Results for Search Submit Filter by: Advanced Filter All results Solutions Industry People Client Story Insights/Blogs Filter Blog Is Software Defined Perimeter the Best Method for Adopting a Zero Trust Strategy? Enterprise networks have been described as being like an egg, with a hard shell on the outside and soft on the inside. There have been heated dialogues between security professionals that treat the "insiders" as trusted and anything outside the network as a threat. However, this thought process began to change after the introduction of Zero… Blog Penetration Testers Tool Kit: A Transition from PowerShell to C# Attackers are continuously evolving their tool sets to keep ahead of defenders. In this blog, we highlight and discuss one major transition occurring in the attack and penetration space: the move from PowerShell to C# as an attack framework. The History PowerShell has been an asset to penetration testers for years. Unrestricted access to… Blog As Organizations Transform, the Role of the Project Manager Is Changing Project management as a function is undergoing rapid and profound transformation, and organizations are reconsidering the value project managers (PMs) can bring to their programs and projects. Over the course of a series of blogs, Protiviti will explore the evolution of the project management function from an administrative role to a transformation agent, along with the impacts to organizations… Blog Hidden Vulnerability: GDPR Data in Unexpected Places The European Union (EU) General Data Protection Regulation (GDPR) — one of the most comprehensive data privacy regulations in history is effective as of May 25, 2018. This regulation imposes strict requirements on how the personal data of EU subjects is collected, used and stored — both within the EU and by foreign companies doing business within the EU, including small web-based businesses that… Blog A Look at Full Meltdown: A Vulnerability Created by Patching Spectre and Meltdown The introduction of the Spectre and Meltdown vulnerabilities produced patches from big-name vendors such as Intel, AMD and Microsoft. These vulnerabilities allowed memory leakage due to the exploitation of the CPU’s speculative execution. A Swedish security researcher, Ulf Frisk, discovered that the January and February Microsoft Security patches mitigated Meltdown but produced a new threat: The… Blog Top Takeaways from the Women in Cybersecurity Conference ** Today’s post is provided by guest blogger Veronica, an Experienced Consultant in our Technology Consulting practice ** Last week, I was fortunate enough to attend the Women in Cybersecurity Conference (WiCyS) in Chicago! The event is a two day conference packed with information sessions, guest speakers and opportunities to network. The conference was hugely impactful in… Blog Part 3: Lease Accounting: What’s Trending? A Report from GRC 2018 and Financials 2018 The 2018 GRC and Finance SAP Insider Conferences took place in mid-February in Las Vegas. Our SAP teams spent time attending conference sessions, and their observations on what’s trending across the industry are compiled here in a five-part series. In this part, we will be discussing the new Lease Accounting standards and how Nakisa, an SAP solution extension can help automate this process going… Blog Part 4: Change Management: What’s Trending? A Report from GRC 2018 and Financials 2018 The 2018 GRC and Finance SAP Insider Conferences took place in mid-February in Las Vegas. Our SAP teams spent time attending conference sessions, and their observations on what’s trending across the industry are compiled here in a five-part series. In this part we take a closer look at Change Management. During the conference, we had the opportunity to deliver a session around S/4HANA® Change… Blog Part 5: GRC AC/PC 12: What’s Trending? A Report from GRC 2018 and Financials 2018 The 2018 GRC and Finance SAP Insider Conferences took place in mid-February in Las Vegas. Our SAP teams spent time attending conference sessions, and their observations on what’s trending across the industry are compiled here in a five-part series. During the conference, SAP® announced a major update to the Governance, Risk and Compliance (GRC) suite of products, with Access Control (AC), Process… Blog Serverless Cloud Architecture vs. Traditional Web Applications: A Difference in Risks Serverless application architectures, sometimes referred to as Function as a Service (FaaS), are rapidly growing in popularity. The attraction of an application that scales dynamically with load, charges only for actual usage and avoids the challenges of server management is undeniable. FaaS reduces some security risks but it can also increase others. Below are several examples to consider while… Load More