Insight Search

Sort by:
  • Newsletter

    October 9, 2024
    Risk reporting to the board may not be fit for purpose in these uncertain times. Directors are trending toward expecting more dialogue, engagement and forward-looking insights based on relevant data and information. A principled approach would help.Boards and their companies face a constant and seemingly unending state of flux in the marketplace. Emergence of the unexpected is the norm. For…
  • Whitepaper

    April 22, 2020
    What happens to your finance organisation – specifically, the critical processes, activities, reporting and deadlines for which you’re responsible – when your team is suddenly unavailable, unable to work in the office or remotely? Such situations have unfolded with blinding speed during the COVID-19 global pandemic. However, they can just as easily result from other potential emergencies that…
  • Newsletter

    March 25, 2020
    For several years, Protiviti has described the “future auditor” as a chief audit executive (CAE) who takes definitive steps toward making The Institute of Internal Auditors’ vision of “an independent, objective assurance and consulting activity that adds value and improves an organisation’s operations” a reality. Several issues of The Bulletin have been devoted to describing various…
  • Podcast

    January 16, 2025
    In this episode, Jo Shoppee, head of operational risk, technology, at ANZ Bank, shares her unexpected journey into risk management, from working as a teller at ANZ to becoming a technology risk specialist. Jo discusses the challenges of balancing career and family, advocating for part-time roles for senior leaders, and emphasises the importance of compassion and understanding in risk management,…
  • Flash Report

    March 3, 2021
    The Commonwealth of Virginia passed the Consumer Data Protection Act (CDPA) into law on March 2, 2021, following overwhelming bipartisan support for a state consumer privacy law. The November 2020 election results provided the much needed impetus to strengthen consumer privacy for the Commonwealth of Virginia. State officials wasted no time in introducing the privacy bill. Now that the…
  • Flash Report

    July 31, 2023
    On 26 July 2023, the U.S. Securities and Exchange Commission (SEC) adopted amendments1 to its rules on cybersecurity risk management, strategy, governance and incident reporting by public companies subject to the reporting requirements of the Securities Exchange Act of 1934. The SEC’s view is that cybersecurity threats and incidents pose an ongoing risk to public companies, investors and market…
  • Whitepaper

    July 12, 2021
    In spite of over 20 years of experience as an industry, Identity & Access Management (IAM) programmes continue to struggle — and with good reason. There is a lot that can go wrong with an IAM programme. Lack of funding, treating IAM like a project and not a programme, not having business buy-in, and trying to overly customise packaged software are all examples of significant challenges that…
  • Newsletter

    February 12, 2021
    Like any enterprisewide organisational change, implementing an operational resilience programme across an organisation requires a careful and collaborative effort to be successful. Whether implementation has been in the works for several years or is just beginning, turning the resilience programme from concept to reality is hard work. Except for the most dynamic and change-…
  • Newsletter

    November 6, 2019
    Cambiano scenari e modelli, “incursori” e attori della protezione e non sempre l’approccio a silos basato sui controlli (regolamentarie non) e sulla sicurezza operativa riesce a precedere nuovi fenomeni. Se il cyber risk è fra le prime preoccupazioni per le aziende europee (italiane comprese) come indica il report “Regional Risk for Doing Business 2019” diffuso dal World Economic…
  • Whitepaper

    September 21, 2020
    The actions and decisions of C-suite leaders are typically driven by strategies designed to guide businesses toward growth and success. These plans invariably contain many assumptions. One is the expectation that their organisations will be able to deliver goods and services to customers even under stressful conditions – an expectation of resilience that is sometimes ill-conceived and…
Loading...