Insight Search Search Submit Sort by: Relevance Date Search Sort by RelevanceDate Order AscDesc Video September 3, 2020 Cyber Risk Quantification FAQs Cyber risk quantification (CRQ) uses industry leading and highly vetted probabilistic models to more accurately describe the cyber security and technology-based risks facing an organisation. Tune in to Protiviti's subject matter experts answer 15 frequently asked questions about CRQ. Whitepaper October 6, 2020 Back to Basics for Private Equity – Four Longer-Term Areas That Warrant Renewed Focus Post-COVID-19 October 2020 As the global economy slowly emerges from COVID-19 lockdowns, it is important for companies to focus once again on some of the longer-term challenges that may have taken a backseat in recent months. Private equity managers can partner with their portfolio companies to ensure these areas are receiving appropriate attention. Recently, we have published a number of… Whitepaper October 5, 2020 Private Equity and Cybersecurity – Gaining a Holistic View An emerging trend among private equity firms is their growing attention to the remediation, monitoring and reporting of cybersecurity capabilities of the companies in their portfolios. Historically, they have not fully appreciated the varying degrees of cybersecurity risk relative to a company’s specific industry. And understandably, the emphasis on investing in promising businesses and improving… Whitepaper June 1, 2022 How can an enterprise use access management to establish a Zero Trust environment? A hybrid RBAC, ABAC and PBAC framework is the best practice approach A strong access management programme is foundational to establishing a Zero Trust environment by using contextual information to continuously validate that users are who they say they are and by restricting user access to necessary resources only. Within the Zero Trust framework, identity governance and risk-based… Newsletter May 10, 2022 SIFMA Quantum Dawn VI A Decade of Testing and ResilienceOver the past 10 years, the Securities Industry and Financial Markets Association (SIFMA) has coordinated a series of industrywide resilience exercises known as Quantum Dawn. These exercises provide a forum for financial firms, regulatory bodies, central banks, law enforcement, government agencies, trade associations and information-sharing organisations to… Whitepaper February 21, 2023 ISO 27001: 2022 - Key Changes and Approaches to Transition This article will address the changes and updates to ISO 27001 standard published on October 25, 2022, and the approaches organisations can take to implement the changes introduced. There have been significant advancements in technology, as well as an increase in the complexity of security threats since the last iteration of ISO 27001 was published on September 25, 2013. The changes introduced in… Newsletter July 4, 2019 Informationssicherheit im Gesundheitswesen Protiviti-Experte im Deutschlandfunk: Sind vertrauliche Informationen von Patienten sicher? Informationssicherheit ist geschäftskritisch für alle Ärzte und Kliniken. Der Umgang mit entsprechenden Risiken muss im Rahmen eines Informationssicherheitsmanagementsystems (ISMS) erfolgen, indem Vorstand, Geschäftsführung, Leitungsebene und Mitarbeiter einbezogen sind. Daraus resultierende Maßnahmen… Whitepaper October 11, 2017 Social Engineering Ihre Herausforderung Technisch und organisatorisch ist Ihre IT auf dem neuesten Stand. Hackerangriffe über das Netzwerk wehren Sie erfolgreich ab. Allerdings erhalten Ihre Mitarbeiter immer öfter gefälschte E-Mails und dubiose Anrufe mit Zahlungsaufforderungen oder Mailanhänge sollen geöffnet und installiert werden. Flash Report May 14, 2021 President Biden executive order to strengthen U.S. Cybersecurity will impact federal agencies and public and private sector organisations On May 12, President Joe Biden issued the Executive Order on Improving the Nation’s Cybersecurity. This executive order (EO) is the most recent action by the administration to strengthen U.S. national cyber defenses and address cybersecurity threats and attacks that continue to grow in magnitude, impact and frequency. It is intended to protect networks in the federal, public and private… Flash Report November 3, 2023 Are SEC Charges Against SolarWinds and Its CISO Signaling a New Era of Personal Accountability? In this Flash Report, we summarize the SEC’s allegations against SolarWinds and offer nine points for executives and functional leaders with SEC registrants to consider regarding their own accountability and responsibility for public reporting. Load More