This independent audit verifies the design and implementation of our internal controls for our SupplierSelect and MarketFlow platforms.
Holding ISAE 3000 Type I certification demonstrates our unwavering commitment to providing a secure and reliable environment for our clients. This rigorous audit process provides independent confirmation that our controls are appropriately designed and implemented to safeguard your data and ensure smooth operation.
Our compliance with ISAE 3000 offers our clients a number of significant benefits:
Enhanced security: Our robust internal controls minimise the risk of data breaches and ensure the integrity of your information.
Increased transparency: The ISAE 3000 report offers valuable insights into our security practices, fostering trust and confidence in our services.
Improved compliance: Our adherence to industry best practices helps you meet your own compliance requirements.
Peace of mind: Knowing that your data is protected by a company committed to high security standards allows you to focus on your core business activities.
At Thomas Murray, security is an ongoing process. We are dedicated to continuously evaluating and strengthening our internal controls to maintain the highest standards of data protection and information security.
About the ISAE 3000
ISAE 3000 is a standard issued by the International Auditing and Assurance Standards Board (IAASB). It provides guidelines for assurance engagements other than audits or reviews of historical financial information. This standard is part of a suite of international standards intended to ensure high quality in assurance engagements, promoting confidence and transparency in non-financial information.
Insights

Beneath the Asset – Out of Sight: The State of Cybersecurity in the Private Equity Industry
The UK’s smallest investment funds are weak security link in protecting the IP needed for national growth, new Thomas Murray study finds.

From RFP to Ongoing ODD: Closing the Monitoring Gap
RFP rigour rarely survives past manager selection. What a robust RFP process looks like, and how to close the monitoring gap that opens once it's over.

Thomas Murray Announces Significant Expansion of Digital Asset Market Information (DAMI) Service with Launch of Phase 2
Thomas Murray, a global leader in risk management, due diligence, and cybersecurity services, is proud to announce the launch of Phase 2 of its Digital Asset Market Information (DAMI)

Fool me once: What the Apollo breach tells private equity about the threats it now faces
Apollo’s August breach was one data point in a five-week campaign mapping 200+ private capital firms. What it means for fund-level cyber risk.

