ISO 27001 provides an important foundation for information security. However, certification alone is no longer enough today. Cyber threats, regulatory requirements, and new dependencies are constantly changing the risk landscape. It is therefore crucial to continuously identify, assess, and effectively manage risks.
Many companies understand their business processes. They have process maps, documented procedures, and clearly defined responsibilities. At the same time, they assess risks, manage controls, and implement regulatory requirements. Yet what is often missing is the most important element: the big picture.
The ERM Report 2025 reveals that internal weaknesses remain the primary drivers of major corporate crises across the DACH region. Strategic failures, governance gaps and operational issues make organizations vulnerable long before external shocks appear. Strengthening Enterprise Risk Management and resilience is now essential for sustainable performance and confident strategic decision-making.
This year’s Swiss GRC Summer Event took place in inspiring Montreux. Our team from Lucerne took the opportunity to reflect on strategic issues, exchange ideas, and strengthen the corporate culture.
EN
FR
IT