ISAE 3000 Type 2 Report (FINMA)

The International Standard on Assurance Engagements (ISAE) 3000 is a standard which is applied for audits of internal controls, sustainability and compliance with -laws and regulations. The ISAE 3000 Type 2 Report is a self-assessment which is then audited by an independent third party, and provides assurance on the suitability of the design and existence of controls over a period of time.

This report verifies the effectiveness of Google’s internal controls to support adherence to certain FINMA (the Swiss Financial Market Supervisory Authority) requirements applicable to regulated financial services customers.

The report covers the requirements of the following FINMA Circulars:

• 2018/03 FINMA Circular “Outsourcing – banks and insurers” (21.09.2017);
• 2023/01 FINMA Circular “Operational Risk and Resilience - banks” (07.12.2022; Section IV. Operational risk management: principle ICT risk management, principle cyber risk management, principle critical data risk management, principle business continuity management)

The ISAE 3000 Type 2 Report is available to our existing customers and may be requested via customer support. Navigate directly to the console for GCP. Potential customers can reach out to sales for more information