Powerful Insights

The range of challenges and uncertainty triggered by the pandemic continue to rise, but one key element has elevated as imminent - the future work environment.

Do you know where all your employees are working? Which policy exceptions and accommodations do you need to amend or revise once your firm adopts a new, more permanent operating model? Are your systems able to provide proper oversight?

This podcast features an informative discussion with Scott Anderson, Chief Compliance Officer with Société Générale, and Managing Directors Sean Gleason and Doug Wilbert from Protiviti. As part of their conversation, they assess the impact of the distributed work environment on the effectiveness of traditional compliance and oversight tools.

A global pandemic caused by a rare airborne virus that continues to affect organizations in different ways around the world. A growing number of stakeholders in organizations with whom internal audit needs to partner. Business models and a risk landscape with seemingly shorter cycle times than in years past.

These challenges are among many facing Chief Audit executives and their teams. They underscore the need to adopt next-generation internal audit practices to be more agile and technology-enabled, to have the required skill sets in alignment with these practices, and to achieve a real-time level of engagement with risk management, data and controls. But for most, the next-generation audit journey is just beginning. In fact, the results from Protiviti’s 2021 Next-Generation Internal Audit Survey reveal relatively low maturity levels in different areas of governance, methodology and enabling technology.

The results of this survey are detailed in Protiviti’s report, The Next Generation Internal Audit Journey Needs To Begin Now. This is available at Protiviti.com/IASurvey.

In this podcast, Protiviti’s Liz Berger and Andrew Struthers-Kennedy share their insights and notable takeaways from the study. Liz is a director with Protiviti’s Internal Audit and Financial Advisory practice, while Andrew is a managing director and global leader for Protiviti’s IT Audit practice.

Contact Liz at [email protected].

Contact Andrew at [email protected].

For more information, visit www.protiviti.com/IASurvey.

The most significant technology risks for 2021 reflect the new world defined by COVID-19 and its impact on business conditions and priorities. What is increasingly apparent is that more digitally mature organizations have a clear advantage.

ISACA and Protiviti recently conducted a global survey of more than 7,400 IT audit and risk leaders to obtain their perspectives on the top technology risks their organizations are facing. The results are enlightening, with cybersecurity and privacy issues, regulatory compliance, data, disaster recovery, and other pandemic-driven concerns ranking among the top technology risks for organizations globally.

In this episode, Robin Lyons and Paul Phillips from ISACA and Andrew Struthers-Kennedy from Protiviti discuss some of the notable findings and takeaways from this study. Robin is IT Audit Professional Practices Lead with ISACA. Paul is IT Risk Professional Practices Lead at ISACA. Andrew is a managing director and global leader for Protiviti’s IT Audit practice.

Contact Robin at [email protected].

Contact Paul at [email protected].

Contact Andrew at [email protected].

For more information, visit www.protiviti.com/ITAuditSurvey.

It's been more than a year since a historic global pandemic changed the way companies operate in the near term, and very likely for the long term future. We can see the impact on numerous fronts, certainly including the time, costs and efforts organizations are investing in their Sarbanes-Oxley compliance activities. And for certain companies the use of technology and automation rose to the forefront over this past year as a key advantage.

Protiviti recently published the results of its latest Sarbanes-Oxley compliance survey. We recently had the opportunity to chat with two Protiviti experts on the expansive and often challenging areas related to SOX compliance. Kristen Kelly is a director with Protiviti’s Internal Audit and Financial Advisory practice. Angelo Poulikakos is a managing director with Protiviti’s IT Audit practice.

Over the course of our chat, Angelo and Kristen talk about SOX compliance during the pandemic; growth in technology and automation and, for many companies, the best place to get started; and Sarbanes-Oxley compliance hours that are required, which continue their long term trend to rise on an annual basis.

Protiviti’s report, SOX Compliance and the Promise of Technology and Automation, is available at Protiviti.com/SOXSurvey.

Contact Kristen Kelly at [email protected].

Contact Angelo Poulikakos at [email protected].

Australia's mandatory data breach notification scheme has now been in place for a few years, and there are certain takeaways we have seen on notifications.
Marc Coleman from Protiviti Australia and Baker McKenzie’s Anne Petterd discuss data breaches in the context of what has been learnt from the mandatory data breach notification scheme, including the impact on notifications, what data breach practices have organisations implemented, and how have they assessed and applied the serious harm test.
This is episode 2 of a 3-part series on privacy. Protiviti Australia teamed up with law firm Baker McKenzie (www.bakermckenzie.com/en) for Privacy Awareness Week, an initiative of the Office of the Australian Information Commissioner (www.oaic.gov.au/), which highlights the importance of protecting personal information and helps organisations navigate the privacy landscape. Find our other resources and insights here: www.protiviti.com/AU-en/insights/privacy-awareness-week-2021.
Marc Coleman is a Manager in Protiviti Australia’s Cyber Security & Privacy team with key experience in privacy, information security, and regulatory change.
Anne Petterd is a Partner in the Technology, Communications & Commercial team at Baker McKenzie. Her expertise is in online, telecommunications, IT businesses, defence, and government procurement.

What are the main privacy risks and issues that organisations need to be across today?
That is the question tackled in this podcast. Along with this, Protiviti Australia’s Hanneke Catts and Toby Patten of Baker McKenzie discuss how these privacy risks are being approached, and look at how organisations are implementing a privacy by design approach to ensure their privacy policies are fit for purpose.
This is episode 1 of a 3-part series on privacy. Protiviti Australia teamed up with law firm Baker McKenzie (www.bakermckenzie.com/en) for Privacy Awareness Week, an initiative of the Office of the Australian Information Commissioner (www.oaic.gov.au/), which highlights the importance of protecting personal information and helps organisations navigate the privacy landscape. Find our other resources and insights here: www.protiviti.com/AU-en/insights/privacy-awareness-week-2021.
Hanneke Catts is a Director in Protiviti Australia's Sydney office. Her professional experience is focused on IT consulting and IT audit. This includes IT project management and assurance, IT controls assurance, IT general control reviews, and IT security compliance.

Toby Patten is a Baker McKenzie Partner, who specialises in transactional and advisory information technology, healthcare, and intellectual property matters.

The current and future state of risk analytics is bedrock to empowering the compliance function’s forward-looking agenda. As enterprise risks, analytics advancements and the regulatory landscape evolve, compliance can transform by being further data-driven and empower intelligent decision-making and risk detection.

In this episode, Constantine Boyadjiev – Managing Director leading Protiviti’s Global Risk & Compliance Analytics practice, interviews Griselda Rondon – EVP Chief Model Risk Officer and Analytics Oversight at KeyBank, and Harsh Singhal – Head of Decision Science and Artificial Intelligence Validation at Wells Fargo. Constantine, Griselda and Harsh discuss how financial services organizations can embrace change, harness technology, and bring innovation to the field of governance, analytics, risk and compliance.

Listen to this podcast to learn about current compliance function skillsets, what is needed for the future and how compliance can be transformed from performing reactive tasks to managing and mitigating future risks.

To learn more about Protiviti’s Risk Transformation services, visit us at our website: www.protiviti.com/US-en/risk-compliance/risk-transformation.

Transcriptions of Powerful Insights are available upon request from [email protected].

Protiviti CEO Joe Tarantino recently sat down for an in-depth interview with PGA Tour player Matthew Fitzpatrick, a 6-time winner internationally. The two discussed golf, the impact of the COVID-19 global pandemic on the PGA Tour, playing in the upcoming Olympics, and Matt’s relationship with Protiviti.

For this interview, Joe and Matt met just before the PGA Tour’s RBC Heritage tournament at Harbour Town Golf Links in Hilton Head, South Carolina. Matt finished that weekend’s tournament in a three-way tie for fourth place, at 13 under par.

For more information, visit www.protiviti.com/golf.

Follow Matt on Twitter: @MattFitz94

Transcriptions of Powerful Insights are available upon request from [email protected]

As costs for risk functions continue to increase, it is crucial to plan to remove manual tasks and innovate by using both technological tools as well as an expanded skillset.

In this episode of Protiviti’s Powerful Insights “Future of Compliance” podcast series, Protiviti Risk and Compliance Managing Director Vicki Alexander interviews Nishant Desai, the Chief Compliance Officer of TIAA Bank, and Gary Stein, the Chief Product and Compliance Officer of Openpay US. Vicki, Nishant and Gary share insights on how organizations are embracing change, utilizing technology, and bringing innovation to compliance functions. They also discuss the current skillset in the compliance functions, what is needed for the future and how compliance can be transformed from performing reactive tasks to managing future risks.

To learn more about Protiviti’s Risk Transformation services, visit us at our website: www.protiviti.com/US-en/risk-compliance/risk-transformation.

Transcriptions of Powerful Insights are available upon request from [email protected].

Managing risks and strengthening controls associated with operations have become increasingly more complex for all organizations. Firms are expending significant time, money, and resources to implement required changes and prioritize operational risk management efforts. As costs continue to increase, it is clear that the overly manual, reactive, and siloed status quo is unsustainable.

In this episode of Protiviti’s Powerful Insight’s “Future of Risk and Compliance” podcast series, Protiviti Risk and Compliance Director Bygie Dixon interviews Patrick Dillon, Executive Vice President and Head of Independent Testing and Validation at Wells Fargo. Bygie and Patrick share insights on successfully applying emerging technologies and leveraging an innovative mindset to reduce risks and strengthen controls.

To learn more about Protiviti’s Risk Transformation services, visit us at our website: www.protiviti.com/US-en/risk-compliance/risk-transformation.

Transcriptions of Powerful Insights are available upon request from [email protected].