Insight Search Search Submit Sort by: Relevance Date Search Sort by RelevanceDate Order AscDesc Newsletter October 9, 2024 Board Risk Reporting in Disruptive Times Risk reporting to the board may not be fit for purpose in these uncertain times. Directors are trending toward expecting more dialogue, engagement and forward-looking insights based on relevant data and information. A principled approach would help.Boards and their companies face a constant and seemingly unending state of flux in the marketplace. Emergence of the unexpected is the norm. For… Whitepaper April 22, 2020 Gaining Shelter from the Storm – A Finance Labor Model Tailor-Made to Manage Crises What happens to your finance organisation – specifically, the critical processes, activities, reporting and deadlines for which you’re responsible – when your team is suddenly unavailable, unable to work in the office or remotely? Such situations have unfolded with blinding speed during the COVID-19 global pandemic. However, they can just as easily result from other potential emergencies that… Newsletter March 25, 2020 Going Digital: The Future Auditor in Action For several years, Protiviti has described the “future auditor” as a chief audit executive (CAE) who takes definitive steps toward making The Institute of Internal Auditors’ vision of “an independent, objective assurance and consulting activity that adds value and improves an organisation’s operations” a reality. Several issues of The Bulletin have been devoted to describing various… Podcast January 16, 2025 Risky Women Podcast | Driving Tech & Innovation in Risk Management In this episode, Jo Shoppee, head of operational risk, technology, at ANZ Bank, shares her unexpected journey into risk management, from working as a teller at ANZ to becoming a technology risk specialist. Jo discusses the challenges of balancing career and family, advocating for part-time roles for senior leaders, and emphasises the importance of compassion and understanding in risk management,… Flash Report March 3, 2021 Virginia Becomes the Second State to Enact Consumer Privacy Law The Commonwealth of Virginia passed the Consumer Data Protection Act (CDPA) into law on March 2, 2021, following overwhelming bipartisan support for a state consumer privacy law. The November 2020 election results provided the much needed impetus to strengthen consumer privacy for the Commonwealth of Virginia. State officials wasted no time in introducing the privacy bill. Now that the… Flash Report July 31, 2023 SEC Cybersecurity Disclosure Enhancements: Efforts to Boost Investor Confidence On 26 July 2023, the U.S. Securities and Exchange Commission (SEC) adopted amendments1 to its rules on cybersecurity risk management, strategy, governance and incident reporting by public companies subject to the reporting requirements of the Securities Exchange Act of 1934. The SEC’s view is that cybersecurity threats and incidents pose an ongoing risk to public companies, investors and market… Whitepaper July 12, 2021 Top 10 pitfalls of an IAM programme In spite of over 20 years of experience as an industry, Identity & Access Management (IAM) programmes continue to struggle — and with good reason. There is a lot that can go wrong with an IAM programme. Lack of funding, treating IAM like a project and not a programme, not having business buy-in, and trying to overly customise packaged software are all examples of significant challenges that… Newsletter February 12, 2021 Implementing Operational Resilience Across the Organisation: An Essential Checklist Like any enterprisewide organisational change, implementing an operational resilience programme across an organisation requires a careful and collaborative effort to be successful. Whether implementation has been in the works for several years or is just beginning, turning the resilience programme from concept to reality is hard work. Except for the most dynamic and change-… Newsletter November 6, 2019 LA SFIDA DELLA QUANTIFICAZIONE DEL RISCHIO CYBER Cambiano scenari e modelli, “incursori” e attori della protezione e non sempre l’approccio a silos basato sui controlli (regolamentarie non) e sulla sicurezza operativa riesce a precedere nuovi fenomeni. Se il cyber risk è fra le prime preoccupazioni per le aziende europee (italiane comprese) come indica il report “Regional Risk for Doing Business 2019” diffuso dal World Economic… Whitepaper September 21, 2020 Driving Operational Resilience From the C-Suite The actions and decisions of C-suite leaders are typically driven by strategies designed to guide businesses toward growth and success. These plans invariably contain many assumptions. One is the expectation that their organisations will be able to deliver goods and services to customers even under stressful conditions – an expectation of resilience that is sometimes ill-conceived and… Load More