Australia's mandatory data breach notification scheme has now been in place for a few years, and there are certain takeaways we have seen on notifications. 
Marc Coleman from Protiviti Australia and Baker McKenzie’s Anne Petterd discuss data breaches in the context of what has been learnt from the mandatory data breach notification scheme, including the impact on notifications, what data breach practices have organisations implemented, and how have they assessed and applied the serious harm test. 
This is episode 2 of a 3-part series on privacy. Protiviti Australia teamed up with law firm Baker McKenzie (www.bakermckenzie.com/en) for Privacy Awareness Week, an initiative of the Office of the Australian Information Commissioner (www.oaic.gov.au/), which highlights the importance of protecting personal information and helps organisations navigate the privacy landscape. Find our other resources and insights here: www.protiviti.com/AU-en/insights/privacy-awareness-week-2021. 
Marc Coleman is a Manager in Protiviti Australia’s Cyber Security & Privacy team with key experience in privacy, information security, and regulatory change. 
Anne Petterd is a Partner in the Technology, Communications & Commercial team at Baker McKenzie. Her expertise is in online, telecommunications, IT businesses, defence, and government procurement.

Data Breaches: What Have We Learnt From The Mandatory Data Breach Notification Scheme?

It's been more than a year since a historic global pandemic changed the way companies operate in the near term, and very likely for the long term future. We can see the impact on numerous fronts, certainly including the time, costs and efforts organizations are investing in their Sarbanes-Oxley compliance activities. And for certain companies the use of technology and automation rose to the forefront over this past year as a key advantage. 

Protiviti recently published the results of its latest Sarbanes-Oxley compliance survey. We recently had the opportunity to chat with two Protiviti experts on the expansive and often challenging areas related to SOX compliance. Kristen Kelly is a director with Protiviti’s Internal Audit and Financial Advisory practice. Angelo Poulikakos is a managing director with Protiviti’s IT Audit practice. 

Over the course of our chat, Angelo and Kristen talk about SOX compliance during the pandemic; growth in technology and automation and, for many companies, the best place to get started; and Sarbanes-Oxley compliance hours that are required, which continue their long term trend to rise on an annual basis.

Protiviti’s report, SOX Compliance and the Promise of Technology and Automation, is available at Protiviti.com/SOXSurvey.

Contact Kristen Kelly at kristen.kelly@protiviti.com. 

Contact Angelo Poulikakos at angelo.poulikakos@protiviti.com.

SOX Compliance and the Promise of Technology and Automation

The most significant technology risks for 2021 reflect the new world defined by COVID-19 and its impact on business conditions and priorities. What is increasingly apparent is that more digitally mature organizations have a clear advantage. 

ISACA and Protiviti recently conducted a global survey of more than 7,400 IT audit and risk leaders to obtain their perspectives on the top technology risks their organizations are facing. The results are enlightening, with cybersecurity and privacy issues, regulatory compliance, data, disaster recovery, and other pandemic-driven concerns ranking among the top technology risks for organizations globally.

In this episode, Robin Lyons and Paul Phillips from ISACA and Andrew Struthers-Kennedy from Protiviti discuss some of the notable findings and takeaways from this study. Robin is IT Audit Professional Practices Lead with ISACA. Paul is IT Risk Professional Practices Lead at ISACA. Andrew is a managing director and global leader for Protiviti’s IT Audit practice. 

Contact Robin at rlyons@isaca.org. 

Contact Paul at pphillips@isaca.org. 

Contact Andrew at andrew.struthers-kennedy@protiviti.com.

For more information, visit www.protiviti.com/ITAuditSurvey.

Data Breaches: What Have We Learnt From The Mandatory Data Breach Notification Scheme?

Protiviti

Related tracks