• Search in Protiviti.com

Blog library

A collection of Protiviti blogs. 

No Audio
⏸

Blogs

July 17, 2026
6 min read

Third-Party Exit Planning: Prepare for the Worst, Plan for Control

Exit planning has become a critical element of the third-party risk management lifecycle as organisations contend with a rapidly evolving threat landscape and increasingly disruptive events. Protiviti’s 2026 Executive Perspectives on Top Risks and Opportunities survey ranks third-party risk as the second-highest near-term global risk.
Read More
Cybersecurity risk assessments vs. gap assessments: Why both matter
July 14, 2023
As cybersecurity incidents continue to make headlines, whether involving the breach of sensitive information or the halting of an enterprise’s operations, cybersecurity risks remain top of mind for many organisations in Hong Kong and globally.
A fresh take on cloud transformation
July 14, 2023
Cloud transformation is a process of moving applications, data and infrastructure to the cloud. Such simple definitions lack any sense of the business drivers or anticipated benefits that transformation strategies ought to encompass. After undertaking a “transformation” according to these simpler definitions, businesses are left operating in the same old way, making use of the same applications and platforms,…
Law and order in the metaverse? 'Possible but difficult,' says Sydney-based innovation lawyer
July 10, 2023
Enforcing real-world laws in virtual worlds is complex as it raises issues regarding jurisdiction, sovereignty, and the application of laws to virtual spaces. Roblox recently brought an action against a content creator, alleging the individual had been engaging in harassing behavior in violation of the Roblox terms of service.
Top 10 reasons for technology modernisation
July 4, 2023
Business and IT leaders can articulate business cases for modernisation efforts by linking them to key value drivers that modernisation efforts are known to deliver. The strongest business cases cite multiple benefits, and it isn’t unusual for application modernisation projects to add value in three or more related categories of benefit. The modernisation drivers listed below are synergistic: it isn’t unusual —it’s…
A house divided: Key differences in cybersecurity implementation for IT and OT
June 30, 2023
This blog post was authored by Justin Turner - Director, Security and Privacy on the technology insights blog. Anyone who has spent a significant amount of time in any U.S. state where college football is popular, has likely seen a “house divided” bumper sticker or license plate cover, with contrasting university logos. Many of us (and our friends and families) enjoy spirited rivalries (Roll Tide vs. War Eagle, The…
How to Incubate a winning innovation program
June 30, 2023
When leaders consider how technology has enabled transformation of business models over the past several years, few would disagree that the world has changed dramatically. Retail, entertainment, music and banking have largely moved online. It’s a familiar story: Netflix beat Blockbuster; Amazon beat Borders. More recently, Tesla has transformed the experience of buying, owning and driving a car.
Finance transformation’s front-end alignment
June 30, 2023
The big picture: Finance transformation reimagines how skills, processes and technology can be leveraged to drive long-term value. By the numbers: CFOs and other finance executives view the implementation of advanced automation with more urgency than do other finance managers and professionals. Math and magic: Achieving success starts with establishing a compelling finance transformation story…
How to implement an aligned assurance model to build a collective view of risk
June 30, 2023
The big picture: Aligned assurance can create multiple benefits, including: Giving stakeholders a common view of risks and issues across the organisation Reducing repetitive, manual testing, which allows more focus on high-value activities By the numbers: In a recent Protiviti webinar on aligned assurance, only 14% of the audience members reported that collaboration across the three lines is…
Metrics’ role in cyber transformation
June 30, 2023
We’ve all heard the saying, “what gets measured gets done,” meaning that regular measurement and reporting helps to keep organisations focused on the information that matters. But with so many data points available to measure security, it is difficult to know where to begin. Security practitioners must constantly question what data they collect and why. Only by providing relevant measures can we understand how…
A Guide to pen testing and red teaming: What to know now
June 19, 2023
Penetration testing and red teaming are essential cybersecurity practices in Hong Kong that bolster an organisation’s security posture by uncovering vulnerabilities within their systems, networks, and people or business processes. These methodologies have distinct objectives, scopes, approaches and technologies employed.
Loading...