About a-team Marketing Services
The knowledge platform for the financial technology industry
The knowledge platform for the financial technology industry

A-Team Insight Blogs

Cloud Industry Forum Joins Third Party Assurance Initiative

Subscribe to our newsletter

The Cloud Industry Forum (CIF) today announced it has partnered with the Third Party Assurance Centre (TPAC), a business assurance initiative, formed to help minimise outsourcing risks. Other industry bodies partnering with TPAC include the Information Security Forum, Cloud Security Alliance, Common Assurance Maturity Model, and the Payment Card Industry board of advisers.

A recent whitepaper collectively produced by these industry bodies entitled, “Business Assurance for the 21st Century,” highlights that third parties managing data should be asked questions about the security systems they have in place and the standards they adhere to. TPAC aims to combat security risks faced by organisations that manage third-party suppliers by introducing transparency into the supply chain.

Raj Samani, founder of the Common Assurance Maturity Model (CAMM), and chief technology officer Europe, Middle East and Africa for security firm McAfee, commented: “Organisations should create contracts which outline the level of security that they expect from their third parties, whether data is being managed in the cloud or on-premise. This way, when organisations get tenders for business coming through, they are assured that third parties are transparent about risk levels. Transparency is heavily encouraged by CIF as are contracts. We are delighted they are coming on board with TPAC to advocate best practice across the wider IT sector.”

Andy Burton, chairman of the Cloud Industry Forum commented: “CIF fully supports the initiative of providing a third party assurance framework to help establish trust online, and we see this as complementary to the CIF Code of Practice which was launched in 2010 to engender best practice within the Cloud Service Provider market by requiring Certification against the inter-dependent pillars of Transparency, Accountability and Capability. Both the CIF Code of Practice and the Third Party Assurance initiative have a common aim of providing end users with a frame of reference to make informed decisions in their use of online services. To that end we are keen to work alongside our industry peers to see if we can help make this a reality.”

A website will shortly be launched for the initiative under the following url: www.the-third-party-assurance-centre.com.

Subscribe to our newsletter

Related content

WEBINAR

Recorded Webinar: Meeting the data management challenges of MiFID II

The compliance deadline for Markets in Financial Instruments Directive II (MiFID II) has been pushed back a year to January 2018, giving financial institutions within its scope an opportunity to take a strategic rather than tactical approach to implementation. But whatever the approach, the scale of the regulation is large and the data management challenge...

BLOG

DTCC Sets Out Four Hypotheses on Future Use of Data and Data Management

The Depository Trust & Clearing Corporation (DTCC) has detailed four hypotheses that will drive how data is used in financial markets in the future – data will be more accessible and secure, interconnected data ecosystems will emerge, there will be more capacity to focus on data insights, and open source data standards will become ubiquitous....

EVENT

Data Management Summit New York City

Now in its 12th year, the Data Management Summit (DMS) in New York brings together the North American, capital markets enterprise data management community, to explore the evolution of data strategy and how to leverage data to drive compliance and business insight.

GUIDE

ESG Handbook 2023

The ESG Handbook 2023 edition is the essential guide to everything you need to know about ESG and how to manage requirements if you work in financial data and technology. Download your free copy to understand: What ESG Covers: The scope and definition of ESG Regulations: The evolution of global regulations, especially in the UK...