This independent audit verifies the design and implementation of our internal controls for our SupplierSelect and MarketFlow platforms.
Holding ISAE 3000 Type I certification demonstrates our unwavering commitment to providing a secure and reliable environment for our clients. This rigorous audit process provides independent confirmation that our controls are appropriately designed and implemented to safeguard your data and ensure smooth operation.
Our compliance with ISAE 3000 offers our clients a number of significant benefits:
Enhanced security: Our robust internal controls minimise the risk of data breaches and ensure the integrity of your information.
Increased transparency: The ISAE 3000 report offers valuable insights into our security practices, fostering trust and confidence in our services.
Improved compliance: Our adherence to industry best practices helps you meet your own compliance requirements.
Peace of mind: Knowing that your data is protected by a company committed to high security standards allows you to focus on your core business activities.
At Thomas Murray, security is an ongoing process. We are dedicated to continuously evaluating and strengthening our internal controls to maintain the highest standards of data protection and information security.
About the ISAE 3000
ISAE 3000 is a standard issued by the International Auditing and Assurance Standards Board (IAASB). It provides guidelines for assurance engagements other than audits or reviews of historical financial information. This standard is part of a suite of international standards intended to ensure high quality in assurance engagements, promoting confidence and transparency in non-financial information.
Insights
Why Summer is a Blind Spot in Private Equity Risk Oversight
Threat levels don't take annual leave. Why PE firms need continuous cyber oversight of portfolio companies, not seasonal assessment.
Why Cyber Risk Belongs in Operational Due Diligence
Cyber risk is still treated as an IT checkbox in operational due diligence. Here's why it needs to be a continuous monitoring signal.
Thomas Murray Publishes "Beneath the Asset: Cyber Risk and the Infrastructure Institutions Depend On"
Cyber risk has become the primary mechanism through which infrastructure failures reach institutional assets
Private Equity Cyber Risk Checklist
The PE Cyber Risk Checklist is a ten-step diagnostic for PE fund leadership, covering every stage from pre-deal surveillance to exit readiness.