KPMG

01. Findings

KPMG International is certified to ISO 27001 and ISO 27017, validating its information security management systems and cloud security controls [17]. The firm’s security framework is governed by Global Information Security Policies and Standards, with annual compliance monitoring through the International Information Protection Audit Program [17]. KPMG follows industry standards such as the NIST Cybersecurity Framework 2.0 for incident response [19]. A data breach involving the kpmg.com domain was reported on January 26, 2026, attributed to the threat actor Nova, though the leak size is unknown [28]. The firm also assists clients with SOC 2 compliance and data protection [16].

02. Events

• [legal] KPMG Australia Audit Scandal and Fines

  KPMG Australia staff and partners were fined up to $180,000 for misusing confidential client information (Optus/Telstra) to win contracts. This led to resignations and loss of government contracts.

  Jul 19, 2026, 12:00 AM · Source

• [leadership] Gary Wingrove Appointed Global Chairman and CEO

  Gary Wingrove was appointed Global Chairman and CEO, succeeding Bill Thomas. Wingrove previously served as Global Chief Operating Officer.

  Mar 1, 2026, 12:00 AM · Source

• [breach] KPMG Data Breach

  A data breach involving the kpmg.com domain was reported on January 26, 2026. The threat actor was identified as Nova. The leak size is unknown.

  Jan 26, 2026, 12:00 AM · Source

• [legal] PCAOB Fines for Accounting Deficiencies

  KPMG entities faced multiple fines from the PCAOB for accounting fraud or deficiencies between 2022 and 2025.

  Jan 1, 2025, 12:00 AM

Deterministic outside-in checks run directly against the vendor's domain - not inferred from press or marketing pages.

Last observed: Aug 19, 2026, 10:53 PM

• TLS certificate

  Certificate expires in 74 days

  infoPass

• Security headers

  4/6 security headers present

  mediumFail

• Email authentication (SPF / DMARC)

04. AI Risk

How this vendor uses AI/ML with customer data - model providers, training stance, subprocessors, and relevant DPA language when publicly documented.

AI exposure tier: Moderate AI Exposure

KPMG leverages AI-enabled solutions and platforms such as KPMG Velocity and KPMG Digital Finance [22]. The firm collaborates with leading AI innovators and maintains alliances with Microsoft, Google Cloud, SAP, Oracle, and ServiceNow to deliver AI capabilities [13]. KPMG emphasizes trusted AI and ethical use of AI in its services [33]. The firm provides advisory services on AI readiness and data modernization [23]. Specific details on whether KPMG trains models on customer data or offers opt-out mechanisms are not explicitly disclosed in the provided sources.

Model providers

Microsoft · Google Cloud · SAP · Oracle · ServiceNow

Training on customer data

Training stance unknown

DPA / trust-center notes

KPMG protects sensitive information through a comprehensive approach led by dedicated data privacy professionals, applying robust information management and security policies that follow internationally recognized standards [36].

05. Company

KPMG is a global organization of independent member firms providing audit, tax, and advisory services [5]. The network operates in 138 countries and territories with more than 276,000 partners and employees [5]. KPMG International Limited is a private English company limited by guarantee that provides support services to the member firms, which are separate legal entities [9]. The firm was formed through the merger of Peat Marwick International and Klynveld Main Goerdeler in 1987 [9]. KPMG reports global revenues of US$38.4 billion for 2024 [9]. The firm emphasizes a purpose-led culture focused on excellence, quality, and integrity [5].

06. Product

KPMG offers a range of professional services including audit, tax, legal advisory, risk management, and business performance improvement [6]. The firm has developed AI-enabled solutions and platforms such as KPMG Velocity, which maps business transformation and embeds smart AI agents [24]. KPMG Digital Finance is a fully managed platform designed to modernize finance functions [22]. The firm maintains market-leading alliances with technology vendors including Microsoft, Google Cloud, SAP, Oracle, and ServiceNow [13]. KPMG also provides cybersecurity services, including incident response and recovery based on NIST frameworks [19].

07. Recent News

KPMG announced the appointment of Gary Wingrove as Global Chairman and CEO, succeeding Bill Thomas [13]. In the United States, Tim Walsh was elected U.S. Chair and CEO, succeeding Paul Knopp [14]. The firm reported global revenues rising 5% to US$38.4 billion. KPMG has faced multiple regulatory fines for accounting fraud or deficiencies from the PCAOB and SEC between 2016 and 2025. A data breach was reported in January 2026 [28]. The firm was recognized as the 2025 ServiceNow Worldwide Transformation Partner of the Year.

08. Dependencies

Fourth parties this vendor relies on - subprocessors, infrastructure, and integrations surfaced from public sources.

• Microsoft Corporation

  microsoft.com

  IntegrationSource →

• Google Cloud Platform

  cloud.google.com

  IntegrationSource →

• SAP

  IntegrationSource →

• Oracle

  IntegrationSource →

09. Competitors

Vendors offering a similar product or service - for side-by-side comparison, not a ranking.

• Deloitte

  Major competitor in professional services.

  Vet this vendor →

• PwC

  Major competitor in professional services.

  Vet this vendor →

• EY

  Major competitor in professional services.

  Vet this vendor →

• Crowe

  Competitor in public accounting and consulting.

  Vet this vendor →

11. Vendor response

Content in this section is vendor-supplied and does not alter Vendorisk.ai's risk tier or evaluation.

12. Assessment history

1. 8/19/2026, 10:53:32 PM · Elevated · 74

Risk delta is hidden until two stored snapshots can be compared.

13. Targeted questions

14. Sources

1. [1] KPMG is a global organization of independent services firms providing Audit, Tax and Advisory services. About KPMG
2. [2] KPMG firms operate in 138 countries and territories with more than 276,000 partners and employees. About KPMG
3. [3] KPMG International Limited is a private English company limited by guarantee. KPMG
4. [4] KPMG was formed through the merger of Peat Marwick International and Klynveld Main Goerdeler in 1987. KPMG
5. [5] KPMG reported global revenues of US$38.4 billion in 2024. KPMG
6. [6] KPMG offers audit, tax, legal advisory, risk management, and business performance improvement services. About
7. [7] KPMG has developed AI-enabled solutions and platforms such as KPMG Velocity. KPMG Velocity
8. [8] KPMG Digital Finance is a fully managed platform designed to modernize finance functions. Generative AI - KPMG International
9. KPMG maintains alliances with Microsoft, Google Cloud, SAP, Oracle, and ServiceNow.