IT Due Diligence: SaaS + Tech-Stack-Audit

Workflow-Schritte (10)

1. 1

   Code-Repository-Audit

   W1

   Quality-Check

2. 2

   Cloud-Provider-Compliance

   W1

   DSG?

3. 3

   Cybersecurity-Posture

   W2

   Pen-Test-Reports

4. 4

   Software-Lizenzen

   W2

   kommerziell + OSS

5. 5

   Tech-Debt-Assessment

   W3

   Maintenance-Burden

6. 6

   DevOps-Maturity

   W3

   CI/CD, Monitoring

7. 7

   Backup & DR

   W4

   Recovery-Plans

8. 8

   Database-Performance

   W4

   Scaling-Limits

9. 9

   API-Documentation

   W4

   Developer-Experience

10. 10

    AI/ML-Model-Risk

    W4

    EU AI Act

Schlüssel-Tools

• SonarQube
• Snyk
• CloudCheck
• AI-Doc-Analyse