• Search in Protiviti.com

Data Protection

Protect your Data with confidence

A “check-the-box” approach to compliance will not protect your reputation. Proactive programmes, measures and policies will.

Protiviti helps you confidently maintain and protect your data, wherever it may reside. We help you understand the impacts of data security.

Confidently maintain and protect your data, wherever it lives. Protiviti determines the impacts of data security regulatory and contractual requirements, assesses your alignment and capability to meet those expectations, remediates key processes and technologies, and helps implement changes to achieve and maintain compliance—all while improving your data security posture.

Our approach focuses on three core concepts: identifying and securing your most valuable assets; continuous monitoring; and a structured, fast response to a breach.

Regardless of where your data resides, Protiviti helps you maintain and protect it, and to understand the impacts

Our Data Protection services

Pro Briefcase

Data identification and security

Organisations want to know what data matters most. Protiviti’s data protection methodology identifies critical data, implements measures to protect it, and establishes a programme to sustain and maintain data security as data evolves.

 
Pro Building office

Data security compliance

No matter the compliance framework (PCI , HITRUST, HIPAA, SOC 2, SWIFT , ISO, NYDFS , FedRAMP, FISMA, CMMC ) we scope your environment, address compliance gaps, and implement policies, procedures and technical solutions to meet any regulatory and contractual obligations.

 
Pro Document Consent

Third-party risk management

Organisations increasingly rely on third parties but struggle to balance the level of investment in securing partners. The most effective TPRM programme are repeatable, quantifiable, and manage more risk per dollar spent.

 
Pro Document Files

Secure architecture

Securely maintaining technologies, systems, and networks is a challenge most companies face. Whether aligning with compliance requirements or adopting zero trust architecture , we bring skilled expertise to the design and implementation of your security.

 
Pro Document Stack

Cyber defence and response

No matter how much you invest in security, incidents happen. Protiviti offers full-service incident response teams that optimise your environment to address dynamic data threats.

 
Pro Legal Briefcase

Cyber resilience

Ensure your data is available when you need it. Knowing where vulnerabilities lie will help you recover more quickly and minimise customer harm. Protiviti helps you detect, prevent, respond to, recover and learn from operational disruptions.

 

The Protiviti advantage

Protiviti provides expert-level data security consulting solutions to FORTUNE 1000® and FORTUNE Global 500® companies across the world. We provide our clients with data security expertise that spans numerous regulations across all industries.

Helping organisations comply with data security requirements is part of our DNA.

PCI : Protiviti is one of the largest and most experienced PCI QSA firms (since 2002) and a two-time member of the PCI SSC’s Global Executive Assessor Roundtable. We frequently present at the Council’s community meetings and partner with global merchants and service providers to aid our clients on their journeys to achieve and maintain PCI certification.

CMMC : Protiviti Government Services is a CMMC-AB Registered Provider Organisation™ (RPO) providing accredited consulting services around the Cybersecurity Maturity Model Certification (CMMC) programme.

HITRUST and SWIFT : We are a HITRUST CSF Assessor and SWIFT CSP and partner with clients seeking to certify compliance.

Notre équipe

Bernard Drui
Bernard Drui
Bernard Drui est Managing Director et Country Market Leader chez Protiviti France. Il a plus de 25 ans d'expérience dans le monde des affaires, travaillant avec une variété d'organisations pour améliorer leur performance par la gestion des risques, l'efficacité ...
En savoir plus
Anis Hammami
Anis Hammami
Anis est Associate Director chez Protiviti France, expérimenté dans le domaine de la technologie, la cybersécurité et de la Privacy. Anis a plus de 14 ans d'expérience au cours desquels il a dirigé plusieurs projets de cybersécurité et de Privacy dans plusieurs domaines ...
En savoir plus
Lyes Oussadit
Lyes Oussadit
Lyes est Senior Manager chez Protiviti France, expérimenté dans le domaine de l’audit informatique, la gestion des risques IT et la sécurité de l’information. Il possède plus de 10 ans d'expérience au cours desquels il a dirigé plusieurs projets d’audit IT (externes et ...
En savoir plus

Cyber Risk Quantification Empowers Multichannel Retail Giant to Improve Risk Management

Protiviti utilised cyber risk quantification to enhance the risk management process of a top 10 North American multichannel retailer.

How data sovereignty and data localisation impact your privacy programmes

The concepts of data sovereignty and data localisation stem from a desire to keep data within a country’s borders for greater control. While the broad strokes of various privacy laws may be consistent across jurisdictions, governments will dictate the collection, storage and interpretation of their citizens’ data through constantly evolving privacy regulations.
Read more

ISO 27001: 2022 - Key Changes and Approaches to Transition

This article will address the changes and updates to ISO 27001 standard published on October 25, 2022, and the approaches organisations can take to implement the changes introduced. There have been significant advancements in technology, as well as an increase in the complexity of security threats since the last iteration of ISO 27001 was published on September 25, 2013.
Read more

NIST Releases Version 2.0 of Its Cybersecurity Framework (CSF): What This Means for Your Organisation

With version 2.0 of the CSF, NIST has updated the framework to expand its core guidance and has developed resources that will help users get the most out of the new iteration of the CSF. NIST CSF 2.0 has an expanded scope to help organisations of all sizes and sectors to manage and reduce their cybersecurity risks.
Read more
Loading...