
The Risk
Depositary Banks, Fund Management Companies and others need to protect investors' data and assets by proactively monitoring their service providers. Regulations such as AIFMD and UCITS V require banks to perform due diligence over a fund's organisation, procedures, and controls, as well as its service providers. At the same time, UCITS Management Companies and Alternative Investment Funds (AIFs) are under increasing pressure in Europe to monitor delegated activities such as transfer agency, fund distribution, administration, accounting, investment management, IT services and others. Increasingly, Fund Platforms are a service providers of interest, responsible for the safekeeping and administration of securities under custody. Given the wide range of services they can provide, a comprehensive assessment is essential.
The Solution
Thomas Murray's Fund Platform Monitoring solution eases the burden on banks and funds by administering a managed service to collect data, generate a report based on a standardised proprietary methodology and maintain data in a structured form. Thomas Murray generates a detailed assessment with overall and sub-risks rated AAA to C.
Key risk assessed include:
Asset Safety
Assert Servicing
Financial
Operational

We safeguard clients and their communities

Petroleum Development Oman Pension Fund
“Thomas Murray has been a very valuable partner in the selection process of our new custodian for Petroleum Development Oman Pension Fund.”

ATHEX
"Thomas Murray now plays a key role in helping us to detect and remediate issues in our security posture, and to quantify ATHEX's security performance to our directors and customers."

Northern Trust
“Thomas Murray provides Northern Trust with a range of RFP products, services and technology, delivering an efficient and cost-effective solution that frees our network managers up to focus on higher Value activities.”
Insights

Why 72 hours is the New Standard for M&A Cyber Due Diligence
A decade ago, cyber due diligence sat somewhere between “nice to have” and “we’ll deal with it post-close.” That world no longer exists.

Thomas Murray Launches Digital Asset Market Information (DAMI)
Thomas Murray, a global leader in risk management, due diligence, and cybersecurity services, is proud to announce the launch of Digital Asset Market Information (DAMI).

Solving the "Scale Paradox": How to Automate Portfolio Oversight with Fewer People
In 2026, private equity technical teams are facing a "Scale Paradox": portfolios are growing in complexity, while in the internal teams responsible for operations and cybersecurity oversight, headcounts remain stagnant.

How Private Equity Hackers Choose Their Targets
Private equity firms sit at the intersection of high-value financial transactions, sensitive deal data, and an expanding portfolio of technology heavy portfolio companies – and it’s this combination that makes PE an attractive target for cyberthreat actors.
Contact an expert

