Insight Search Search Submit Sort by: Relevance Date Search Sort by RelevanceDate Order AscDesc Flash Report July 31, 2023 SEC Cybersecurity Disclosure Enhancements: Efforts to Boost Investor Confidence On 26 July 2023, the U.S. Securities and Exchange Commission (SEC) adopted amendments1 to its rules on cybersecurity risk management, strategy, governance and incident reporting by public companies subject to the reporting requirements of the Securities Exchange Act of 1934. The SEC’s view is that cybersecurity threats and incidents pose an ongoing risk to public companies, investors and market… Whitepaper July 12, 2021 Top 10 pitfalls of an IAM programme In spite of over 20 years of experience as an industry, Identity & Access Management (IAM) programmes continue to struggle — and with good reason. There is a lot that can go wrong with an IAM programme. Lack of funding, treating IAM like a project and not a programme, not having business buy-in, and trying to overly customise packaged software are all examples of significant challenges that… Newsletter March 25, 2020 Going Digital: The Future Auditor in Action For several years, Protiviti has described the “future auditor” as a chief audit executive (CAE) who takes definitive steps toward making The Institute of Internal Auditors’ vision of “an independent, objective assurance and consulting activity that adds value and improves an organisation’s operations” a reality. Several issues of The Bulletin have been devoted to describing various aspects of… Newsletter February 12, 2021 Implementing Operational Resilience Across the Organisation: An Essential Checklist Like any enterprisewide organisational change, implementing an operational resilience programme across an organisation requires a careful and collaborative effort to be successful. Whether implementation has been in the works for several years or is just beginning, turning the resilience programme from concept to reality is hard work. Except for the most dynamic and change-oriented organisations… Whitepaper September 21, 2020 Driving Operational Resilience From the C-Suite The actions and decisions of C-suite leaders are typically driven by strategies designed to guide businesses toward growth and success. These plans invariably contain many assumptions. One is the expectation that their organisations will be able to deliver goods and services to customers even under stressful conditions – an expectation of resilience that is sometimes ill-conceived and unsupported. Podcast March 31, 2020 Podcast- GRC Technology Perspectives Around the Globe - United Kingdom This is a series of podcasts on GRC programmes and technologies, obtaining perspectives from Protiviti leaders and subject-matter experts around the world on GRC drivers, innovations and challenges in their markets. This episode features conversation with Protiviti Managing Director Scott Bolderson and Associate Director Nicolas Perna. Scott is a leader within our business performance… Whitepaper September 16, 2020 The Road to Resiliency – Building a Robust Audit Plan for Operational Resilience Executive Summary The financial services industry has long relied on internal audit functions to assess and challenge the effectiveness of various programmes designed to protect and build organisational value. These programmes have included disaster recovery, business continuity, risk management, cybersecurity, and many others designed to help institutions recover from an event. The pressure… Whitepaper September 24, 2020 Exploring the Next Generation of Internal Auditing Within the Energy & Utilities Industry Mammoth waves of disruption are both buffeting and igniting organisations in their drive to change and stay relevant, and internal audit functions have seen the effects. It’s now time for internal audit leaders and their teams to take the initiative, stand up and ride their own wave of transformation and innovation. For more information, read our full survey report, Exploring the Next Generation… Flash Report April 28, 2022 Protecting your organisation from insider threats in a changing world Cybersecurity threats are growing exponentially as companies introduce an increasing number of Internet of Things (IoT) devices into operations and collect and store an ever- escalating amount of data. This technology and data sprawl is providing bad actors with more entry points into networks and systems. Too often, organisations have failed to make commensurate investments in data protection,… Whitepaper December 12, 2022 The evolving complexity of financial institution compliance: Top compliance priorities for 2023 Ask an executive from most any company anywhere across the globe what her biggest concern is for 2023 and she is likely to say “uncertainty” — notably, uncertainty about how geopolitical tensions, national elections and their aftermath, and economic conditions will affect the business as well as uncertainty about the company’s ability to adapt to the post- COVID work environment. Load More