IT services for regulated businesses · FINMA and AML

When evidence is requested, know where to find it.

A report, an access history, a recovery procedure: information needed for a review is often spread across several people and systems.

We help organise the technical and documentary evidence expected, working with your compliance managers and the relevant reviewers.

Let’s discuss your next review

Prepare the evidence

A precise question needs a precise answer.

Who had access to this resource, and during which period?

Answering may require matching logs, an access decision and a system configuration. The sources need to exist, be retained and be available to consult.

We agree on the systems concerned, evidence needed, retention periods and required access. The report describes what was examined, the findings and the points to address.

Useful evidence starts with organised collection and retention.

Our scope of work

Connect findings with the evidence behind them.

Prepare reports and traceability

We prepare audit reports within the agreed scope and support extended logging. Sources, access and retrieval arrangements are specified at the outset.

Document continuity and recovery

BCPs and DRPs describe priorities, dependencies and procedures for an incident. We define recovery objectives and planned exercises with your business.

Structure reviews

Selected ISO standards and reviews under the revised Swiss Data Protection Act: we agree on the framework, checks and documents with your managers. The work has an explicit scope.

Continuous AML checks

A result needs a way to be reviewed and followed up.

We also offer a continuous verification tool for anti-money laundering work. A demonstration clarifies the checks covered, required data and verification frequency.

We discuss how results would be handled and fit into your organisation. Your responsible staff retain their analysis and follow-up decisions.

The tool fits within your control framework and responsibilities.

Practical questions

Define the engagement with your stakeholders.

How does the engagement start?

With your activities, review priorities and expected deliverables. The proposal defines scope, access, confidentiality, responsibilities and follow-up. Requirements are determined with your managers and, where relevant, your auditors or advisers.

Does this support amount to certification?

No. Work aligned with an ISO standard is distinct from obtaining certification. These services support your control framework; they do not constitute FINMA certification.

Can we start with one specific need?

The scope can focus on reports, log retention, continuity, a review or the AML tool. We define the dependencies and information needed together.

Let’s discuss your situation

What evidence do you need to present?

Tell us what is being reviewed and which deliverables are expected. We will define our scope of work together.