Due diligence on my investment management business by a potential investor in the fund has indicated the need for an external review of controls. How common place is this?

Reviews of internal controls under international standard ISAE3402 (equivalent to a SOC 1) are appropriate to investment management firms. However, they are a response to investor pressure or best practice rather than a requirement.

Financial Services FAQs