Skip to content

Compliance Management, Audit and Due Diligence · Due Diligence

Due Diligence Process and Methodology: Steps and Checklist

Updated 11 October 2026 · Fact-checked

Due diligence is a structured investigation of a company, asset or transaction before a decision is taken. The process runs in order: define scope, plan, issue a request list, review the data room, verify and interview, assess red flags, and report findings. Each step must be documented and tied to the deal decision.

Understand Due Diligence Process and Methodology

Due diligence is a careful, evidence-based check of facts before you commit to a transaction such as an acquisition, investment, loan, listing or restructuring. The aim is simple: find out what you are really buying or lending to, and what could go wrong.

The process is a sequence. You first fix the scope with the client: what is being examined (legal, financial, tax, compliance, commercial), why, and how deep. Then you plan the work, prepare a checklist (also called a request list) and send it to the target. The target answers by uploading documents.

A data room is a controlled repository of documents, usually online (a virtual data room), where the target places records for the reviewing team. Access is permission-based, activity is logged, and documents are indexed by category such as corporate records, contracts, litigation, tax, employees and property. A good index lets you see what is missing as well as what is present.

You then review the documents, verify them against public sources (MCA records, court and tribunal records, charge registers, tax portals), and clarify gaps through management interviews and site visits. Each issue is rated by seriousness. A red flag is a finding that may affect price, structure or the decision to proceed, such as an undisclosed charge, a pending adverse litigation, a break in title, or statutory filings not made.

Finally, you issue a due diligence report. It states scope, basis of work, limitations, findings, risk rating and recommended actions, such as price adjustment, indemnity, a condition precedent or walking away. As a company secretary, your value is in compliance and legal records, and in drafting the report so that a decision-maker can act on it.

Key rules to remember

Sequence of the process
Scope → Plan → Checklist → Data room review → Verification → Red-flag assessment → Report → Follow-up
Use this order as the skeleton of any answer. Merge or rename steps if the question uses different wording.
Red-flag response options
Price adjustment | Indemnity or warranty | Condition precedent | Restructure the deal | Walk away
Every red flag in an answer should end with one of these recommended actions.
Report contents
Scope + Basis + Limitations + Findings + Risk rating + Recommendations
A report without limitations and assumptions is incomplete.
Reliance rule
Documents seen ≠ facts verified
A document in the data room is a claim. Confirm it from an independent source where possible.

How to solve Due Diligence Process and Methodology questions

For any question on the process, write the answer as a short project plan applied to the facts given. Stay with the facts: name the company, deal and documents.

  1. 1Identify the type of due diligence and the purpose in the question (acquisition, investment, lending, IPO, insolvency resolution).
  2. 2State the scope and the team: areas to cover, period covered, materiality threshold, confidentiality arrangements such as an NDA.
  3. 3Describe planning: timeline, responsibilities, and a tailored checklist or request list for the areas in scope.
  4. 4Explain the data room review: how documents are indexed, accessed and examined, and how you track missing items.
  5. 5Explain verification: cross-check with public records, statutory registers, filings, and management interviews or site visits.
  6. 6Classify the findings and red flags by seriousness and say what each means for the deal.
  7. 7Describe the report: structure, limitations, recommendations and any follow-up or confirmatory diligence before closing.
  8. 8Conclude with a clear view on the case facts, such as proceed, proceed with conditions, or do not proceed.

Quickest way: Plan, Review, Verify, Report

When to use it: Use when you have little time or the question asks only to list or explain the steps.

  1. Write the four headings: Plan, Review, Verify, Report.
  2. Under each, add two or three points specific to the facts: checklist and scope under Plan; data room under Review; public records and interviews under Verify; red flags and recommendations under Report.
  3. Add one line on documentation and confidentiality.
  4. Close with the decision your findings support.

Common mistakes in Due Diligence Process and Methodology

  • Listing steps in a generic way without applying them to the facts given.

    Students memorise a list and reproduce it.

    Fix: Name the target, deal and documents in each step. Case-based answers earn marks for analysis, not for lists.

  • Treating the data room as proof that facts are true.

    Documents look official and complete.

    Fix: State that documents are reviewed and then verified against independent records, with management confirmations for gaps.

  • Naming red flags but not stating their consequence.

    Students stop at identification.

    Fix: For each red flag say its impact and the action: price adjustment, indemnity, condition precedent, or exit.

  • Skipping scope and limitations.

    These seem administrative.

    Fix: Fix scope and materiality at the start and record limitations in the report. This protects the professional and shows judgement.

  • Confusing due diligence with audit.

    Both examine records.

    Fix: Due diligence is purpose-specific and forward-looking for a decision. An audit gives an opinion on financial statements for a period.

Worked examples

Example 1

Anand Textiles Ltd proposes to acquire 100% of Bharat Dyes Pvt Ltd. You are engaged as a company secretary to do legal and compliance due diligence. Explain the process you will follow.

Show the solution
  1. Scope: agree with Anand Textiles that the review covers corporate records, statutory filings, material contracts, litigation, licences, charges and employee compliance, with a materiality threshold, and sign a confidentiality agreement.
  2. Plan: set a timeline and team, and prepare a tailored request list for each area.
  3. Data room: Bharat Dyes uploads documents to an indexed virtual data room. You review them and mark missing items, such as board minutes or filings, in a tracker.
  4. Verify: cross-check charges, directors and filings against MCA records, search litigation records, and hold management interviews on gaps.
  5. Red flags: classify findings by seriousness, for example an unregistered charge or pending adverse litigation, and note the effect on price or structure.
  6. Report: issue a report with scope, basis, limitations, findings, risk rating and recommendations.
  7. Follow-up: suggest conditions precedent, warranties and indemnities in the agreement and a bring-down check before closing.

Answer: Follow an ordered process: scope and confidentiality, planning and request list, data room review, independent verification, red-flag assessment, a written report with recommendations, and follow-up before closing.

Example 2

During data room review for an investment in Kaveri Foods Ltd, you find that a charge over its plant appears in the MCA records but not in the company's register of charges, and the loan agreement is missing from the data room. How should you treat this and report it?

Show the solution
  1. Identify the finding: a mismatch between the public record and the company's own register, plus a missing document. This is a red flag because it may mean an undisclosed liability and a compliance gap.
  2. Seek clarification: add the loan agreement and charge documents to the request list and raise the point with management in writing.
  3. Verify independently: check the charge details on the MCA record, such as the holder and the amount secured, and any satisfaction filing.
  4. Assess impact: the plant may be encumbered, which can affect the valuation, the investor's security and the ability to raise further finance.
  5. Report: record the finding with its risk rating, the facts verified, what remains unverified, and recommendations.
  6. Recommend action: rectify the register, obtain the loan documents before closing, require a specific indemnity, and adjust the price if the liability is significant.

Answer: Treat it as a high-priority red flag. Verify the charge from public records, obtain the missing documents, report the finding and what is unverified, and recommend rectification, a specific indemnity and, if needed, a price adjustment before closing.

Exam tips

  • Write answers as project steps applied to the case facts: scope, plan, review, verify, report.
  • Always attach a recommendation to each red flag. Examiners look for the effect on the deal.
  • Mention the data room with its index, access control and tracker of missing items; it is a frequent point.
  • Include limitations and confidentiality in the report discussion. Many students leave them out.
  • If asked for a report format, give headings in order and a one-line content note for each.

Practice questions from Due Diligence

Due Diligence Process and Methodology in other exams

The same ground in other exams, if you are preparing for more than one or want another angle on it.

Due Diligence Process and Methodology: frequently asked questions

What are the main steps in the due diligence process?

Fix scope, plan the work, issue a checklist, review the data room, verify the information, assess red flags, and issue a report. Follow-up before closing is a final step in many deals. Adapt the wording to the question.

What is a data room in due diligence?

It is a controlled repository, usually online, where the target company places documents for the reviewing team. It is indexed by category, access is restricted and activity is logged. It lets the reviewer see what is present and what is missing.

What goes into a due diligence report?

Scope, basis of work, limitations, key findings, a risk rating for each issue, and recommendations. Recommendations may include price changes, indemnities, conditions precedent or advice not to proceed.

What is a red flag in due diligence?

A red flag is a finding that could affect the price, structure or the decision to go ahead. Examples are undisclosed charges, adverse litigation, title defects and unfiled statutory returns.