Data Protection

Protect your Data with confidence

A “check-the-box” approach to compliance will not protect your reputation. Proactive programmes, measures and policies will.

Protiviti helps you confidently maintain and protect your data, wherever it may reside. We help you understand the impacts of data security.

Confidently maintain and protect your data, wherever it lives. Protiviti determines the impacts of data security regulatory and contractual requirements, assesses your alignment and capability to meet those expectations, remediates key processes and technologies, and helps implement changes to achieve and maintain compliance—all while improving your data security posture.

Our approach focuses on three core concepts: identifying and securing your most valuable assets; continuous monitoring; and a structured, fast response to a breach.

Regardless of where your data resides, Protiviti helps you maintain and protect it, and to understand the impacts

Our Data Protection services

Pro Briefcase

Data identification and security

Organisations want to know what data matters most. Protiviti’s data protection methodology identifies critical data, implements measures to protect it, and establishes a programme to sustain and maintain data security as data evolves.

Pro Building office

Data security compliance

No matter the compliance framework (PCI , HITRUST, HIPAA, SOC 2, SWIFT , ISO, NYDFS , FedRAMP, FISMA, CMMC ) we scope your environment, address compliance gaps, and implement policies, procedures and technical solutions to meet any regulatory and contractual obligations.

Pro Document Files

Secure architecture

Securely maintaining technologies, systems, and networks is a challenge most companies face. Whether aligning with compliance requirements or adopting zero trust architecture , we bring skilled expertise to the design and implementation of your security.


The Protiviti advantage

Protiviti provides expert-level data security consulting solutions to FORTUNE 1000® and FORTUNE Global 500® companies across the world. We provide our clients with data security expertise that spans numerous regulations across all industries.

Helping organisations comply with data security requirements is part of our DNA.

PCI : Protiviti is one of the largest and most experienced PCI QSA firms (since 2002) and a two-time member of the PCI SSC’s Global Executive Assessor Roundtable. We frequently present at the Council’s community meetings and partner with global merchants and service providers to aid our clients on their journeys to achieve and maintain PCI certification.

CMMC : Protiviti Government Services is a CMMC-AB Registered Provider Organisation™ (RPO) providing accredited consulting services around the Cybersecurity Maturity Model Certification (CMMC) programme.

HITRUST and SWIFT : We are a HITRUST CSF Assessor and SWIFT CSP and partner with clients seeking to certify compliance.

Notre équipe

Bernard Drui
Bernard Drui est Managing Director et Country Market Leader chez Protiviti France. Il a plus de 25 ans d'expérience dans le monde des affaires, travaillant avec une variété d'organisations pour améliorer leur performance par la gestion des risques, l'efficacité ...
Anis Hammami
Anis est Associate Director chez Protiviti France, expérimenté dans le domaine de la technologie, la cybersécurité et de la Privacy. Anis a plus de 14 ans d'expérience au cours desquels il a dirigé plusieurs projets de cybersécurité et de Privacy dans plusieurs domaines ...
Lyes Oussadit
Lyes est Senior Manager chez Protiviti France, expérimenté dans le domaine de l’audit informatique, la gestion des risques IT et la sécurité de l’information. Il possède plus de 10 ans d'expérience au cours desquels il a dirigé plusieurs projets d’audit IT (externes et ...

Cyber Risk Quantification Empowers Multichannel Retail Giant to Improve Risk Management

Protiviti utilised cyber risk quantification to enhance the risk management process of a top 10 North American multichannel retailer.