Our client, a multi-industry holding company and sovereign wealth fund, needed to create a proactive governance structure to respond to incidents of fraud, corruption or risk that could damage their assets and reputation. They also noted concerns regarding incidents of data loss and unavailability of computer systems.

Protiviti’s Security and Privacy and Fraud consultants reviewed the situation with our client and determined that the best solution was to improve the organization’s ability to manage incidents and educate employees regarding the importance of data security. This solution involved the following actions:

1. Developing an incident management framework (IMF) to help the organization respond swiftly, consistently and effectively in the event of an incident.
2. Establishing a Computer Security Incident Response team and implementing the policies, procedures and guidelines to ensure the team deals with incidents in a consistent and effective manner.
3. Developing a comprehensive marketing and awareness plan using Protiviti’s Creative Options professionals. This plan promoted the new whistleblower response framework and data security procedures. The campaign included the following tactics: targeted messaging, posters, flyers, cards, presentation materials and website designs.

As a result of the project, our client now reports: 

1. Clarified expectations for each employee and a reduction in the company’s vulnerability in the event of a computer security or fraud-related incident.
2. More received calls to the whistleblower hotline in the three months after the campaign launch than in the entire previous year. The increased calls proved that the IMF and supporting print and interactive campaigns had reached employees and increased their awareness of ethical expectations.

How We Help Companies Succeed

As the business world becomes increasingly connected, it is critical to view information security and privacy as a business issue, not just an information technology issue. Security threats, vulnerabilities and privacy exposures challenge every organization today, creating risks that must be controlled and managed. Often, companies do not know what risks they face or how they will manage them.

Protiviti provides a wide variety of security and privacy assessment, architecture, transformation and management services to help organizations identify and address security and privacy exposures (e.g., loss of customer data, loss of revenue, or reputation impairment to a customer) before they become problems.

​Pat Quinn
Managing Director
+1.800.233.5666
pat.quinn@protiviti.com

Protiviti (www.protiviti.com) is a global business consulting and internal audit firm composed of experts specializing in risk, advisory and transaction services. The firm helps solve problems in finance and transactions, operations, technology, litigation, governance, risk, and compliance. Protiviti’s highly trained, results-oriented professionals provide a unique perspective on a wide range of critical business issues for clients in the Americas, Asia-Pacific, Europe and the Middle East.

Protiviti has more than 60 locations worldwide and is a wholly owned subsidiary of Robert Half International Inc.
(NYSE symbol: RHI). Founded in 1948, Robert Half International is a member of the S&P 500 index.