Insight Search Search Submit Sort by: Relevance Date Search Sort by RelevanceDate Order AscDesc Whitepaper April 21, 2022 PCI Security Standards Council publishes updated data security standard DSS 4.0 addresses rapidly evolving threat environment and provides flexibility for how organisations can achieve compliance On March 31, 2022, the PCI Security Standards Council (PCI SSC) released a new version of the PCI Data Security Standard (DSS). PCI DSS 4.0 is the first revision to the DSS in almost four years. It represents a major update to the standard as the payments industry faces an… Blogs April 6, 2023 3 Steps to Understanding IAM Challenges in Securing the DevSecOps Ecosystem DevSecOps is an organisational software engineering culture and practice that aims at unifying software development (Dev), application security (Sec), and operations (Ops). The main characteristic of DevSecOps is to monitor and apply security at all phases of the software lifecycle: Planning, development, integration, delivery, deployment and production. Looking at DevSecOps through an IT… Podcast September 20, 2022 Risky Women Podcast | Risk & Compliance at the Speed of Modern Business: Lynn Haaland Christine Halvorsen, Protiviti's U.S. Risk and Compliance lead, talks with Lynn Haaland, Chief Compliance, Ethics & Privacy Officer at Zoom Video Communications about the Risk and Compliance at the speed of modern business. Halvorsen and Haaland discuss how to establish a successful framework for managing privacy and compliance in a technology company and how to balance top privacy issues at… Whitepaper November 26, 2024 Network and information security directive 2 (NIS2) The European Commission has revised the NIS Directive, expanding its scope to include numerous new sectors. This revision aims to enhance cybersecurity across the entire European region by unifying national laws with common minimum requirements. For many companies located within European Union (EU) Member States, as well as non-EU organisations that provide services within the EU, NIS2 represents… Whitepaper October 13, 2021 Security, Data, Analytics and ESG Top 2021 Priorities for TMT Finance Leaders Corporate finance teams in technology, media and telecommunications (TMT) are embracing new operating models, strategies and technologies in response to the escalated business risk and regulatory environment, as well as shifting expectations of both internal and external customers. Across the industry, teams continue to increase their focus on top priorities identified at the height of the… Podcast May 29, 2024 Podcast ǀ Legal Perspectives: Top Risks Trends for 2024 and 2034 In this special edition of Protiviti Legal Perspectives, our panelists—Jamy J. Sullivan, JD, Executive Director of Robert Half Legal Talent Solutions; Nicholas You, Associate Director of Legal Consulting at Protiviti; and Mark Carson, Managing Director at Protiviti—join Protiviti podcast host Chad Volkert to delve into the most pressing legal risks for in-house legal departments. This discussion… Newsletter September 28, 2022 Identifying and managing the critical risks of third-party providers “Outsourcing and other third-party relationships can bring multiple benefits to FIs, including: enhanced operational resilience; faster and more tailored financial products and services; cost reduction; greater innovation; and improved internal processes. However, outsourcing and third-party relationships can give rise to new or different risks to FIs and potentially to financial stability that… Blogs June 4, 2021 Control Cloud to Manage Security and Risk Ensuring IT risks are managed, and compliance requirements are met has only intensified with the recent rapid growth in adoption of cloud services. Deployment of production workloads, migration of regulated systems and increasing storage of large volumes of data in the cloud has driven the need for security and controls to be deployed across customer cloud environments. Whitepaper February 21, 2023 ISO 27001: 2022 - Key Changes and Approaches to Transition This article will address the changes and updates to ISO 27001 standard published on October 25, 2022, and the approaches organizations can take to implement the changes introduced. There have been significant advancements in technology, as well as an increase in the complexity of security threats since the last iteration of ISO 27001 was published on September 25, 2013. The changes introduced in… Blogs June 3, 2021 Leverage the Cloud to Modernise Technology and Enable Business Goals In today’s rapidly evolving business world, the lines between technology and business have blurred. Organisations need to modernise and transform their technology in order to successfully compete. CIOs play a critical role in transforming the world of work using automation and technology – but they can’t do it alone. Collaboration among the C-suite is critical. In this blog series, Protiviti… Load More