Executive Summary
This SBA / Individual Buyer assessment of Garrison Professional Advisors — Independent produced an overall risk score of 5.3/10 — classified as MODERATE. The highest-risk domains are: Operational Risk (6.2/10 — HIGH RISK), Management & Culture Risk (6.0/10 — HIGH RISK), Customer & Revenue Risk (5.8/10 — HIGH RISK). All domains were scored with moderate or high confidence.
Domain Risk Register
Domains ordered highest to lowest risk score. Risk findings are derived from scoring rubric tiers; in a full Stage 3 assessment, findings are evidence-based from document analysis.
6.2Operational RiskHIGH RISKConfidence: HIGH
| Criterion | Score | Risk Finding | Deal Implication |
|---|---|---|---|
| Key Person Dependency | 7/10 | Owner is primary operator, holds most client relationships, business cannot run without owner present. | 🟠 Escrow holdback recommended |
| Process Documentation & Repeatability | 7/10 | Minimal documentation, delivery quality dependent on specific people, inconsistent without them. | 🟠 Escrow holdback recommended |
| Supply Chain & Vendor Concentration | 5/10 | One or two critical single-source vendors, alternatives not formally identified. | 🟡 Represent & warrant |
| Systems Fragility | 6/10 | Core systems in use but undocumented, some personal account dependencies. | 🟠 Escrow holdback recommended |
| Business Continuity | 6/10 | BCP exists but untested, recovery procedures informal. | 🟠 Escrow holdback recommended |
ⓘ Enhanced R&W coverage recommended for Operational Risk. Request extended survival period (24-36 months) and specific indemnification for identified risks.
● Layer8 can address this: Operational Stabilization & Documentation
6.0Management & Culture RiskHIGH RISKConfidence: HIGH
| Criterion | Score | Risk Finding | Deal Implication |
|---|---|---|---|
| Management Team Depth | 7/10 | Owner is primary manager, thin layer below. | 🟠 Escrow holdback recommended |
| Key Employee Retention Risk | 6/10 | Retention uncertain, no agreements, some may leave at announcement. | 🟠 Escrow holdback recommended |
| Cultural Integration Complexity | 5/10 | Meaningful cultural differences, integration requires active management. | 🟡 Represent & warrant |
| Incentive Alignment | 5/10 | Some misalignment, restructuring needed post-close. | 🟡 Represent & warrant |
| Succession & Transition Plan | 7/10 | Seller resistant to transition support, knowledge transfer at risk. | 🟠 Escrow holdback recommended |
ⓘ Enhanced R&W coverage recommended for Management & Culture Risk. Request extended survival period (24-36 months) and specific indemnification for identified risks.
● Layer8 can address this: Retention Planning & Culture Integration
5.8Customer & Revenue RiskHIGH RISKConfidence: HIGH
| Criterion | Score | Risk Finding | Deal Implication |
|---|---|---|---|
| Customer Concentration | 6/10 | Largest customer 15-25%, top 3 combined 35-50%, some diversification effort. | 🟠 Escrow holdback recommended |
| Revenue Predictability & Recurring Mix | 5/10 | 30-50% recurring, mixed contracts, renewal rates not formally tracked. | 🟡 Represent & warrant |
| Churn Rate & Retention | 6/10 | Churn not formally tracked, owner estimates <15%. | 🟠 Escrow holdback recommended |
| Contract Transferability | 6/10 | Assignment language missing in some material contracts, legal review incomplete. | 🟠 Escrow holdback recommended |
| Pipeline Quality | 6/10 | Pipeline partially documented, owner holds key opportunities. | 🟠 Escrow holdback recommended |
ⓘ Enhanced R&W coverage recommended for Customer & Revenue Risk. Request extended survival period (24-36 months) and specific indemnification for identified risks.
● Layer8 can address this: Customer Retention & Contract Remediation
5.0Technology & Cyber RiskMODERATEConfidence: HIGH
| Criterion | Score | Risk Finding | Deal Implication |
|---|---|---|---|
| Cybersecurity Posture | 5/10 | MFA partially deployed, basic endpoint protection, no IR plan, insurance absent. | 🟡 Represent & warrant |
| Technical Debt | 5/10 | Mixed stack, some legacy systems, deferred upgrades present. | 🟡 Represent & warrant |
| Data Integrity & Accessibility | 5/10 | Data scattered, manual reconciliation required, reporting inconsistent. | 🟡 Represent & warrant |
| Systems Ownership & Transferability | 5/10 | Some personal account dependencies, not all systems documented. | 🟡 Represent & warrant |
| Prior Breaches or Incidents | 5/10 | Prior incident, remediation partial or undocumented, residual risk present. | 🟡 Represent & warrant |
ⓘ Enhanced R&W coverage recommended for Technology & Cyber Risk. Request extended survival period (24-36 months) and specific indemnification for identified risks.
● Layer8 can address this: Technology & Security Remediation
4.4Financial QualityMODERATEConfidence: HIGH
| Criterion | Score | Risk Finding | Deal Implication |
|---|---|---|---|
| QofE Defensibility | 4/10 | Reviewed financials, add-backs reasonable and documented, minor cleanup needed, QofE unlikely to materially reduce EB… | 🟡 Represent & warrant |
| Revenue Recognition Consistency | 4/10 | Revenue recognition generally consistent, minor timing differences, no material issues. | 🟡 Represent & warrant |
| Three-Year Financial Trend | 5/10 | Mixed trend, growth and decline years present, narrative required to explain, some buyer skepticism warranted. | 🟡 Represent & warrant |
| Working Capital Quality | 5/10 | AR aging elevated, some pre-sale working capital management suspected, buyer should require normalized WC target at c… | 🟡 Represent & warrant |
| Tax Compliance & Liability | 4/10 | Returns current, minor open items being resolved, no material liability expected. | 🟡 Represent & warrant |
● Layer8 can address this: Financial Normalization & QofE Support
4.2Market & Competitive PositionMODERATEConfidence: HIGH
| Criterion | Score | Risk Finding | Deal Implication |
|---|---|---|---|
| Competitive Moat | 4/10 | Moderate moat, some defensible advantages. | 🟡 Represent & warrant |
| Market Share Trend | 4/10 | Market share stable with minor growth. | 🟡 Represent & warrant |
| Customer Acquisition Cost & Payback | 5/10 | CAC not formally tracked, owner estimates reasonable. | 🟡 Represent & warrant |
| Pricing Power | 4/10 | Some pricing power, modest increases accepted. | 🟡 Represent & warrant |
| Growth Trajectory | 4/10 | Solid growth with minor one-time contributions. | 🟡 Represent & warrant |
● Layer8 can address this: Competitive Analysis & Market Validation
4.0Legal & Liability RiskMODERATEConfidence: HIGH
| Criterion | Score | Risk Finding | Deal Implication |
|---|---|---|---|
| Open Litigation & Claims | 4/10 | Minor resolved matters, one or two immaterial open items, no material exposure. | 🟡 Represent & warrant |
| IP Ownership & Protection | 4/10 | Core IP owned by entity, minor gaps in registration or documentation, no disputes. | 🟡 Represent & warrant |
| Contract Assignment Risk | 4/10 | Most material contracts assignable, minor gaps in secondary agreements. | 🟡 Represent & warrant |
| Regulatory & License Compliance | 4/10 | Licenses current, minor transferability questions being addressed, no material compliance issues. | 🟡 Represent & warrant |
| Employment Law Exposure | 4/10 | Generally compliant, minor documentation gaps, no open matters. | 🟡 Represent & warrant |
● Layer8 can address this: Legal Risk Remediation & Contract Review
4.0Integration ComplexityMODERATEConfidence: HIGH
| Criterion | Score | Risk Finding | Deal Implication |
|---|---|---|---|
| Systems Integration Difficulty | 4/10 | Minor integration work, estimated cost $25-75K, timeline 3-6 months. | 🟡 Represent & warrant |
| Process Harmonization Required | 4/10 | Minor process differences, addressable with documentation. | 🟡 Represent & warrant |
| People & Culture Integration | 4/10 | Some redundancy, manageable with normal attrition. | 🟡 Represent & warrant |
| Customer Communication Risk | 4/10 | Minor customer sensitivity, manageable with communication. | 🟡 Represent & warrant |
| Regulatory Integration Requirements | 4/10 | Minor regulatory steps, timeline manageable. | 🟡 Represent & warrant |
● Layer8 can address this: Integration Planning & Execution Support
Deal Structure Recommendations
⚡
PROCEED WITH STRUCTURE
Recommended price: $750,000 (no price adjustment)
Representations & Warranties
Standard representations included in all transactions:
- Financial statements fairly present the financial condition of the business
- No material undisclosed liabilities
- All material contracts disclosed and assignable
- Business licenses current and transferable
- No pending or threatened litigation not disclosed
- IP owned by entity without encumbrance
- Tax returns filed and current, no material open liabilities
- No material adverse change since last financial statement date
⚡ Enhanced representations required by risk score:
| Domain | Enhanced Rep | Survival |
|---|---|---|
| Operational Risk | All key employees listed in Schedule X are employed as of close and have not given notice of resignation. | 18 mo. |
✓ R&W Insurance: R&W insurance not required at current risk levels but advisable for standard protection.
Conditions Precedent
| Priority | Condition | Rationale |
|---|---|---|
| MUST_CLOSE | Seller provides final financials within 30 days of close | Required for NWC peg calculation and QofE confirmation. |
| MUST_CLOSE | All material contracts confirmed assignable | Assignment without consent creates post-close liability. |
| MUST_CLOSE | Clean title to all IP confirmed | IP title defects cannot be corrected post-close. |
| SHOULD_CLOSE | Key employee retention agreements executed | Retention agreements reduce post-close flight risk. |
Buyer Perspective — SBA / Individual Buyer
How this risk profile reads through the SBA / Individual Buyer lens for domains scoring MODERATE or above.
Operational Risk
You are buying yourself a job. If the business cannot run without the current owner, you are buying a risk that transfers to you on day one. Require a 6-12 month transition period as a condition of close.
Management & Culture Risk
You are the new management. Understand who will stay, who will leave, and what institutional knowledge walks out the door. Budget for replacement hiring before you close.
Customer & Revenue Risk
Your debt service depends on revenue continuity. Understand which customers are at risk at close and structure an earnout or escrow to protect yourself if key customers do not transfer.
Technology & Cyber Risk
You will inherit the technology risk on day one. A ransomware attack in month two of ownership could bankrupt the business and default your SBA loan. Require a security assessment and cyber insurance as conditions of close.
Financial Quality
SBA lenders will require 3 years of tax returns and will calculate Debt Service Coverage Ratio on actual tax return income — not seller-adjusted EBITDA. Understand what the tax returns show before you get to lender underwriting.
Confidence Summary
| Domain | Confidence | Evidence Basis |
|---|---|---|
| Financial Quality | HIGH | 3+ corroborating documents |
| Legal & Liability Risk | HIGH | 3+ corroborating documents |
| Operational Risk | HIGH | 3+ corroborating documents |
| Customer & Revenue Risk | HIGH | 3+ corroborating documents |
| Technology & Cyber Risk | HIGH | 3+ corroborating documents |
| Management & Culture Risk | HIGH | 3+ corroborating documents |
| Market & Competitive Position | HIGH | 3+ corroborating documents |
| Integration Complexity | HIGH | 3+ corroborating documents |
Post-Close Integration Cost Estimates
Integration cost estimates reflect typical investment to address identified risks post-close. High-risk domains should be addressed immediately — within 30 days of close.
| Domain | Risk Level | Layer8 Integration Service | Est. Investment | Priority |
|---|---|---|---|---|
| Operational Risk | HIGH RISK | Operational Stabilization & Documentation | $3,500 – $7,000 | 90-DAY |
| Management & Culture Risk | HIGH RISK | Retention Planning & Culture Integration | $3,000 – $6,000 | 90-DAY |
| Customer & Revenue Risk | HIGH RISK | Customer Retention & Contract Remediation | $4,000 – $8,000 | 90-DAY |
| Technology & Cyber Risk | MODERATE | Technology & Security Remediation | $4,000 – $8,000 | 90-DAY |
| Financial Quality | MODERATE | Financial Normalization & QofE Support | $1,500 – $4,000 | 180-DAY |
| Market & Competitive Position | MODERATE | Competitive Analysis & Market Validation | $1,000 – $2,500 | 180-DAY |
| Legal & Liability Risk | MODERATE | Legal Risk Remediation & Contract Review | $2,000 – $5,000 | 180-DAY |
| Integration Complexity | MODERATE | Integration Planning & Execution Support | $2,500 – $7,000 | 180-DAY |
| TOTAL | $21,500 – $47,500 | |||
Post-Close Integration Playbook
This SBA / Individual Buyer integration playbook for Garrison Professional Advisors identifies 9 CRITICAL initiatives requiring immediate attention in the first 30 days. The highest-priority domains are Operational Risk, Management & Culture Risk, Customer & Revenue Risk. Total integration investment is estimated at $22,996–$54,495 across the 180-day program. Layer8 can directly execute or advise on the majority of these initiatives — contact info@layer8techgroup.com to discuss engagement options.
The following initiatives address risks identified in this assessment and should be executed in the sequence shown. Cost estimates reflect typical Layer8 engagement ranges and market-rate specialist fees.
Day 1-30
Critical Stabilization
3 initiatives
$1,500–$7,000
Day 31-60
Operational Stabilization
6 initiatives
$6,998–$13,998
Day 61-90
Systems & Process Integration
3 initiatives
$3,166–$6,582
Day 91-180
Growth & Optimization
11 initiatives
$11,332–$26,915
Day 1-30: Critical Stabilization
Address the highest-risk findings immediately to protect deal value and prevent value erosion during the transition window when the business is most vulnerable.
| Initiative | What to Do | Est. Cost | Owner | Priority |
|---|---|---|---|---|
| Day-One Operations Checklist Execution● Layer8: Operational Stabilization & Documentation | Execute a structured Day 1 operations checklist: take control of all system access, introduce yourself to all customers and staff, confirm vendor relationships, and complete a full cash reconciliation. | $0–$1,500 | Buyer Team | CRITICAL |
| Lender Reporting Structure Setup● Layer8: Financial Normalization & QofE Support◈ Specialist: CPA | Set up monthly management accounts and reporting format required by SBA lender. Confirm DSCR calculation methodology with lender and establish early-warning monitoring. | $1,500–$3,500 | Shared | CRITICAL |
| Key Relationship Introductions & Ownership Announcement | Conduct in-person or video introductions with all customers > 5% of revenue, top 5 vendors, and key referral sources within 30 days. Announce ownership transition with seller present. | $0–$2,000 | Buyer Team | CRITICAL |
Phase subtotal: $1,500–$7,000
Day 31-60: Operational Stabilization
Stabilize core operations, close documentation gaps, and confirm vendor and customer relationships under new ownership.
| Initiative | What to Do | Est. Cost | Owner | Priority |
|---|---|---|---|---|
| Vendor Contract Audit & Rationalization● Layer8: Operational Stabilization & Documentation | Review all vendor agreements, confirm contracts are in entity name, identify opportunities to consolidate or renegotiate. | $1,166–$2,333 | Layer8 | HIGH |
| Contract Renewal & Assignment Completion◈ Specialist: M&A Counsel | Complete all outstanding customer contract renewals, assignments, and consent processes. Move verbal relationships to written agreements. | $1,333–$2,666 | Specialist | HIGH |
| Culture Integration Plan & Communication | Develop a formal culture integration plan, conduct team communications, establish operating norms for the combined organization. | $1,000–$2,000 | Buyer Team | HIGH |
| Management Transition & Seller Handoff● Layer8: Retention Planning & Culture Integration | Execute structured seller transition per the agreed transition plan. Document all owner-held relationships, institutional knowledge, and operational dependencies. | $1,000–$2,000 | Layer8 | HIGH |
| Business Continuity Plan Development● Layer8: Operational Stabilization & Documentation | Develop and test a formal BCP/DR plan. Define recovery time objectives, document backup procedures, and test restoration. | $1,166–$2,333 | Layer8 | STANDARD |
| CRM Implementation & Pipeline Validation● Layer8: Customer Retention & Contract Remediation | Deploy or consolidate CRM, migrate pipeline data, and validate open opportunities against actual deal history. | $1,333–$2,666 | Layer8 | STANDARD |
Phase subtotal: $6,998–$13,998
Day 61-90: Systems & Process Integration
Integrate technology, harmonize processes, and complete people integration workstreams before the business enters steady-state under new ownership.
| Initiative | What to Do | Est. Cost | Owner | Priority |
|---|---|---|---|---|
| System Access Audit & Credential Transfer● Layer8: Technology & Security Remediation | Inventory all business systems, migrate personal account dependencies to entity accounts, document all credentials in a secure vault. | $1,333–$2,666 | Layer8 | HIGH |
| Technical Debt Assessment & Remediation Roadmap● Layer8: Technology & Security Remediation | Complete a formal technical debt inventory, score severity, prioritize remediation, and build a 12-month technology roadmap. | $1,333–$2,666 | Layer8 | STANDARD |
| Growth Initiative Identification & Prioritization | Identify the top 3 growth levers available to the business under new ownership. Build a 90-day customer expansion plan. | $500–$1,250 | Buyer Team | STANDARD |
Phase subtotal: $3,166–$6,582
Day 91-180: Growth & Optimization
Shift from stabilization to value creation — implement performance systems, pursue identified growth opportunities, and optimize operations for scale.
| Initiative | What to Do | Est. Cost | Owner | Priority |
|---|---|---|---|---|
| Financial Normalization & QofE Follow-Through● Layer8: Financial Normalization & QofE Support◈ Specialist: CPA / QofE Firm | Complete the Quality of Earnings follow-through, finalize add-back documentation, and normalize the chart of accounts to buyer's reporting standards. | $750–$2,000 | Specialist | CRITICAL |
| Contract Assignment & COC Consent Completion◈ Specialist: M&A Counsel | Obtain all outstanding change-of-control consents, complete contract assignments, and file any required regulatory notifications. | $1,000–$2,500 | Specialist | CRITICAL |
| Knowledge Capture & SOP Documentation Sprint● Layer8: Operational Stabilization & Documentation | Execute structured knowledge transfer sessions with the seller and key staff. Document core delivery processes, customer relationships, and vendor contacts. | $1,166–$2,333 | Layer8 | CRITICAL |
| Customer Communication & Retention Plan | Execute proactive customer communication strategy announcing ownership change. Conduct personal calls with top 5 customers within 30 days. Identify any at-risk accounts. | $1,333–$2,666 | Buyer Team | CRITICAL |
| Cybersecurity Baseline & MFA Enforcement● Layer8: Technology & Security Remediation | Deploy MFA across all business-critical systems, install EDR endpoint protection, document IR plan, confirm cyber insurance is active and transferred to buyer entity. | $1,333–$2,666 | Layer8 | CRITICAL |
| Key Employee Retention Agreements Execution◈ Specialist: HR/Compensation Consultant | Execute retention agreements for all employees identified as critical. Structure incentive packages to align with buyer's value creation plan. Address any compensation gaps. | $1,000–$2,000 | Buyer Team | CRITICAL |
| Reporting Infrastructure Setup● Layer8: Financial Normalization & QofE Support | Implement month-end close process, management reporting package, and buyer's chart of accounts. Configure accounting software to buyer standards. | $750–$2,000 | Shared | HIGH |
| IP Assignment & Registration Cleanup● Layer8: Legal Risk Remediation & Contract Review◈ Specialist: IP Counsel | Complete any outstanding IP assignment agreements, register unregistered marks, and document all IP in a formal IP schedule. | $1,000–$2,500 | Specialist | HIGH |
| Competitive Positioning Validation◈ Specialist: Market Research Firm | Conduct independent competitive analysis to validate the seller's stated market position. Interview 3-5 customers about competitive alternatives. | $500–$1,250 | Specialist | HIGH |
| Systems Integration Planning & Architecture● Layer8: Integration Planning & Execution Support | Develop a formal systems integration plan, identify all integration touchpoints, estimate costs and timeline, and assign integration owners. | $1,250–$3,500 | Layer8 | HIGH |
| Process Harmonization & Operating Model Design● Layer8: Integration Planning & Execution Support | Map current-state vs. target-state processes. Identify process conflicts, design the future operating model, and build a reengineering roadmap. | $1,250–$3,500 | Layer8 | STANDARD |
Phase subtotal: $11,332–$26,915
Total Integration Investment
$22,996 – $54,495
Layer8 Delivered
$16,330–$38,163
Specialist Required
$7,083–$16,416
Buyer Team
$2,833–$7,916
Addressing Operational Risk, Management & Culture Risk risks post-close protects the value of your acquisition investment and positions the business for a stronger future exit multiple.
Layer8 Engagement Options
ADVISORY
Layer8 advises your team on integration priorities and approach
- Weekly integration advisory calls
- Priority sequencing and risk guidance
- Vendor and specialist coordination
- 30-day and 90-day integration reviews
$3,500–$5,000/month
Buyers with strong internal teams who need expert guidance
Contact Layer8 →PROJECT
Layer8 directly executes specific integration workstreams
- Technology documentation and systems hardening
- Process documentation and SOP creation
- Cybersecurity baseline assessment and remediation
- Data room and financial documentation
- Vendor contract review and rationalization
$15,000–$45,000 depending on scope
Buyers who want specific high-risk domains addressed by experts
Contact Layer8 →RETAINER
Layer8 embedded as fractional CTO/CIO through the integration period
- All Project tier deliverables
- Ongoing technology leadership through integration
- Vendor and MSP management
- Integration progress reporting to ownership
- Post-integration optimization
$6,500–$9,500/month for 6-12 months
PE buyers and strategic acquirers who need embedded technology leadership through a complex integration
Contact Layer8 →