• Search in Protiviti.com

Blog library

A collection of Protiviti blogs. 

Blogs

July 25, 2025
4 min read

Mastering Copilot Feels Just Like Playing the Piano — Here’s Why

Microsoft Copilot is an incredible tool. Yet, in my work with clients (I’ve probably taught Copilot in some form to nearly 50 different companies), I continue to be surprised at how most organisations are overlooking this opportunity to transform their business processes. 
Read More
How to implement an aligned assurance model to build a collective view of risk
June 30, 2023
The big picture: Aligned assurance can create multiple benefits, including: Giving stakeholders a common view of risks and issues across the organisation Reducing repetitive, manual testing, which allows more focus on high-value activities By the numbers: In a recent Protiviti webinar on aligned assurance, only 14% of the audience members reported that collaboration across the three lines is “…
Metrics’ role in cyber transformation
June 30, 2023
We’ve all heard the saying, “what gets measured gets done,” meaning that regular measurement and reporting helps to keep organisations focused on the information that matters. But with so many data points available to measure security, it is difficult to know where to begin. Security practitioners must constantly question what data they collect and why. Only by providing relevant measures can we understand how…
A Guide to pen testing and red teaming: What to know now
June 19, 2023
Penetration testing and red teaming are essential cybersecurity practices that bolster an organisation’s security posture by uncovering vulnerabilities within their systems, networks, and people or business processes. These methodologies have distinct objectives, scopes, approaches and technologies employed.
ChatGPT disruption: AI’s evolving vision renews need for trusted, governed data
May 19, 2023
Access to artificial intelligence (AI) and the drive for adoption by organisations is more prevalent now than it’s ever been, yet many companies are struggling with how to manage data and the overall process. As companies open this “pandora’s box” of new capabilities, they must be prepared to manage data inputs and outputs in secure ways or risk allowing their private data to be consumed in public AI models. Through…
Amie Pinder’s squiggly career: “I wanted to see inside the black box”
May 19, 2023
What’s it like to change professions and gain a variety of experience? Amie Pinder, director of technology resilience risk at the London Stock Exchange Group, started her career in audit, but realised the world of technology was waiting for her. She speaks to Simran Sadhra and Rhianne Williams from Protiviti’s iGROWW network about her journey.
Hyperbole, hype and hope? Trillions of reasons why the metaverse matters
May 15, 2023
Ever since Steven Spielberg put the metaverse on the mainstream map in 2018 with his science-fiction adventure film, Ready Player One, based on Ernest Cline's novel of the same name, there has been a slow but steady drumbeat of momentum building around the potential and possibilities of this brave, new, immersive world. Sure, the metaverse had been talked about long before 2018, but once Spielberg made a…
Well-being isn’t fluffy — we want positive pressure at work.
May 10, 2023
Modern business is often defined not only by change, myriad projects and increasing regulation but also by culture, employee experience and well-being. Somewhere in the middle is the sweet spot of positive performance. Julie Wacker, occupational psychologist at Robertson Cooper, spoke to Matt Duncan, a managing director at Protiviti, about finding the balance.
Creating a resilient cybersecurity strategy: The governance lifecycle approach
May 5, 2023
Cybersecurity governance should do more than manage cyber risk. Good cybersecurity governance creates efficiencies by clarifying the outcomes expected from its processes and establishing boundaries of responsibility among cybersecurity practitioners, frontline operational areas, senior leaders and board members. Recently, numerous crises have drawn senior leaders and board members down into cybersecurity’s…
COSO issues supplemental guidance on internal control over sustainability reporting – With examples
April 26, 2023
Last Thursday, the Committee of Sponsoring Organisations of the Treadway Commission (COSO) released interpretive guidance on how to effectively apply the 2013 Internal Control — Integrated Framework (ICIF) — which is currently applied to financial reporting — to sustainability reporting. The guidance results from a project approved by the COSO board a year ago with…
Enhancing cyber capabilities using a threat-driven strategy
April 21, 2023
Senior leaders focused on cybersecurity recognise there is considerable guidance, best practices, frameworks, regulations and varied opinions on how programmes should design defensive capabilities. In addition, depending on the day, the various pressures in the organisation’s macro-environment may be greater or lesser and invite different priorities for time, team and budget. Despite these various…
Loading...