About a-team Marketing Services
The knowledge platform for the financial technology industry
The knowledge platform for the financial technology industry

A-Team Insight Blogs

Cloud Industry Forum Joins Third Party Assurance Initiative

Subscribe to our newsletter

The Cloud Industry Forum (CIF) today announced it has partnered with the Third Party Assurance Centre (TPAC), a business assurance initiative, formed to help minimise outsourcing risks. Other industry bodies partnering with TPAC include the Information Security Forum, Cloud Security Alliance, Common Assurance Maturity Model, and the Payment Card Industry board of advisers.

A recent whitepaper collectively produced by these industry bodies entitled, “Business Assurance for the 21st Century,” highlights that third parties managing data should be asked questions about the security systems they have in place and the standards they adhere to. TPAC aims to combat security risks faced by organisations that manage third-party suppliers by introducing transparency into the supply chain.

Raj Samani, founder of the Common Assurance Maturity Model (CAMM), and chief technology officer Europe, Middle East and Africa for security firm McAfee, commented: “Organisations should create contracts which outline the level of security that they expect from their third parties, whether data is being managed in the cloud or on-premise. This way, when organisations get tenders for business coming through, they are assured that third parties are transparent about risk levels. Transparency is heavily encouraged by CIF as are contracts. We are delighted they are coming on board with TPAC to advocate best practice across the wider IT sector.”

Andy Burton, chairman of the Cloud Industry Forum commented: “CIF fully supports the initiative of providing a third party assurance framework to help establish trust online, and we see this as complementary to the CIF Code of Practice which was launched in 2010 to engender best practice within the Cloud Service Provider market by requiring Certification against the inter-dependent pillars of Transparency, Accountability and Capability. Both the CIF Code of Practice and the Third Party Assurance initiative have a common aim of providing end users with a frame of reference to make informed decisions in their use of online services. To that end we are keen to work alongside our industry peers to see if we can help make this a reality.”

A website will shortly be launched for the initiative under the following url: www.the-third-party-assurance-centre.com.

Subscribe to our newsletter

Related content

WEBINAR

Recorded Webinar: Streamlining trading and investment processes with data standards and identifiers

Financial institutions are integrating not only greater volumes of data for use across their organisation but also more varieties of data. As well, that data is being applied to more use cases than ever before, especially regulatory compliance and ESG integration. Due to this increased complexity of institutions’ data needs, however, information often arrives into...

BLOG

Data Standards Bring Many Gains (If You Have the Right Setup): Webinar Review

Standards and identifiers are helping to improve the quality of data used by capital market participants, but organisations with legacy architectures are finding it challenging to capitalise on those benefits, according to polls by A-Team Group. Half of respondents to surveys held during a recent A-Team Group Data Management Insight webinar said that data standardisation...

EVENT

Data Management Summit London

Now in its 16th year, the Data Management Summit (DMS) in London brings together the European capital markets enterprise data management community, to explore how data strategy is evolving to drive business outcomes and speed to market in changing times.

GUIDE

FRTB Special Report

FRTB is one of the most sweeping and transformative pieces of regulation to hit the financial markets in the last two decades. With the deadline confirmed as January 2022, this Special Report provides a detailed insight into exactly what the data requirements are for FRTB in its latest (and final) incarnation, and explores what needs to be done in order to meet these needs on a cost-effective and company-wide basis.