Results for

  • Blog
    October 25, 2018
    As companies around the world adapt to comply with the EU’s General Data Protection Regulation (GDPR), legislators in the United States are under pressure from constituents to pass even more consumer privacy protection. That pressure increases with every major data privacy breach and has reached a point where the heads of major social media organizations were recently called to testify before the…
  • Blog
    October 26, 2018
    As technology firms wake to the reality of increasing regulation, the question arises: “How do we prepare?” Protiviti has published a four-part series on key considerations for technology industry board members and executives interested in what the responsible technology firm of the future might look like. Our series focuses on the rapidly changing landscape that is altering the conversation at…
  • Blog
    October 29, 2018
    Baseball great Yogi Berra is fondly remembered for famously miscalculating that, “Baseball is 90 percent mental. The other half is physical.” Unfortunately, making similar miscalculations on data in the business world is neither funny nor fondly remembered – such errors can damage reputations and create conflicts with customers, investors and regulators. As we increase our reliance on data for…
  • Blog
    October 30, 2018
    At a time when cyber/information security risk looms large on the minds of directors and executives, quantitative risk assessments are gaining traction as a way to understand and measure that risk. While the need to measure this risk grows, most organizations are still at a low level of maturity regarding the proper use of risk terminology and risk modeling. Getting support and, more importantly…
  • Blog
    March 15, 2018
    Last week, an important Securities and Exchange Commission (SEC) Interpretive Guidance, which we analyzed in a Protiviti Flash Report, set the bar for corporate cybersecurity risk assessments. One particular aspect of the new guidance relating to how companies conduct risk assessments and report on cybersecurity risks is the need to understand “the range and magnitude of the financial impacts” of…
  • Blog
    March 16, 2018
    Public company accounting departments closing the books on 2017 may find it difficult to take a breath. Fresh from filing their 10-K and finalizing their preparation for the FASB’s new revenue recognition standard (ASC 606) effective in 2018, it is time to prepare for a new lease accounting standard (ASC 842). The new standard goes into effect for fiscal years beginning after December 15, 2018…
  • Blog
    March 21, 2018
    Internal auditors often talk about the “tone at the top” — the idea that corporate culture begins with the example set by senior management. But while conduct at the top is where it all starts, it does not end there. An increasing number of companies are beginning to realize that if the tone in the middle is not aligned with the tone at the top, there could be serious risks lurking within the…
  • Blog
    March 22, 2018
    As a crucial part of capital planning, Pre-Provision Net Revenue (PPNR) modeling has been under the spotlight for careful review and scrutiny from the Federal Reserve Board (FRB) since 2012 for the annual Comprehensive Capital Assessment and Review (CCAR) submission. Although bank holding companies (BHCs) have become better equipped at utilizing PPNR models for capital planning purposes in recent…
  • Blog
    March 26, 2018
    In an earlier post, I discussed corporate culture as one of the items Protiviti recommends audit committees focus on as they shape their agendas for 2018. I want to follow up with some suggestions on how organizations might include a culture assessment in their plans for the year. There are several different ways to approach a culture assessment. The internal audit functions of some…
  • Blog
    March 29, 2018
    As internal audit practitioners seek to evolve and transform their functions, to keep pace with the transformation occurring within their organizations, internal auditors are increasingly assessing and consulting on a wide variety of risks, including digitalization, cybersecurity, enterprise risk management, fraud risk, vendor risk and corporate culture. These new areas now dominate the global…
Loading...