When a company buys another company, nobody ever thinks of a security audit. If, by any chance, it comes to the limelight, the current regulatory requirements alone are analyzed. Yandex mastered security audit implementation into the merging processes (M&A). The report describes the problems faced and the solutions found. No theory, just practice.Natalya Kukanova is an analyst at Yandex. Previously worked as an information security analyst and project manager at Digital Security and Positive Technologies; she was involved in development and implementation of IS systems and processes, as well as information security risk management.Natalya Kukanova Natalya Kukanova