This independent audit verifies the design and implementation of our internal controls for our SupplierSelect and MarketFlow platforms.
Holding ISAE 3000 Type I certification demonstrates our unwavering commitment to providing a secure and reliable environment for our clients. This rigorous audit process provides independent confirmation that our controls are appropriately designed and implemented to safeguard your data and ensure smooth operation.
Our compliance with ISAE 3000 offers our clients a number of significant benefits:
Enhanced security: Our robust internal controls minimise the risk of data breaches and ensure the integrity of your information.
Increased transparency: The ISAE 3000 report offers valuable insights into our security practices, fostering trust and confidence in our services.
Improved compliance: Our adherence to industry best practices helps you meet your own compliance requirements.
Peace of mind: Knowing that your data is protected by a company committed to high security standards allows you to focus on your core business activities.
At Thomas Murray, security is an ongoing process. We are dedicated to continuously evaluating and strengthening our internal controls to maintain the highest standards of data protection and information security.
About the ISAE 3000
ISAE 3000 is a standard issued by the International Auditing and Assurance Standards Board (IAASB). It provides guidelines for assurance engagements other than audits or reviews of historical financial information. This standard is part of a suite of international standards intended to ensure high quality in assurance engagements, promoting confidence and transparency in non-financial information.
Insights
The Hidden Costs of Spreadsheet-Based Due Diligence
For decades, spreadsheets have been the default tool for operational due diligence. But the costs of this approach are becoming impossible to ignore.
Thomas Murray Launches “Beneath the Asset” Initiative
New analysis warns the classic understanding of asset safety is being fundamentally reshaped.
Missing Security Provisions: 10 Key Questions every Private Equity firm should ask their MSP
Most private equity firms assume their MSP is handling cyber security. Most are wrong.
Top 5 Things Investors and Allocators Should Look for in Technologies Streamlining Operational Due Diligence
Our work at the intersection of institutional risk and market infrastructure has shown us what makes ODD technology truly impactful.