• Search in Protiviti.com

Insight Search

Sort by:

  • Insights paper

    June 4, 2026
    Mythos Emphasises Why Continuous Hardening Is Critical
    Anthropic’s Mythos is changing the constraints cybersecurity defenders have come to rely on — and most organisations are not prepared for what comes next.

  • In Focus

    July 19, 2024
    SEC rebuked in SolarWinds decision. What does it mean?
    U.S. District Judge Paul Engelmayer has dismissed most of the charges made by the U.S. Securities and Exchange Commission (SEC) against software company and 2020 cyberattack victim SolarWinds and its chief information security officer (CISO), Tim Brown. In its original lawsuit, filed in October 2023, the SEC alleged that SolarWinds had defrauded investors by concealing security weaknesses in its…

  • Podcast

    March 13, 2024
    Podcast ǀ Decoding CMMC Compliance for Government Contractor Data
    In this special edition of the Protiviti Legal Perspectives podcast series, we delve into the complexities of new data protection and cybersecurity government regulations in the defense industry with Alex Alexander W. Major, Partner, McCarter & English and Perry Keating, President of Protiviti Government Services. The Cybersecurity Maturity Model Certification (CMMC) was recently promulgated…

  • Whitepaper

    November 18, 2025
    Setting the 2026 Audit Committee Agenda
    As organisations grapple with rapid technological change, evolving regulations, and increasing risks in areas like AI, cybersecurity, and data privacy, audit committees are being called on to broaden their view of enterprise risk and governance. With oversight responsibilities growing in both scope and complexity, this whitepaper reveals the nine critical priorities that will define effective…

  • In Focus

    April 25, 2025
    Navigating the DOJ final rule on bulk sensitive personal data: What does it mean for your business?
    Multinational organisations must now comply with a sweeping new U.S. Department of Justice rule that restricts the transfer of bulk sensitive personal data to foreign adversaries. The rule, established under Executive Order 14117, went into effect earlier this month and introduces prohibitions and controls on data transactions involving countries of concern such as China, Russia, Iran, North…

  • Whitepaper

    June 1, 2022
    How can an enterprise use access management to establish a Zero Trust environment?
    A hybrid RBAC, ABAC and PBAC framework is the best practice approach A strong access management programme is foundational to establishing a Zero Trust environment by using contextual information to continuously validate that users are who they say they are and by restricting user access to necessary resources only. Within the Zero Trust framework, identity governance and risk-based…

  • Whitepaper

    July 13, 2021
    How to implement an effective identity management strategy
    Identity management doesn’t happen overnight; there’s no “Easy” button to press, or magic snap-of-the-fingers instant fix. In fact, identity management has transformed into something far more complex than password authentication and simple security measures. It’s important to understand that jumping into a new technology instantaneously isn’t necessarily the right first step to ensuring a…

  • Podcast

    September 22, 2025
    FPS Podcast | CMMC Rule is Out - What Contractors Must Know With DOD Contracts
    On September 10th, 2025 the "CMMC Final Rule" was published in CFR48. After about seven years of starts and stops, determining Level classifications, the number of controls and compliance needed, CMMC certification is now set to be in certain DOD contracts starting November 10th. Cost of compliance has varied greatly, but when dealing with FCI and CUI data, this certification will protect that…

  • Whitepaper

    July 12, 2021
    Top 10 pitfalls of an IAM programme
    In spite of over 20 years of experience as an industry, Identity & Access Management (IAM) programmes continue to struggle — and with good reason. There is a lot that can go wrong with an IAM programme. Lack of funding, treating IAM like a project and not a programme, not having business buy-in, and trying to overly customise packaged software are all examples of significant challenges that…

  • Video

    September 3, 2020
    Cyber Risk Quantification FAQs
    Cyber risk quantification (CRQ) uses industry leading and highly vetted probabilistic models to more accurately describe the cyber security and technology-based risks facing an organisation. Tune in to Protiviti's subject matter experts answer 15 frequently asked questions about CRQ.
Loading...