practices advise the buyer to complete the following steps:
-  * Review previous security incidents and non-compliance citations on regulatory frameworks pertaining to privacy.
+Loading
@@ -54,0 +55 @@ Industry best practices advise the buyer to complete the following steps:
+Loading
@@ -55,0 +57 @@ Industry best practices advise the buyer to complete the following steps:
+## Patterns
@@ -56,0 +59 @@ Industry best practices advise the buyer to complete the following steps:
+Steps, architectures, tools, and code for implementing common migration, optimization, and modernization scenarios, for builders and other hands-on users
@@ -58 +61 @@ Industry best practices advise the buyer to complete the following steps:
-The security, risk, and compliance advisory services offered by AWS Professional Services can help customers scope regulatory frameworks that are applicable to the industry, geographic region, and product or service. They can also perform an overall evaluation of the risk and operational readiness. This evaluation includes an in-depth architecture review and risk assessments, as well as help with remediation plans. Customers can choose to deploy AWS services such as [Amazon Inspector](https://aws.amazon.com/inspector/) as an automated security assessment service that helps improve the security and compliance of applications deployed on AWS.
+Loading
@@ -60 +63 @@ The security, risk, and compliance advisory services offered by AWS Professional
-## Integration phase
+Loading
@@ -62 +65 @@ The security, risk, and compliance advisory services offered by AWS Professional
-Merging companies incur assimilation challenges, which affect the technology governance and operating models.
+Loading
@@ -64 +67 @@ Merging companies incur assimilation challenges, which affect the technology gov
-Technology governance is the foundation of security management. Consistent procedural controls by employees complement the technical controls that are embedded within corporate systems. AWS Professional Services offers [governance at scale](https://docs.aws.amazon.com/whitepapers/latest/aws-governance-at-scale/introduction.html) to help customers establish a governance structure and create an operating model that mitigates identified risks with the customer’s office of change management.
+Loading
@@ -66 +69 @@ Technology governance is the foundation of security management. Consistent proce
-For customers who don’t have an office of change management, AWS can help set one up. As part of remediation plans, customers benefit from AWS expertise to implement controls based on their regulatory landscape, address security weaknesses, and enable technical teams to scale with security automation and tools to maintain continuous monitoring.
+Loading
@@ -68 +71 @@ For customers who don’t have an office of change management, AWS can help set
-## Post-transaction value creation phase
+## Strategies
@@ -70 +73 @@ For customers who don’t have an office of change management, AWS can help set
-In this phase, companies need to be able to scale and grow their business while continuously managing their risks and new regulatory posture. AWS helps customers automate and scale their technical capabilities to meet their strategic goals, and helps ensure that the company’s technology posture aligns with their business strategy. [AWS Security Hub](https://aws.amazon.com/security-hub/) aggregates, organizes, and prioritizes security alerts or findings from multiple AWS services and AWS Partner solutions. In addition, [AWS Config](https://aws.amazon.com/config/) enables customers to assess, audit, and evaluate their configurations of AWS resources in a continuous manner.
+Business perspectives, methodologies, and frameworks for cloud migration and modernization, for CxOs and senior managers
@@ -72 +75 @@ In this phase, companies need to be able to scale and grow their business while
-![Warning](https://d1ge0kk1l5kms0.cloudfront.net/images/G/01/webservices/console/warning.png) **Javascript is disabled or is unavailable in your browser.**
+Loading
@@ -74 +77 @@ In this phase, companies need to be able to scale and grow their business while
-To use the Amazon Web Services Documentation, Javascript must be enabled. Please refer to your browser's Help pages for instructions.
+Loading
@@ -76 +79 @@ To use the Amazon Web Services Documentation, Javascript must be enabled. Please
-[Document Conventions](/general/latest/gr/docconventions.html)
+Loading
@@ -78 +81 @@ To use the Amazon Web Services Documentation, Javascript must be enabled. Please
-What customers want and what regulators require
+Loading
@@ -80 +83 @@ What customers want and what regulators require
-FAQ
+Loading
@@ -82 +85 @@ FAQ
-Did this page help you? - Yes
+## Content collections
@@ -84 +87 @@ Did this page help you? - Yes
-Thanks for letting us know we're doing a good job!
+1  / 3
@@ -86 +89 @@ Thanks for letting us know we're doing a good job!
-If you've got a moment, please tell us what we did right so we can do more of it.
+[ business-productivity Accelerating cloud transformation Learn more ](/prescriptive-guidance/accelerating-cloud-transformation/)
@@ -88 +91 @@ If you've got a moment, please tell us what we did right so we can do more of it
-Did this page help you? - No
+[ migration Large migrations to the AWS Cloud Learn more ](/prescriptive-guidance/large-migrations/)
@@ -90 +93 @@ Did this page help you? - No
-Thanks for letting us know this page needs work. We're sorry we let you down.
+[ migration Migration tools Learn more ](/prescriptive-guidance/migration-tools/)
@@ -92 +95,95 @@ Thanks for letting us know this page needs work. We're sorry we let you down.
-If you've got a moment, please tell us how we can make the documentation better.
+[ business-productivity Accelerating cloud transformation Learn more ](/prescriptive-guidance/accelerating-cloud-transformation/)
+
+[ migration Large migrations to the AWS Cloud Learn more ](/prescriptive-guidance/large-migrations/)
+
+[ migration Migration tools Learn more ](/prescriptive-guidance/migration-tools/)
+
+## More information
+
+Services, tools, and resources to help with your large migration journey
+
+### Additional resources
+
+  * [Migrate and modernize with AWS](/migrate-modernize-build/cloud-migration/)
+  * [AWS Architecture Center](/architecture/)
+  * [AWS Documentation](https://docs.aws.amazon.com/)
+  * [AWS Professional Services](/professional-services/)
+  * [AWS Partner Network](/partners/)
+
+
+
+### Feedback and support
+
+  * [Send us your feedback](https://docs.aws.amazon.com/forms/aws-doc-feedback?hidden_service_name=ProServe%20Enterprise%20GPS&topic_url=http://aws.amazon.com/prescriptive-guidance/)
+  * [Contact AWS Support](/premiumsupport/)
+
+
+
+[Create an AWS account](https://portal.aws.amazon.com/gp/aws/developer/registration/index.html?nc1=f_ct&src=footer_signup)
+
+## Learn
+
+  * [What Is AWS?](/what-is-aws/?nc1=f_cc)
+  * [What Is Cloud Computing?](/what-is-cloud-computing/?nc1=f_cc)
+  * [What Is Agentic AI?](/what-is/agentic-ai/?nc1=f_cc)
+  * [Cloud Computing Concepts Hub](/what-is/?nc1=f_cc)
+  * [AWS Cloud Security](/security/?nc1=f_cc)
+  * [What's New](/new/?nc1=f_cc)
+  * [Blogs](/blogs/?nc1=f_cc)
+  * [Press Releases](https://press.aboutamazon.com/press-releases/aws)
+
+
+
+## Resources
+
+  * [Getting Started](/getting-started/?nc1=f_cc)
+  * [Training](/training/?nc1=f_cc)
+  * [AWS Trust Center](/trust-center/?nc1=f_cc)
+  * [AWS Solutions Library](/solutions/?nc1=f_cc)
+  * [Architecture Center](/architecture/?nc1=f_cc)
+  * [Product and Technical FAQs](/faqs/?nc1=f_dr)
+  * [Analyst Reports](/resources/analyst-reports/?nc1=f_cc)
+  * [AWS Partners](/partners/work-with-partners/?nc1=f_dr)
+
+
+
+## Developers
+
+  * [Builder Center](/developer/?nc1=f_dr)
+  * [SDKs & Tools](/developer/tools/?nc1=f_dr)
+  * [.NET on AWS](/developer/language/net/?nc1=f_dr)