Are your controls reducing risk, or just adding cost?
Thursday 25 June, 11AM-12PM AEST | BST | ET
Find out how to measure return on controls investment, identify which controls genuinely reduce risk, and use control ROI to support stronger risk management and decision-making. Where should your next control dollar go?
From control activity to control value.
Controls should enable better decisions, reduce risk and improve the likelihood of achieving business objectives. But without discipline, control frameworks can quickly become costly, complex and difficult to manage.
In this webinar, Protecht's Michael Howell and Jared Siddle explore how to measure return on controls investment, identify which controls genuinely reduce risk, and use control ROI to support stronger risk management and decision-making.
Find out:
-
Why ‘more tools’ often result in less clarity during incidents and audits
-
How fragmentation slows response, duplicates controls, and weakens accountability
-
Why cyber attacks increasingly test business continuity, not just data security
- How third-party risk and compressed reporting timelines raise the bar for assurance
- What provable cyber resilience looks like in practice without adding complexity.
Register now!
“The question is not just whether a control works. It is whether it is the best place to spend the next dollar.” – Jared Siddle, Chief Customer Delivery Officer, North America, Protecht
Where should the next control dollar go?
Control libraries keep growing. Testing activity keeps expanding. Assurance expectations keep rising.
But one question often remains difficult to answer: which controls are actually worth the time, cost and effort?
The problem is not usually a lack of controls. It is the lack of a clear way to compare their value.
At the same time, expectations are rising. Businesses are under pressure to demonstrate that controls are effective, proportionate and aligned to business objectives. More controls do not automatically mean better risk management. In some cases, they create duplication, fatigue and false comfort.
This webinar explores how you can think more clearly about control value, control investment and the role of controls in achieving better business outcomes.
Your presenters
Michael Howell
Michael Howell is Protecht’s Head of Risk Research & Knowledge, leading risk research, thought leadership, training through Protecht Academy, and Protecht’s industry responses to regulatory consultations.
Before joining Protecht, Michael spent more than a decade in risk and compliance roles with companies including MyBudget and RAA, including oversight of enterprise risk profiles, chairing a Risk Audit & Compliance Committee, and leading internal audit as a second line of defence.
A Certified Practicing Risk Manager, Michael has managed enterprise risk frameworks, assurance programs, incident management, policy, business continuity, and internal audit, giving him a practical understanding of how risk governance holds up when organisations are under pressure.
Jared Siddle
Jared Siddle is Chief Customer Delivery Officer North America at Protecht, where he leads the teams responsible for onboarding customers and maintaining ongoing customer relationships across the region.
Jared is a Qualified Risk Director who has been Head of Risk Management at three different companies, including two of the world's largest asset managers. He has proven success in banking, fund management and other financial service companies across over 26 countries.
Jared is passionate about governance, risk, compliance and sustainability. He is an expert at designing, developing and executing customized enterprise-wide risk frameworks.
Comparing your options
Move from reactive, spreadsheet-based compliance to a connected, automated governance system - ready for the Aged Care Act 2024.
| Capabilities | Manual approach using spreadsheets | Protecht | ||
|---|---|---|---|---|
|
Incident & SIRS management
|
Incidents tracked manually, inconsistent categorisation, limited visibility, and no automated escalation. | Real-time logging and automated escalation aligned to SIRS, with full audit trails and reporting. | ||
|
Compliance & governance reporting
|
Separate spreadsheets per site; time-consuming updates; high audit risk. | Centralised dashboards and reports showing compliance across all facilities, in real time. | ||
|
Risk & quality oversight
|
Disconnected risk registers make trend analysis and board reporting difficult. | Integrated risk framework connecting controls, incidents, and actions to deliver organisation-wide visibility. | ||
|
Audit readiness
|
Manual evidence gathering across documents and emails - error-prone and stressful. | Pre-configured, auditable registers with one-click reporting and timestamped compliance evidence. | ||
|
Workflow & accountability
|
No clear ownership or task tracking; actions often lost in email. | Automated workflows with defined responsibilities, due dates, and escalation paths. | ||
|
Data security & integrity
|
Version control issues and risk of accidental data loss or breaches. | Secure, cloud-hosted platform with role-based access, encryption, and complete audit logs. |
Your partner for clarity and control
Protecht helps you manage controls as part of a connected risk and assurance ecosystem, not as isolated checklists.
Move faster and make better decisions with a single, connected system for risk, compliance, and assurance:
- Maintain a single source of truth for controls, testing and assurance
- Link controls to risks, obligations, incidents, issues and other business data
- Automate control testing schedules and standardise assurance activity
- Use analytics and dashboards to identify control gaps, duplication and improvement opportunities.


