MODE 1: Pre-Acquisition Deep Analysis (收购前深度分析)
Section 5: Risk Matrix (风险矩阵)
Project Tengen | IASO Bio × Medisix Therapeutics
Date: 2026-03-20 | Classification: CONFIDENTIAL
5.1 Comprehensive Risk Matrix (综合风险矩阵)
Risk Scoring Methodology
- Probability: 1 (Remote <5%) → 5 (Near Certain >80%)
- Impact: 1 (Negligible) → 5 (Catastrophic / Deal-breaking)
- Risk Score: Probability × Impact (max 25)
- Priority: Critical (≥15), High (10-14), Medium (5-9), Low (1-4)
STRATEGIC RISKS (战略风险)
| # |
Risk |
Prob |
Impact |
Score |
Justification |
Mitigation Strategy |
Residual Risk |
Owner |
| S1 |
PEBL platform fails to extend beyond CD7 — CD99, CD70 expansion targets fail in preclinical/clinical |
3 |
5 |
15 🔴 |
Platform extensibility is the primary value driver; CD99 expert-validated but no in vivo data yet; broader platform patent claims have support vulnerabilities [TiPLab] |
(1) Begin CD99 preclinical immediately post-closing with Campana; (2) Parallel CD70 evaluation; (3) Structure deal with earnout tied to platform expansion milestones |
Medium — dependent on biology; cannot fully mitigate |
CSO / R&D |
| S2 |
Wugen achieves FDA approval first — captures market with allogeneic off-the-shelf CD7 CAR-T; commoditizes CD7 indication |
4 |
3 |
12 🟡 |
Wugen BLA target 2027; BTD + RMAT + Fast Track + PRIME designations; $115M raised; pivotal trial enrolling [Public data] |
(1) Differentiate on safety profile (PEBL: 0% Grade 3+ CRS vs Wugen's safety issues); (2) Focus on EMA CMA pathway (different regulatory); (3) Pivot value thesis to CD99/CD70 where Wugen has no presence |
Medium — competitive risk is structural |
BD / Strategy |
| S3 |
HK IPO timing conflict — Medisix acquisition complicates IASO's 2026 IPO timeline or narrative |
2 |
3 |
6 🟢 |
IPO is strategic pillar #5; acquisition adds pipeline narrative but also integrates risk; Morgan Stanley/CCB International already advising |
(1) Frame acquisition as pipeline expansion (positive narrative); (2) Time closing to align with IPO preparation; (3) Ring-fence Medisix liabilities from IASO's IPO disclosures |
Low |
CFO / Investment Bank |
| S4 |
CD7 CAR-T has weak commercial value — Expert consensus that T-ALL patient pool too small for commercial viability |
4 |
3 |
12 🟡 |
Dr. Pan Jing: "CD7 product has NO commercial value"; ~100 new T-ALL cases/year in China; must bridge to transplant [附件2] |
(1) Price deal based on platform, not CD7 alone; (2) CD7 serves as proof-of-concept for platform; (3) Focus commercial thesis on CD99/CD70 broader markets |
Medium — CD7 is proof-of-concept, not revenue driver |
BD / Commercial |
FINANCIAL RISKS (财务风险)
| # |
Risk |
Prob |
Impact |
Score |
Justification |
Mitigation Strategy |
Residual Risk |
Owner |
| F1 |
CPN conversion triggers excessive cost — $29M+ in CPNs with 85-95% discount and 2x cash return cap at $22M on Deemed Liquidation Event |
5 |
4 |
20 🔴 |
CPNs mature Mar 31, 2026; acquisition = Deemed Liquidation Event; multiple tranches with different conversion mechanics [EY FDD, ArrowGates] |
(1) Pre-close negotiation with all note holders; (2) Leverage Medisix's distress (no alternative = haircut); (3) Offer note holders equity in combined entity or structured payout; (4) Include CPN resolution as closing condition |
Medium — note holders have leverage but alternatives are worse (liquidation → $0) |
CFO / Legal |
| F2 |
Total deal cost exceeds budget — Liability cleanup + manufacturing rebuild + integration > $100M |
3 |
4 |
12 🟡 |
Base estimate $55-93M all-in; significant unknowns in asset valuation report (not readable), NUS renegotiation, and manufacturing costs |
(1) Cap upfront consideration; (2) Structure 40-60% as earnout/milestone; (3) Phase manufacturing investment over 24 months; (4) Build contingency reserve ($10M) |
Medium |
CFO |
| F3 |
Transfer pricing audit — SG/US tax authorities challenge $12M intercompany loan and 7% R&D markup |
3 |
3 |
9 🟢 |
ArrowGates flagged: loan not covered by TP report; 7% at bottom of arm's length range (median 13.25%); retroactive change from 10% |
(1) Capitalize loan before closing; (2) Prepare contemporaneous TP documentation; (3) Engage Big 4 for Advance Pricing Arrangement if needed |
Low-Medium — addressable with proper structuring |
Tax / Legal |
| F4 |
FX exposure — SGD/USD/EUR/CNY volatility on deal payments and ongoing operations |
3 |
2 |
6 🟢 |
Multi-currency exposure: acquisition in USD, operations in SGD/EUR, IASO in CNY; clinical costs at OPBG in EUR |
(1) FX hedging for known commitments; (2) Natural hedge through SG entity revenue/cost matching; (3) CNY-denominated earnout where possible |
Low |
Treasury |
OPERATIONAL RISKS (运营风险)
| # |
Risk |
Prob |
Impact |
Score |
Justification |
Mitigation Strategy |
Residual Risk |
Owner |
| O1 |
Manufacturing chain collapse — WuXi MSA expired; Lonza terminated; no plasmid stock; OPBG academic-only |
4 |
5 |
20 🔴 |
WuXi retains process IP (OXGENET); BIOSECURE Act risk; Lonza Prodigy FAILED (3 batches); plasmid stock depleted; G-Rex semi-open manual process [CMC DD, ArrowGates] |
(1) Transfer construct to IASO LVV platform (Nanjing GMP); (2) Engage alternative CDMO (Samsung, Catalent) as backup; (3) Budget $10-15M and 18-24 months for full rebuild; (4) Maintain WuXi ad-hoc for stability testing during transition |
Medium-High — 18-24 month clinical gap risk |
CMC / Operations |
| O2 |
BIOSECURE Act disrupts WuXi relationship — WuXi named/proposed for DoD 1260H list; US government restrictions on grants/procurement |
3 |
4 |
12 🟡 |
BIOSECURE signed Dec 2025 NDAA; WuXi proposed for 1260H; 5-year transition for listed entities; WuXi retains proprietary data [Public data, ArrowGates] |
(1) Accelerate WuXi exit — insource to IASO; (2) Document all WuXi deliverables before transition; (3) Negotiate data/DMF access from WuXi; (4) BIOSECURE primarily affects US operations — IASO's China base less impacted |
Medium — insourcing timeline is the risk |
CMC / Legal |
| O3 |
Key person loss — Campana departs — Scientific founder loses interest or has conflict with acquirer culture/management |
3 |
5 |
15 🔴 |
Campana is sole inventor of PEBL; NUS professor (cannot be poached); personal AML patent not transferred; consulting agreement is personal services [Founder Agreement] |
(1) Retention package: $1-2M + milestone payments + academic freedom; (2) SAB appointment with meaningful role; (3) Resolve AML patent transfer before closing; (4) Engage NUS to support transition |
Medium — Campana's academic independence is both asset and risk |
HR / CEO |
| O4 |
OPBG clinical program stalls — Enrollment delays, regulatory issues, or Locatelli disengagement |
2 |
4 |
8 🟢 |
11 patients enrolled of 23 target; multi-center expansion not yet initiated; OPBG retains data ownership (Clause 7.1) [附件3, ArrowGates] |
(1) Clinical collaboration agreement with OPBG; (2) Co-fund multi-center expansion; (3) Negotiate data access rights; (4) Parallel US IND preparation as alternative regulatory path |
Low-Medium |
Clinical / Regulatory |
| O5 |
Single point of failure — Cecilia Sim — Only person managing finance, HR, IT, legal for Medisix SG entity |
4 |
3 |
12 🟡 |
No backup for any corporate function; no signed IP assignment agreement [ArrowGates] |
(1) IASO integration team shadow Cecilia from Day 1; (2) Retention bonus; (3) Knowledge transfer plan with 6-month overlap; (4) Secure IP assignment before closing |
Low — addressable with proactive transition |
Integration / HR |
REGULATORY RISKS (监管风险)
| # |
Risk |
Prob |
Impact |
Score |
Justification |
Mitigation Strategy |
Residual Risk |
Owner |
| R1 |
NUS license termination or adverse renegotiation — NUS leverages acquisition to extract unfavorable terms; or performance milestone (Aug 2027 regulatory submission) missed |
2 |
5 |
10 🟡 |
NUS retains IP ownership; Amendments 3-4 under negotiation; equity participation up to 10%/$10M; sublicense sharing up to 40% [NUS License, ArrowGates] |
(1) Complete Amendment 3 before closing (closing condition); (2) Extend Aug 2027 milestone; (3) Cap equity participation; (4) Develop proprietary next-gen PEBL variants; (5) Build direct IASO-NUS relationship |
Medium — NUS dependency is structural |
Legal / BD |
| R2 |
EMA rejects CMA pathway — Sample size insufficient; LVV change requires new clinical data; PIP/ODD delays |
2 |
4 |
8 🟢 |
EMA scientific advice obtained but conditional; LVV vs RVV separate products; PIP not filed [附件4, 附件9] |
(1) Prioritize 23-patient enrollment; (2) File PIP and ODD immediately; (3) Apply for PRIME; (4) Parallel US IND as alternative |
Low-Medium |
Regulatory |
| R3 |
NMPA does not approve PCART7 pathway — Bridging studies required; NMPA won't approve CAR-T + HSCT combination; endpoint mismatch |
3 |
3 |
9 🟢 |
NMPA requires CR/CRi primary endpoint; does not approve combination products; European data may not be accepted directly [附件1, Prof. Lu Meng] |
(1) Plan China-specific clinical strategy; (2) Consider PCART7 monotherapy arm; (3) Leverage IASO's NMPA regulatory experience; (4) Focus initial China strategy on CD99/CD70 with broader market |
Low-Medium |
Regulatory |
| R4 |
GDPR data transfer compliance failure — OPBG patient data cannot be transferred to China without proper legal basis |
3 |
3 |
9 🟢 |
No Data Processing Agreements or SCCs found in data room; China has no GDPR adequacy decision |
(1) Implement Standard Contractual Clauses; (2) Data minimization — process in EU, transfer only aggregated/anonymized; (3) Engage EU privacy counsel |
Low |
Legal / Data Protection |
GEOPOLITICAL RISKS (地缘政治风险)
| # |
Risk |
Prob |
Impact |
Score |
Justification |
Mitigation Strategy |
Residual Risk |
Owner |
| G1 |
SG-CN corridor restrictions tighten — Singapore introduces restrictions on Chinese biotech acquisitions in response to US/EU pressure |
1 |
5 |
5 🟢 |
Singapore currently has open investment policy; Temasek/ClavystBio are existing Medisix investors (SG government-linked); no current restrictions |
(1) Maintain SG entity operating independently; (2) Engage SG government stakeholders early; (3) Preserve SG jobs and operations |
Low |
Government Relations |
| G2 |
US-CN tech decoupling affects clinical collaboration — US/EU restrictions on clinical data sharing with Chinese entities |
2 |
3 |
6 🟢 |
Current focus on biosecurity (BIOSECURE) not clinical data; OPBG is Italian (not US); NUS is Singaporean |
(1) Structure data flows through SG/EU entities; (2) Maintain SG as data hub; (3) Monitor regulatory developments |
Low |
Legal / Compliance |
| G3 |
Sanctions screening failure — Transaction parties or beneficial owners on sanctions lists |
1 |
5 |
5 🟢 |
Standard M&A diligence item; no red flags identified in data room |
(1) Full OFAC/EU/UN sanctions screening pre-close; (2) Screen all beneficial owners of note holders |
Low |
Compliance |
INTEGRATION RISKS (整合风险)
| # |
Risk |
Prob |
Impact |
Score |
Justification |
Mitigation Strategy |
Residual Risk |
Owner |
| I1 |
Manufacturing process transfer takes >24 months — LVV rebuild, process validation, and bridging studies extend beyond plan |
3 |
4 |
12 🟡 |
JW Therapeutics precedent: adherent-to-suspension LVV change required 12 bridging cases; no plasmid stock; must rebuild from scratch [CMC DD] |
(1) Start process development Day 1; (2) Parallel tracks (IASO in-house + alternative CDMO); (3) Maintain OPBG academic supply for ongoing trial; (4) Budget 30-month timeline as contingency |
Medium |
CMC / Operations |
| I2 |
Cultural integration failure — Academic/SG culture clashes with IASO's aggressive commercial CN culture |
3 |
3 |
9 🟢 |
Medisix has academic DNA (NUS/OPBG); IASO is commercially-driven; key stakeholders (Campana, Locatelli) are academics |
(1) Standalone entity model for SG/EU operations; (2) Preserve academic collaboration ethos; (3) Dedicated integration manager with cross-cultural experience |
Low-Medium |
HR / Integration |
| I3 |
JTC lease approval delayed or denied — Singapore government landlord blocks change of control |
2 |
3 |
6 🟢 |
JTC change of control clause requires prior written consent; JTC is government agency with policy considerations [JTC Tenancy] |
(1) Early JTC engagement; (2) Emphasize continued SG operations and employment; (3) Alternative lab space if needed (small footprint — SGD 2.2K/month) |
Low |
Operations / Legal |
| I4 |
Anti-monopoly review required — SAMR/CCCS filing obligation or extended review |
1 |
3 |
3 🟢 |
Small target (zero revenue, 4 employees); no market overlap in T-cell malignancies; IASO is in BCMA, Medisix in CD7 — complementary, not competitive |
(1) Assess filing thresholds (likely below); (2) Prepare filing if required; (3) No competition concerns expected |
Very Low |
Legal |
5.2 Risk Heat Map (风险热力图)
IMPACT →
1-Negligible 2-Minor 3-Moderate 4-Major 5-Catastrophic
┌──────────┬─────────┬──────────┬─────────┬──────────────┐
5-Certain │ │ │ │ F1(20) │ │
├──────────┼─────────┼──────────┼─────────┼──────────────┤
4-Likely │ │ │ S4(12) │ O1(20) │ │
│ │ │ S2(12) │ O2(12) │ │
│ │ │ O5(12) │ │ │
├──────────┼─────────┼──────────┼─────────┼──────────────┤
3-Possible│ │ F4(6) │ F3(9) │ F2(12) │ S1(15) │
│ │ │ R3(9) │ I1(12) │ O3(15) │
│ │ │ R4(9) │ │ │
│ │ │ I2(9) │ │ │
├──────────┼─────────┼──────────┼─────────┼──────────────┤
2-Unlikely│ │ │ S3(6) │ R2(8) │ R1(10) │
│ │ │ G2(6) │ O4(8) │ │
│ │ │ I3(6) │ │ │
├──────────┼─────────┼──────────┼─────────┼──────────────┤
1-Remote │ │ │ I4(3) │ │ G1(5) │
│ │ │ │ │ G3(5) │
└──────────┴─────────┴──────────┴─────────┴──────────────┘
P
R GREEN YELLOW RED
O (Score 1-4) (Score 5-14) (Score 15-25)
B
→
5.3 Risk Priority Summary (风险优先级汇总)
🔴 CRITICAL RISKS (Score ≥ 15) — Require pre-closing resolution
| Risk |
Score |
Key Action |
| F1: CPN conversion cost |
20 |
Negotiate restructuring with all note holders before closing |
| O1: Manufacturing chain collapse |
20 |
Budget $10-15M and plan 18-24 month rebuild; leverage IASO infrastructure |
| S1: PEBL platform extension failure |
15 |
Structure deal with platform expansion earnout; begin CD99 preclinical immediately |
| O3: Campana departure |
15 |
Secure retention package and IP transfer before closing |
🟡 HIGH RISKS (Score 10-14) — Require active management
| Risk |
Score |
Key Action |
| S2: Wugen competition |
12 |
Differentiate on safety; pivot to CD99/CD70 |
| S4: CD7 weak commercial value |
12 |
Price for platform, not CD7 |
| F2: Total cost overrun |
12 |
Cap upfront; structure earnout |
| O2: BIOSECURE/WuXi |
12 |
Accelerate insourcing |
| O5: Cecilia Sim SPOF |
12 |
Knowledge transfer from Day 1 |
| R1: NUS license risk |
10 |
Complete Amendment 3 before closing |
| I1: Manufacturing delay |
12 |
Parallel tracks; 30-month contingency |
🟢 MODERATE/LOW RISKS (Score < 10) — Monitor
All remaining risks (S3, F3, F4, R2, R3, R4, G1, G2, G3, O4, I2, I3, I4) — standard monitoring sufficient.
[All source citations refer to documents indexed in 00_Document_Inventory.md]