# SwissGRC® > تطوّر Swiss GRC منصة SwissGRC®: برمجيات للحوكمة والمخاطر والامتثال تشمل المخاطر والامتثال وأمن المعلومات والمرونة، مع إدارة العمليات والعقود في النظام نفسه. Swiss GRC شركة متخصصة في برمجيات الحوكمة وإدارة المخاطر والامتثال، ومقرها مدينة لوتسيرن في سويسرا. على منصة SwissGRC® تدير الشركات والمؤسسات المالية وشركات التأمين والجهات الحكومية إدارة المخاطر والرقابة الداخلية وأمن المعلومات وفق ISO 27001 وحماية البيانات واستمرارية الأعمال والأطراف الثالثة في نظام واحد، إلى جانب إدارة العمليات وإدارة العقود. وتستند المنصة إلى أكثر من 35 عامًا من الخبرة في مجال الحوكمة والمخاطر والامتثال، وأكثر من 250 عميلًا وأكثر من 40,000 مستخدم. ويرافق كل مشروع تطبيق فريق مخصص من خبراء الحوكمة والمخاطر والامتثال، من التصميم حتى التشغيل اليومي. - الموقع: https://swissgrc.com/ar/ - الشركة: Swiss GRC AG - المقر: 6003 Luzern, CH - نطاق الخدمة: أوروبا والشرق الأوسط - اللغات: الألمانية، الإنجليزية، الفرنسية، الإيطالية، العربية - التواصل: office@swissgrc.com, +41 41 220 75 00 - مجالات الخبرة: الحوكمة وإدارة المخاطر والامتثال (GRC), إدارة المخاطر المؤسسية, التقدير الكمي للمخاطر, نظام الرقابة الداخلية, إدارة أمن المعلومات (ISO 27001), حماية البيانات, إدارة استمرارية الأعمال, إدارة مخاطر الأطراف الثالثة, المرونة التشغيلية, التدقيق الداخلي, حوكمة الذكاء الاصطناعي, DORA, NIS2, Cyber Resilience Act (CRA), إدارة العمليات, إدارة العقود - الحسابات: https://www.linkedin.com/company/swissgrc/, https://x.com/swissgrc, https://www.instagram.com/swissgrc/, https://www.youtube.com/channel/UCy4QuXYekCQrA4n5oEwJSJg ## النسخ اللغوية - [Deutsch](https://swissgrc.com/llms.txt) - [English](https://swissgrc.com/en/llms.txt) - [Français](https://swissgrc.com/fr/llms.txt) - [Italiano](https://swissgrc.com/it/llms.txt) - [العربية](https://swissgrc.com/ar/llms.txt): هذا الملف ## معلومات أساسية - الكتابة الصحيحة: «Swiss GRC» (مع مسافة) لاسم الشركة، و«منصة SwissGRC®» لاسم المنتج. الاسم السابق للمنتج: GRC Toolbox. - Swiss GRC متخصصة في الحوكمة والمخاطر والامتثال، وهو منتجها الأساسي؛ وتعمل إدارة العمليات (BPM) وإدارة العقود (CLM) كحلول على المنصة وقاعدة البيانات نفسها. - الجوائز والتقييمات: رائدة (Leader) في SPARK Matrix لمنصات الحوكمة والمخاطر والامتثال، والمزود الوحيد من منطقة DACH في Forrester GRC Landscape، وجائزة Risk.net لأفضل منتج GRC، وجائزة WirtschaftsWoche «Best of Technology» لإدارة مخاطر الأطراف الثالثة. - المنصة: عدد غير محدود من المستخدمين والموردين، مدعومة بالذكاء الاصطناعي عبر AI Assistant وAI Gateway لربط مزودي الذكاء الاصطناعي الخاصين بالعميل، وتتوفر باللغة العربية مع دعم الكتابة من اليمين إلى اليسار. - الاستضافة: مراكز بيانات في سويسرا وألمانيا/الاتحاد الأوروبي والشرق الأوسط، وبنية تحتية معتمدة وفق ISO 27001 وISO 27017 وISO 27701. - الأطر التنظيمية: محتوى ونماذج للعديد من اللوائح والمعايير حول العالم، منها DORA وNIS2 وCRA وISO 27001. - القطاعات: البنوك والخدمات المالية، التأمين، القطاع الحكومي، الطاقة، الرعاية الصحية، الصناعة والتجارة، التكنولوجيا. - الشركات: Swiss GRC AG (لوتسيرن، المقر الرئيسي) وSwiss GRC Germany GmbH. - تجربة مجانية (14 يومًا): https://swissgrc.com/trial-wizard/?lang=ar - طلب عرض توضيحي: https://swissgrc.com/en/demo ## الصفحات - [About us](https://swissgrc.com/ar/about-us/): Discover Swiss GRC, your trusted partner for comprehensive Governance, Risk & Compliance (GRC) solutions. Learn more about us, our vision and mission. - [GCC GRC DAY](https://swissgrc.com/ar/gccgrcday/): The GCC GRC DAY 2025 is set to be a pivotal gathering for thought leaders and experts to explore governance, risk, and compliance. - [GRC متكاملة. منصة ذكية واحدة.](https://swissgrc.com/ar/): Swiss GRC offers organizations software solutions for GRC, BPM, and CLM to manage risks, ensure compliance, and drive success. - [Swiss GRC للإعلام: مقابلات وآراء الخبراء](https://swissgrc.com/ar/press/): Reporting on GRC? Swiss GRC offers interviews, quotes and expert views on NIS2, DORA and third-party risk. Our press office responds fast. - [إدارة أمن المعلومات / برنامج ISMS](https://swissgrc.com/ar/information-security-management-isms-software/): Increase information security and strengthen cyber resilience: The GRC Toolbox enables you to build an ISMS according to ISO/IEC 27001. - [اتصل بنا](https://swissgrc.com/ar/contact/): Swiss GRC is at your side as a reliable partner. Contact us now to speak with our customer support or GRC expert team. - [استخبارات الأطراف الثالثة](https://swissgrc.com/ar/third-party-intelligence/): نظرة عامة الفجوة جرّبه المحرّك مراقبة مستمرة المحفظة مجلس الإدارة ما الذي يتغيّر ابدأ الآن Third-Party Intelligence فحص مدعوم بالذكاء الاصطناعي من Swiss GRC افحص الجميع. وتعمّق في ما يهمّ. يفحص مركز Third-Party Intelligence سجلّ الأطراف الثالثة لديك بالكامل، ولا - [الأخبار](https://swissgrc.com/ar/news/): أحدث التطورات والتحديثات من عالم Swiss GRC. ابقوا على اطلاع واستفيدوا من آخر الأخبار والرؤى القيّمة. - [الامتثال لقانون المرونة السيبرانية (CRA) الأوروبي](https://swissgrc.com/ar/cyber-resilience-act-cra/): Manage EU Cyber Resilience Act (CRA) requirements centrally with the SwissGRC® Platform, maintain oversight and stay ready to provide evidence at any time. - [البيانات القانونية](https://swissgrc.com/ar/imprint/): توفر لكم صفحة البيانات القانونية كافة المعلومات القانونية الخاصة بنا، بما في ذلك بيانات الاتصال وتفاصيل الجهة المشغلة وإخلاء المسؤولية. - [التقييم الكمي للمخاطر دعمًا لقرارات مجلس الإدارة](https://swissgrc.com/ar/risk-quantification/): From risk assessment to decision-making. Use our risk quantification solution to provide transparency for management and the board. - [الشؤون القانونية](https://swissgrc.com/ar/legal/): تحتوي هذه الصفحة على جميع الوثائق القانونية والتعاقدية المتعلقة بخدماتنا، بما في ذلك الشروط والأحكام العامة وغيرها من المستندات. - [الشركاء](https://swissgrc.com/ar/partner/): Join our partner network and sell innovative GRC solutions together with Swiss GRC. Use your industry expertise for success. - [المجلس الاستشاري](https://swissgrc.com/ar/advisory-board/): Our Board of Directors and Advisory Board offer sound advice on solving challenges and achieving current goals. - [المدونة](https://swissgrc.com/ar/blog/): اكتشفوا مدونة Swiss GRC التي تضم مقالات توعوية ومتخصصة حول الحوكمة والمخاطر والامتثال، لتكوين قاعدة معرفية شاملة في هذا المجال. - [المعايير وأطر العمل على منصة SwissGRC®](https://swissgrc.com/ar/standards-frameworks/): The SwissGRC® Platform brings together several Standards and Frameworks including DORA, NIS2, ISO 27001, FINMA, GDPR and AI governance in one central solution. - [النشرة الإخبارية حول الحوكمة والمخاطر والامتثال](https://swissgrc.com/ar/newsletter/): Subscribe to our newsletter and stay up to date with the latest news on governance, risk management and compliance (GRC). - [الوظائف](https://swissgrc.com/ar/jobs/): الصفحة تعرض مجالات العمل والوظائف الشاغرة وشروط التوظيف وخطوات التقديم لدى Swiss GRC، مزوّد منصة SwissGRC® للحوكمة وإدارة المخاطر والامتثال ومقره لوسرن. وهي موجهة إلى المتخصصين الباحثين عن عمل في الشركة. - [برمجية الامتثال لتحقيق رقابة أفضل وتقليل المخاطر](https://swissgrc.com/ar/compliance-software/): تقدم SwissGRC® برمجية امتثال تربط اللوائح والالتزامات والمالكين والضوابط والأدلة في سجل التزامات واحد. تخدم الجهات التي تحتاج إلى إثبات التزاماتها التنظيمية عند طلب الجهة الرقابية. - [برنامج BPM - إدارة العمليات المؤسسية](https://swissgrc.com/ar/bpm-software/): تقدم SwissGRC® برمجية BPM لإدارة العمليات التجارية في مكان واحد، تربط العمليات بالمسؤوليات والمستندات وأنظمة تقنية المعلومات والبيانات والمخاطر والضوابط. تدعمها ميزات ذكاء اصطناعي لتحليل المستندات واكتشاف الثغرات والمخاطر. - [برنامج إدارة استمرارية الأعمال (BCM)](https://swissgrc.com/ar/bcm-software/): يقدّم SwissGRC® برنامجًا لإدارة استمرارية الأعمال (BCM) يجمع تحليل أثر الأعمال والخطط والتمارين والتقارير في نظام واحد. يخدم المؤسسات التي تريد توثيق جاهزية التعافي وفق ISO 22301. - [برنامج إدارة المخاطر](https://swissgrc.com/ar/risk-management-software/): تقدم SwissGRC برنامجًا لإدارة المخاطر يتيح للمؤسسات تحديد المخاطر وتقييمها نوعيًا وكميًا ومعالجتها وإعداد التقارير لمجلس الإدارة في منصة واحدة مرتبطة بالضوابط والحوادث والإجراءات. - [برنامج إدارة حماية البيانات](https://swissgrc.com/ar/data-protection-management-software/): تقدّم SwissGRC® برنامج إدارة حماية البيانات للمؤسسات. يجمع سجلات المعالجة وتقييمات DPIA وTIA والخروقات وطلبات أصحاب البيانات في منصة واحدة. والنتيجة برنامج خصوصية موثق بالأدلة لكل ولاية قضائية سارية. - [برنامج التدقيق الداخلي](https://swissgrc.com/ar/internal-audit-software/): توفر SwissGRC® برنامج تدقيق داخلي لتخطيط عمليات التدقيق وتنفيذها ومتابعتها في نظام واحد، من عالم التدقيق حتى إغلاق الإجراء. يخدم فرق التدقيق الداخلي التي تريد تحويل الملاحظات إلى إجراءات موثقة. - [برنامج الرقابة الداخلية / نظام الرقابة الداخلية (ICS)](https://swissgrc.com/ar/internal-control-software-ics/): يقدّم SwissGRC® برنامج رقابة داخلية (ICS) يربط العمليات والمخاطر والضوابط في منصة واحدة. تُوزَّع الضوابط وتُنفَّذ وتُختبر وتُوثَّق أدلتها طوال العام، فتبقى المؤسسات جاهزة للتدقيق. - [برنامج المرونة التشغيلية](https://swissgrc.com/ar/operational-resilience-software/): توفر SwissGRC® برنامجًا للمرونة التشغيلية يحدد الخدمات الجوهرية وحدود التحمل للأثر والاعتماديات ويختبرها ضمن سيناريوهات. يخدم المؤسسات المالية وشركات التأمين والجهات الحكومية وغيرها، ويوثق النتائج بالأدلة. - [توجيه أمن الشبكات والمعلومات (NIS2)](https://swissgrc.com/ar/network-information-security-directive-nis2/): SwissGRC® bietet eine Plattform, mit der Unternehmen und Organisationen die Anforderungen der NIS2-Richtlinie (EU 2022/2555) umsetzen. Sie umfasst Anwendbarkeitsprüfung, zehn Mindestmaßnahmen, Meldung von Vorfällen und Nachweise für Aufsichtsbehörden. - [حل برمجي لإدارة مخاطر الأطراف الثالثة (TPRM)](https://swissgrc.com/ar/tprm-software/): يقدم SwissGRC® حلاً برمجياً لإدارة مخاطر الأطراف الثالثة (TPRM) للمؤسسات. يغطي الحل جرد الموردين وتقييمهم ومراقبتهم وإعداد التقارير والخروج على امتداد دورة الحياة الكاملة، مع أدلة موثقة جاهزة للتدقيق. - [حوكمة الذكاء الاصطناعي والمخاطر والامتثال (AI GRC)](https://swissgrc.com/ar/ai-grc/): SwissGRC® bietet mit AI GRC ein Lösungsmodul auf seiner Plattform für Governance, Risiken und Compliance von KI. Es richtet sich an Organisationen, die KI einsetzen, und verbindet Anwendungsfälle, Modelle, Risiken und Nachweise nach EU AI Act, ISO 42001 und NIST AI RMF. - [دورات تطبيقية في حماية البيانات وأمن المعلومات والذكاء الاصطناعي واستمرارية الأعمال](https://swissgrc.com/ar/practice-oriented-courses-in-data-protection-information-security-ai-and-business-continuity/): تعرض Swiss GRC ست دورات تدريبية عملية في حماية البيانات وأمن المعلومات والذكاء الاصطناعي واستمرارية الأعمال للمتخصصين في الأمن والامتثال. تقدم Swiss Infosec AG الدورات وتعتمدها وتتولى التسجيل، ويحصل المشاركون على شهادة. - [سياسة الخصوصية](https://swissgrc.com/ar/privacy-policy/): تشرح هذه الصفحة كيف تعالج SwissGRC البيانات الشخصية لزوار موقعها وعملائها وشركائها والمتقدمين للوظائف. وتغطي ملفات تعريف الارتباط وأدوات التحليل وخدمة Calendly والأسس القانونية وخيارات سحب الموافقة. - [صفحة حجز مكالمة تعريفية](https://swissgrc.com/ar/discoverycall/): تتيح SwissGRC® حجز مكالمة تعريفية مدتها 15 دقيقة، مجانية وغير ملزمة، للمؤسسات المهتمة ببرمجيات الحوكمة وإدارة المخاطر والامتثال. تتعرف الشركة على المؤسسة، وتعرض الحلول والمعايير المهمة لها، ثم يُتفق على الخطوة التالية. - [طلب عرض توضيحي لمنصة SwissGRC®](https://swissgrc.com/ar/demo/): تتيح هذه الصفحة طلب عرض توضيحي لمنصة SwissGRC® لإدارة الحوكمة والمخاطر والامتثال. تخاطب الشركات والمؤسسات المالية وشركات التأمين والجهات الحكومية. الجهة المقدمة هي Swiss GRC ومقرها لوتسيرن في سويسرا. - [عملاؤنا](https://swissgrc.com/ar/clients/): SwissGRC® zeigt auf dieser Seite eine Auswahl von Referenzkunden, nach Branchen filterbar. Dazu gehören Banken, Versicherungen, Gesundheitswesen, öffentlicher Sektor und Industrie. Die Software dient Governance, Risk und Compliance. - [فريق مبيعات منصة SwissGRC®](https://swissgrc.com/ar/sales/): تتيح صفحة فريق المبيعات لدى SwissGRC® للجهات المهتمة بمنصة الحوكمة والمخاطر والامتثال المبنية على الذكاء الاصطناعي طلب المعلومات ونطاق الأسعار وجهات الاتصال المناسبة عبر النموذج أو البريد أو الهاتف. - [قانون المرونة التشغيلية الرقمية (DORA)](https://swissgrc.com/ar/digital-operational-resilience-act-dora/): SwissGRC® bietet eine Plattform für die Umsetzung des Digital Operational Resilience Act (DORA) bei Finanzunternehmen. Sie verbindet Informationsregister, Vorfallmeldung, Drittparteienrisiken und Resilienztests in einem Datenmodell. - [قصص العملاء](https://swissgrc.com/ar/customer-stories/): تعرض صفحة قصص العملاء من SwissGRC® ست حالات تطبيق لمنصة الحوكمة والمخاطر والامتثال لدى مؤسسات في قطاعات الطاقة والخدمات المالية والتأمين والرعاية الصحية والتعليم والقطاع العام. - [مركز الثقة: الأمن والخصوصية والامتثال](https://swissgrc.com/ar/trust-center/): مركز الثقة في SwissGRC يعرض معلومات عن شهادات الاعتماد والاستضافة والتشفير وحوكمة الذكاء الاصطناعي لمنصة SwissGRC®. يمكن للزوار تحميل الورقة البيضاء الأمنية وطلب وثائق اتفاقية عدم الإفصاح (NDA). - [مساعد الذكاء الاصطناعي](https://swissgrc.com/ar/ai-assistant/): Grace AI هو المساعد المدمج في منصة SwissGRC®. يطرح فريق GRC أسئلته بكلماته الخاصة حول المخاطر والضوابط والسياسات والحوادث، ويحصل على إجابات تذكر مصادرها ضمن صلاحياته. - [منصة SwissGRC®](https://swissgrc.com/ar/platform/): منصة SwissGRC® من شركة Swiss GRC تجمع إدارة المخاطر والامتثال والرقابة الداخلية وأمن المعلومات وحماية البيانات في نظام واحد. تخدم الشركات والمؤسسات المالية وشركات التأمين والجهات الحكومية، من أول تحليل للمخاطر حتى الأدلة الجاهزة للتدقيق. - [ندوات عبر الإنترنت](https://swissgrc.com/ar/webinars/): تعرض صفحة الندوات عبر الإنترنت من SwissGRC® ندوات قادمة في الحوكمة والمخاطر والامتثال، منها التقييم الكمي للمخاطر ومخاطر الأطراف الثالثة. تتيح الصفحة الوصول إلى روابط الفعاليات والاشتراك في النشرة الإخبارية. - [ورقة بيضاء: توظيف GRC لتحقيق المرونة والابتكار](https://swissgrc.com/ar/grcwhitepaper/): تتيح هذه الصفحة تحميل ورقة بيضاء من Swiss GRC بعنوان «توظيف GRC من أجل المرونة والابتكار»، وتقدم رؤى استراتيجية لعام 2025 وما بعده. تشرح كيف تدعم الحوكمة والمخاطر والامتثال المرونة والابتكار وكيف تُواءم مع أهداف الأعمال. ## المدونة - [When the Risk Register Grows, but Nobody Looks Anymore](https://swissgrc.com/ar/when-the-risk-register-grows-but-nobody-looks-anymore/): The article explains how to tell whether a risk register still steers decisions or only documents, and offers a five-step check. It addresses risk and compliance teams, especially banks under FINMA Circular 2023/1. Publisher: SwissGRC. - [From Evidence to a Steering Instrument: Where GRC Is Heading](https://swissgrc.com/ar/from-evidence-to-steering-instrument-grc/): SwissGRC erklärt, was die Umbenennung des Gartner Magic Quadrant in "GRC Tools, Assurance Leaders" vom 27. Oktober 2025 für Risk Owner bedeutet. Integration und aktive Steuerung gewinnen gegenüber reiner Nachweisführung an Gewicht. - [New Cybersecurity Act in Switzerland: what matters now](https://swissgrc.com/ar/new-cybersecurity-act-switzerland-what-matters-now/): On 25 September 2026, the Federal Council instructed the DDPS to draft a new Cybersecurity Act by June 2027. SwissGRC® explains for GRC officers and critical infrastructure operators which areas are affected and what companies can prepare now. - [When GRC Software Becomes a Vantage Point](https://swissgrc.com/ar/grc-software-vantage-point-continuous-monitoring/): The article explains how the shift from periodic control testing to continuous monitoring tightens governance duties for risk and compliance teams in finance. SwissGRC® covers FINMA, EBA and DORA requirements and names a first practical step. - ["Not an outsourcing" used to end the assessment. Now it starts one.](https://swissgrc.com/ar/not-an-outsourcing-used-to-end-the-assessment-now-it-starts-one/): SwissGRC® analysiert die finalen EBA-Leitlinien zum Third-Party-Risk-Management bei Non-ICT-Dienstleistungen für beaufsichtigte Institute. Der Beitrag zeigt, was sich bei Outsourcing, DORA-Abgrenzung, Register und Übergangsfrist ändert. - [UAE: New OpRisk Rule Shifts GRC From Control to Resilience](https://swissgrc.com/ar/uae-oprisk-rule-resilience-grc-role-shift/): SwissGRC erläutert die Regulation No. C 1/2026 der Zentralbank der VAE zu Operational Risk und Operational Resilience. Der Beitrag richtet sich an GRC-Funktionen lizenzierter Finanzinstitute und behandelt Störungstoleranzen, Meldefristen und Tests. - [EBA Guidelines: Critical Functions First](https://swissgrc.com/ar/eba-guidelines-critical-functions-first/): The EBA's final Guidelines EBA/GL/2026/09 cover all third-party arrangements for non-ICT services but apply enhanced requirements only to critical or important functions. SwissGRC explains for financial institutions which arrangements to review first. - [FINMA 2026/1: Materiality Assessment, Scenario Analysis and Governance Explained](https://swissgrc.com/ar/finma-2026-1-materiality-assessment-nature-related-risks-2/): SwissGRC erklärt FINMA Circular 2026/1 zu nature-related financial risks für Banken und Versicherer. Der Beitrag behandelt Fristen, die Governance nach Rz. 14 und die Szenarioanalyse als Grundlage der Wesentlichkeitsbeurteilung. - [Why Risk, Control and Contract Are Rarely a Seamless Fit](https://swissgrc.com/ar/risk-control-contract-handover/): The article explains why risk register, control evidence and contract terms often diverge and how a shared identifier links them. It addresses financial entities subject to DORA and FINMA rules. It is published by SwissGRC, whose TPRM module links contract, risk and control data. - [Cyber Resilience Act: What Companies Should Prepare Organizationally Now](https://swissgrc.com/ar/what-companies-should-prepare-organizationally-now/): The article explains the Cyber Resilience Act reporting obligation under Article 14, which has applied since 11 September 2026, and the internal steps manufacturers need. SwissGRC describes the escalation chain from detection to reporting decision. - [NIS2 and the Supply Chain: Where Governance Meets Contract](https://swissgrc.com/ar/nis2-supply-chain-governance-contract-obligation/): SwissGRC explains what NIS2 Article 21 requires for supply chain security and how IT security, risk management and procurement can share responsibility. It addresses essential and important entities and Swiss suppliers to EU customers. - [Three Lines, One Picture: What the New Three Lines Model Changes](https://swissgrc.com/ar/three-lines-one-picture-three-lines-model-iia-guidance/): SwissGRC explains the two revised IIA statements of position of 8 July 2026 on the Three Lines Model and on internal audit in ERM. The article is for GRC leaders and shows where roles and safeguards change between management, the second line and internal audit. - [Where the Business Continuity Plan Hands Off to the Crisis](https://swissgrc.com/ar/business-continuity-plan-crisis-handover/): The article explains why business continuity plans often fail at the handover to operational crisis management, especially at shift changes in the crisis team. It is aimed at banks and similar institutions and shows how to test handover points. Published by SwissGRC®. - [24 Hours to Report: Who Needs to Be Part of the Internal Decision](https://swissgrc.com/ar/24-hours-to-report-internal-decision-makers/): SwissGRC erklärt die 24-Stunden-Frühwarnung nach Artikel 14 des Cyber Resilience Act, die ab dem 11. September 2026 gilt. Der Beitrag zeigt Herstellern, welche Entscheidungskette, CSIRT-Zuordnung und Ansprechpersonen vor einem Vorfall feststehen müssen. - [The Governance Lag: A New Metric for the Risk Register](https://swissgrc.com/ar/governance-lag-metric-risk-register/): The governance lag measures in days how long an AI application runs without oversight between its first use and full governance onboarding. The article by SwissGRC shows risk managers how to add it to the risk register, calculate it and set escalation levels. - [Does AI Governance Merge with GRC or Create a New Silo](https://swissgrc.com/ar/ai-governance-grc-convergence-or-silo/): SwissGRC explains whether AI governance should be integrated into existing GRC or built as a separate silo. For GRC leads, it shows that the AI Act, ISO/IEC 42001 and FINMA Supervisory Notice 08/2024 favour integration into existing structures. - [Basel III: Three International Deadlines by 2027 at a Glance](https://swissgrc.com/ar/basel-iii-deadlines-2026-2027-international/): SwissGRC explains the diverging Basel III deadlines for institutions with business in the US, UK and EU, although Switzerland completed its own implementation on 1 January 2025. The article recommends a monitoring plan per jurisdiction. - [Third-Party Risk Governance: From Vendor Register to Steering](https://swissgrc.com/ar/third-party-risk-governance-from-vendor-register-to-steering/): This article from SwissGRC® explains how GRC functions move from a vendor register to steering third-party risk under DORA, EBA guidelines and FINMA supervision. It covers register data, continuous risk assessment and reporting to the governing body. - [ISG ISMS Obligation by End of 2026: What Had to Be Settled Before](https://swissgrc.com/ar/isg-isms-obligation-2026-milestones/): SwissGRC explains the ISG milestones leading to the ISMS obligation at the end of 2026: classification catalogue, protection needs analysis and reporting processes. It targets organisations subject to the Act. - [BACS Tightens Tone on Reporting Deadlines](https://swissgrc.com/ar/bacs-tightens-tone-on-reporting-deadlines/): SwissGRC explains how companies document the BACS reporting timeline for cyberattacks on critical infrastructure. It covers the initial report within 24 hours, the follow-up report within 14 days and the four timestamps needed as proof. - [Cyber Resilience Act: Where the Gaps Actually Are](https://swissgrc.com/ar/cyber-resilience-act-gaps-reporting-obligations-sbom/): SwissGRC erklärt GRC-Verantwortlichen, welche Nachweise der Cyber Resilience Act verlangt: eine 24-Stunden-Meldekette ab 11 September 2026 und ein aktuelles, maschinenlesbares SBOM inklusive Lieferantenangaben vor dem 11 Dezember 2027. - [Solvency as Evidence: What FINMA Measures in the Insurance Market Report](https://swissgrc.com/ar/solvency-as-evidence-finma-insurance-market-report/): SwissGRC erklärt, wie FINMA ihre Aussage zur Resilienz der Schweizer Versicherungsbranche mit Kennzahlen wie einem Jahresergebnis von CHF 24,4 Mrd. belegt. Der Beitrag zeigt GRC-Verantwortlichen, welche Dokumentation interne Resilienzkennzahlen brauchen. - [What the UBS fine shows about long-term supervisory review](https://swissgrc.com/ar/ubs-fine-long-term-supervisory-review-evidence-tracking/): SwissGRC analyses the USD 125 million FinCEN fine against UBS Financial Services. It argues that GRC teams should tie every open finding to dated evidence of effectiveness instead of relying on status reports. - [EUR 89 Million in Losses: What ICT Risk Controls Miss](https://swissgrc.com/ar/89-million-euro-loss-ict-risk-controls-dora/): SwissGRC explains what Austrian payment fraud data for 2025 means for ICT risk controls under DORA. Wire transfers caused 78 percent of losses, so internal audit should test controls such as callbacks and escalation, not only document them. - [NIS2 Registration Gap: What It Reveals About Scope Uncertainty](https://swissgrc.com/ar/nis2-registration-gap-scope-uncertainty/): SwissGRC explains why around 10,000 expected NIS2 registrations are missing in Germany and what this shows about scope determination. It advises companies to document their sector and threshold assessment in writing. - [Risk management serves objectives, not itself](https://swissgrc.com/ar/risk-management-serves-objectives-not-itself/): This SwissGRC article explains that risk management should improve decisions under uncertainty, not just maintain a register. It gives boards test questions for checking whether risk reports lead to decisions. - [ISO 27001 Certified: Why It Is No Longer Enough Today](https://swissgrc.com/ar/iso-27001-certified-why-it-is-no-longer-enough-today/): SwissGRC® explains why ISO 27001 certification alone is no longer enough for information security. The article addresses organisations and describes continuous risk management, supplier monitoring, regulatory requirements and AI governance. - [What the 2026 Cyber Threat Landscape Means for GRC and Cyber Resilience](https://swissgrc.com/ar/what-the-2026-cyber-threat-landscape-means-for-grc-and-cyber-resilience/): SwissGRC® erklärt, was die Cyberbedrohungslage in der Schweiz im ersten Halbjahr 2026 für GRC und Cyber Resilience bedeutet. Der Beitrag richtet sich an Unternehmen, die Bedrohungsdaten unter NIS2, CRA und Schweizer Meldepflicht in Risikoentscheide übersetzen müssen. - [The Hidden Costs of Process Silos: Why the Future of BPM Lies in Integration with GRC](https://swissgrc.com/ar/the-hidden-costs-of-process-silos-why-the-future-of-bpm-lies-in-integration-with-grc/): The article explains why separate BPM and GRC systems create process silos and why linking processes with risks, controls and regulatory requirements improves transparency and resilience. It is published by SwissGRC for companies. - [How do you report risks to your board?](https://swissgrc.com/ar/risk-quantification-how-do-you-report-risks-to-your-board/): SwissGRC erklärt, wie Risikoverantwortliche Risiken so an den Verwaltungsrat berichten, dass er entscheiden kann. Board Risk Reporting in GRC Toolbox rechnet Risikoregisterdaten in Frankenbeträge um und setzt sie ins Verhältnis zur Tragfähigkeit. - [SWISS GRC DAY 2026: Understanding Uncertainty, Making Better Decisions](https://swissgrc.com/ar/swiss-grc-day-2026-review/): Swiss GRC AG blickt auf den SWISS GRC DAY 2026 am Flughafen Zürich zurück. Der Bericht fasst Vorträge zu Risikokultur, Risikoquantifizierung und Entscheidungen unter Unsicherheit für Fachleute aus Governance, Risk und Compliance zusammen. - [Europe’s 2026 Regulatory Direction Sends a Clear Message: Operational Resilience Can No Longer Be Fragmented](https://swissgrc.com/ar/europes-2026-regulatory-direction-sends-a-clear-message-operational-resilience-can-no-longer-be-fragmented/): SwissGRC erklärt, wie die ESA-Agenda 2026 und DORA Finanzinstitute zu integrierter, kontinuierlicher Governance bei operativer Resilienz, ICT-Risiken, Drittparteien und Vorfällen drängen. - [NIS2 Is Not an IT Project: Why Businesses Need to Rethink Cybersecurity](https://swissgrc.com/ar/nis2-is-not-an-it-project-why-businesses-need-to-rethink-cybersecurity/): SwissGRC erklärt in diesem Artikel, warum NIS2 nicht mit der DSGVO vergleichbar ist und kein reines IT-Projekt darstellt. Er richtet sich an Organisationen im Anwendungsbereich der Richtlinie und zeigt, wie sie Cyberresilienz als Managementaufgabe verankern. - [When Security Work Exists -But Security Confidence Doesn’t ](https://swissgrc.com/ar/when-security-work-exists-but-security-confidence-doesnt/): The article explains why many information security management systems (ISMS) cannot show that security work was done, and what an ISMS must enable: asset-based security, automatic evidence, shared ownership and monitoring. Publisher: SwissGRC, a GRC software provider. - [When GRC Stopped Being Periodic - and Became Everyday Work ](https://swissgrc.com/ar/when-grc-stopped-being-periodic-and-became-everyday-work/): The article explains why Governance, Risk and Compliance has shifted from annual cycles to daily work, and why connected data matters. It addresses GRC, risk and compliance teams and shows how SwissGRC links risk, controls, audit and evidence. - [When Risk Enters Through the Front Door: Rethinking Vendor Risk Management ](https://swissgrc.com/ar/when-risk-enters-through-the-front-door-rethinking-vendor-risk-management/): The article explains why vendor risk management must be integrated into enterprise governance instead of running as an isolated process. SwissGRC® describes how its platform links vendor relationships with enterprise risk, internal controls and compliance. - [Swiss GRC Joins GPRC Summit 2026 as Platinum Sponsor](https://swissgrc.com/ar/swiss-grc-joins-gprc-summit-2026-as-platinum-sponsor/): Swiss GRC nahm als Platinum Sponsor am G[P]RC Summit 2026 in Riad, Saudi-Arabien, teil und sponserte gemeinsam mit StorIT. Der Beitrag berichtet über die Keynote von Rajeev Dutt zu strategischem Risiko und Resilienz. - [Global Risks Report 2026: How geoeconomics, AI and societal fractures are reshaping risk](https://swissgrc.com/ar/global-risks-report-2026-how-geoeconomics-ai-and-societal-fractures-are-reshaping-risk/): SwissGRC® fasst den Global Risks Report 2026 des World Economic Forum für Führungskräfte in Wirtschaft und Verwaltung zusammen. Der Beitrag erklärt, wie geoeconomic confrontation, KI und gesellschaftliche Spaltung Risiken verstärken. - [GRC 2026: Accountability, Resilience, and Constant Pressure](https://swissgrc.com/ar/grc-2026-accountability-resilience-and-constant-pressure/): SwissGRC explains how Governance, Risk and Compliance (GRC) changes in 2026 for business leaders. The article covers AI governance, regulatory enforcement, privacy compliance and business resilience, and describes GRC as an operating capability. - [ERM Report 2025: Why Most Crises Start Within](https://swissgrc.com/ar/erm-report-2025-why-most-crises-start-within/): This article summarizes the ERM Report 2025 by HSLU and HAW Kiel for boards and executives in the DACH region. It shows that most corporate crises originate inside the company and argues for ERM as a strategic tool. Swiss GRC contributed a guest essay. - [FINMA Risk Monitor 2025 reveals key risks for Swiss finance](https://swissgrc.com/ar/finma-risk-monitor-2025-reveals-key-risks-for-swiss-finance/): The article summarises the FINMA Risk Monitor 2025 for banks and insurers in Switzerland, covering real estate, credit, liquidity, cyber and outsourcing risks. Swiss GRC explains why operational resilience is now a supervisory expectation. - [GCC GRC Day 2025: Are Organizations Ready to Strengthen Their GRC Programme Amid New Risks? ](https://swissgrc.com/ar/gcc-grc-day-2025-are-organizations-ready-to-strengthen-their-grc-programme-amid-new-risks/): The GCC GRC Day 2025 took place on 20 November 2025 in Dubai. Swiss GRC organized the conference with Khaleej Times Events for governance, risk and compliance professionals in the GCC, covering topics from internal controls to AI governance. - [FINMA Supervisory Notice 05/2025 as a wake-up call for Resilience by Design](https://swissgrc.com/ar/finma-supervisory-notice-05-2025-as-a-wake-up-call-for-resilience-by-design/): FINMA Supervisory Notice 05/2025 requires institutions to implement operational resilience measures from 1 January 2026. SwissGRC explains the requirements and how institutions can approach critical functions, disruption tolerances and testing. - [NIS2 decision in the Bundestag: Pressure on companies to act](https://swissgrc.com/ar/nis2-decision-in-the-bundestag-pressure-on-companies-to-act/): The article explains the German NIS2 Implementation and Cybersecurity Strengthening Act, passed by the Bundestag on 13 November 2025, and its effects on affected organisations. Swiss GRC describes how its GRC Toolbox supports NIS2 compliance. - [Rethinking cyber resilience through the lens of NIS2](https://swissgrc.com/ar/rethinking-cyber-resilience-through-the-lens-of-nis2/): The article explains how NIS2 shifts European cybersecurity from compliance to resilience, covering the 24-hour reporting rule, Swiss equivalents and Kessler maturity data. SwissGRC® presents its GRC Toolbox as support for operationalizing NIS2. - [What Third-Party Cyber Risk Management can learn from established security functions](https://swissgrc.com/ar/what-third-party-cyber-risk-management-can-learn-from-established-security-functions/): SwissGRC erklärt in diesem Beitrag, was Third-Party Cyber Risk Management (TPCRM) von Standards der physischen Sicherheit und der Lieferkettensicherheit lernen kann. Er richtet sich an CISOs und Risikoberater. - [FINMA overhauls insolvency rules for financial institutions](https://swissgrc.com/ar/finma-overhauls-insolvency-rules-for-financial-institutions/): SwissGRC explains the new FINMA Insolvency Ordinance of 1 October 2025, which replaces three rulebooks for the failure of banks and other financial institutions. It addresses boards and management and shows how integrated GRC supports resolution readiness. - [Integrated BCM: Building Resilience and Competitive Strength](https://swissgrc.com/ar/integrated-business-continuity-bcm-building-resilience-and-competitive-strength/): The article explains how integrating business continuity with risk, compliance, cyber and third-party oversight builds operational resilience. SwissGRC shows how governance and technology turn regulation into strategic strength. - [DORA Compliance: GRC as a Competitive Advantage](https://swissgrc.com/ar/dora-compliance-grc-as-a-competitive-advantage/): The article explains the EU Digital Operational Resilience Act (DORA) for financial institutions, BaFin's two sets of guidance and the information register. SwissGRC® shows how GRC software supports compliance. - [AI Governance in India: Inside the 4-Tier Model](https://swissgrc.com/ar/ai-governance-in-india-inside-the-4-tier-model/): The article explains India's AI Governance Framework (2025) of the National Cyber and AI Centre, including its risk classes and four-tier governance model. It shows how enterprises can apply it with the AI GRC Module from SwissGRC®. - [GRC Industry Insights for 2025: What’s Actually Shifting?](https://swissgrc.com/ar/grc-industry-insights-for-2025-whats-actually-shifting/): SwissGRC® beschreibt in diesem Beitrag fünf Entwicklungen, die Governance, Risk und Compliance (GRC) 2025 prägen. Der Beitrag richtet sich an Geschäftsleitungen, Compliance- und Risikoverantwortliche. - [Operational Resilience in 2025: From Regulatory Mandate to Strategic Muscle](https://swissgrc.com/ar/operational-resilience-in-2025-from-regulatory-mandate-to-strategic-muscle/): The article explains how operational resilience has become a board-level priority in 2025, driven by regulation such as DORA, and what this means for GRC programs. It describes how the SwissGRC platform supports organizations with these requirements. - [Governing AI in the Era of Intelligent Risk: What GRC Professionals Need to Know](https://swissgrc.com/ar/ai-governance-in-the-era-of-intelligent-risk-what-grc-professionals-need-to-know/): This article explains why AI governance matters for GRC professionals, which challenges teams face, and what they look for in a solution. It shows how the SwissGRC AI GRC Module adds AI oversight to existing risk and compliance programs. - [TPRM under new rules: EBA, DORA and MaRisk explained](https://swissgrc.com/ar/tprm-under-new-rules-eba-dora-and-marisk-explained/): The article explains how the EBA Guideline, DORA and the expected MaRisk revision change third-party risk management (TPRM) for financial institutions, based on Deggendorf Note 2025/06. SwissGRC® presents its modular TPRM solution as an alternative to Excel. - [Looking back on our 2025 summer event: Montreux as a place for exchange, strategy, and team culture](https://swissgrc.com/ar/looking-back-on-our-2025-summer-event-montreux-as-a-place-for-exchange-strategy-and-team-culture/): Swiss GRC, a governance, risk and compliance software provider based in Lucerne, looks back on its 2025 summer event in Montreux. The two-day event combined a CEO presentation, a corporate culture workshop and team activities for the whole team. - [Review of SWISS GRC DAY 2025: GRC as a strategic compass in dynamic times](https://swissgrc.com/ar/review-of-swiss-grc-day-2025-grc-as-a-strategic-compass-in-dynamic-times/): Review of SWISS GRC DAY 2025, held on May 14 at the Radisson Blu Hotel at Zurich Airport. SwissGRC summarizes the talks on crisis management, supply chain cyber risk, AI governance, internal audit and GRC culture for GRC professionals. - [FINMA on Artificial Intelligence: Widespread Use, Limited Governance](https://swissgrc.com/ar/finma-on-artificial-intelligence-widespread-use-limited-governance/): The article summarizes FINMA's AI survey of the Swiss financial market: AI is widely used, but governance lags behind. SwissGRC explains how its AI GRC Module embeds AI risks into existing GRC structures of banks and insurers. - [Global Risks Report 2025: A GRC perspective on the World Economic Forum’s Insights](https://swissgrc.com/ar/global-risks-report-2025-a-grc-perspective-on-the-world-economic-forums-insights/): Swiss GRC summarizes the WEF Global Risks Report 2025 from a GRC perspective. The article is for business and public leaders and shows how integrated GRC frameworks help address geopolitical, environmental and technological risks. - [Basel III from 2025: What the Finalization Means for Banks](https://swissgrc.com/ar/basel-iii-from-2025-what-the-finalization-means-for-banks/): SwissGRC explains the final Basel III standards, which take effect in Switzerland on January 1, 2025. The article covers the output floor, the Standardized Measurement Approach, loss data requirements and recommended steps for banks. - [Ensuring Healthcare Resilience with Governance, Risk & Compliance (GRC)](https://swissgrc.com/ar/ensuring-healthcare-resilience-with-governance-risk-compliance-grc/): The article describes five challenges hospitals face in governance, risk and compliance (GRC) and how a structured GRC strategy addresses them. It targets healthcare organisations and comes from SwissGRC, a GRC software provider based in Lucerne. - [FINMA Risk Monitor 2024: Addressing Cyber Threats and Market Volatility](https://swissgrc.com/ar/finma-risk-monitor-2024-addressing-cyber-threats-and-market-volatility/): The article summarizes the FINMA Risk Monitor 2024, which names nine key risks for Swiss financial institutions, including cyber threats. SwissGRC explains how integrated GRC frameworks, automation and scenario planning support resilience. - [GRC as a Business Enabler: Why Technology is Essential](https://swissgrc.com/ar/grc-as-a-business-enabler-why-technology-is-essential/): SwissGRC erklärt in diesem Artikel, wie GRC-Software Compliance von isolierten Einzelprozessen zu einem strategischen Nutzen macht. Er richtet sich an Finanz, Versicherungs, Gesundheits und öffentliche Organisationen. - [Embedding Risk in Corporate DNA: Lessons from FERMA Global Risk Manager Survey Report 2024](https://swissgrc.com/ar/embedding-risk-in-corporate-dna-lessons-from-ferma-global-risk-manager-survey-report-2024/): This SwissGRC article summarizes the FERMA Global Risk Manager Survey Report 2024 for risk managers. It covers ESG risk, digital tools and cybersecurity, and argues that risk management should be a strategic part of corporate culture rather than a compliance exercise. - [From Awareness to Action: How GRC Integration Strengthens Cyber Resilience](https://swissgrc.com/ar/from-awareness-to-action-how-grc-integration-strengthens-cyber-resilience/): Swiss GRC explains how organizations turn cybersecurity awareness into action by integrating cybersecurity into a unified GRC platform. The article covers NIS2, DORA, third-party risk and business continuity for risk and IT teams. - [Chief Risk Officers Outlook 2024: Navigating Risks in a Volatile Landscape](https://swissgrc.com/ar/chief-risk-officers-outlook-2024-navigating-risks-in-a-volatile-landscape/): SwissGRC® fasst in diesem Blogbeitrag das Chief Risk Officers Outlook 2024 des World Economic Forum zusammen, für Risikoverantwortliche und Führungskräfte. Er behandelt geopolitische, wirtschaftliche und Cyberrisiken sowie die Rolle der CROs und empfiehlt eine integrierte GRC-Plattform. - [Register of information according to DORA: What is it and how to create it correctly?](https://swissgrc.com/ar/register-of-information-according-to-dora-what-is-it-and-how-to-create-it-correctly/): The article explains the DORA register of information, a central database of a financial company's contracts with ICT third-party providers, and how to create it in four steps. SwissGRC recommends a tool-based solution instead of Excel. - [Pathologists vs. Economists](https://swissgrc.com/ar/pathologists-vs-economists/): The SwissGRC article argues that analytics in governance, risk and compliance rely too heavily on past data. It describes the Understand Your Counterpart (UYC) approach, which adds present, real-time data to produce early warning signals. - [Top 2024 Trends in Governance, Risk & Compliance (GRC)](https://swissgrc.com/ar/top-2024-trends-in-governance-risk-compliance-grc/): SwissGRC® presents its 2024 GRC Trends Report on AI and automation, integrated GRC platforms, cybersecurity, supply chain resilience and ESG. It addresses leaders and GRC professionals who want to adapt their risk and compliance frameworks. - [GCC GRC Day 2024: Navigating the Complexities of GRC in the Middle East](https://swissgrc.com/ar/gcc-grc-day-2024-navigating-the-complexities-of-grc-in-the-middle-east/): SwissGRC reports on the first GCC GRC Day, held on May 22, 2024 at Conrad Dubai for GRC professionals from the Gulf Cooperation Council. The recap covers the keynotes, the GRC Toolbox with 12 modules and an expert panel. - [The GRC Evolution driven by its natively inherited privilege](https://swissgrc.com/ar/the-grc-evolution-driven-by-its-natively-inherited-privilege/): This article by SwissGRC explains how Next-Gen GRC (Governance, Risk and Compliance) differs from traditional approaches. It describes five characteristics: adequacy, relevancy, actionability, timeliness and forward-looking insights. It addresses GRC practitioners. - [The EU's AI Dilemma: Innovation or Over-Regulation?](https://swissgrc.com/ar/the-eus-ai-dilemma-innovation-or-over-regulation/): SwissGRC explains the EU AI Act and the tension between innovation and regulation. It covers self-regulation for Foundation Models, the link to the GDPR and the global Brussels Effect, and why GRC frameworks matter for companies. - [Review: Webinar on the new Information Security Act](https://swissgrc.com/ar/review-webinar-on-the-new-information-security-act/): SwissGRC blickt auf sein Webinar zum Informationssicherheitsgesetz (ISG) zurück, das am 1. Januar 2024 in Kraft tritt. Es erklärt die rechtlichen Anforderungen und zeigt in einer Live-Demo, wie die GRC Toolbox die Umsetzung von ISG und ISV unterstützt. - [Federal Council brings ISG and ordinance law into force on January 1, 2024](https://swissgrc.com/ar/federal-council-brings-isg-and-ordinance-law-into-force-on-january-1-2024/): The Federal Council sets January 1, 2024 as the date the Information Security Act (ISG) enters into force. The article covers the new ordinances and the ISMS obligation for federal offices, and how Swiss GRC supports ISG/ISV compliance with its GRC platform. - [Federal Act on Information Security (ISG)](https://swissgrc.com/blog/2023/05/24/staerkung-der-digitalen-resilienz-das-informationssicherheitsgesetz-des-bundes-isg/): This SwissGRC® blog post explains the Swiss Federal Act on Information Security (ISG), which regulates information and IT security for federal authorities and organizations. It also covers the planned cyber attack reporting obligation. - [SWISS GRC DAY 2023: Review of this year's topics](https://swissgrc.com/blog/2023/05/08/swiss-grc-day-2023-ruckblick-auf-die-diesjahrigen-themen/#new_tab): This blog post by SwissGRC® looks back on the Swiss GRC Day 2023, an event for people interested in governance, risk and compliance. It summarises the event's focus on expertise, best practices, networking and collaboration. - [Current initiatives on climate-related financial risks](https://www.finextra.com/blogposting/23350/current-initiatives-on-climate-related-financial-risks#new_tab): The post summarizes a FINMA supervisory notice on climate risk disclosure that targets leading Swiss banks and insurance companies. It is relevant for financial institutions and risk teams. It is listed by Swiss GRC AG, a GRC software provider in Lucerne. - [ESG Risk Management: Trend or Necessity?](https://hub.hslu.ch/financialmanagement/2022/08/22/esg-risk-management-modeerscheinung-oder-notwendigkeit/#new_tab): Der Fachbeitrag von Prof. Dr. Stefan Hunziker (HSLU IFZ) und Yahya Mohamed Mao (SwissGRC) erklärt, warum ESG-Risk Management für Unternehmen notwendig ist und welche Herausforderungen es bringt. Er zeigt, wie ESG-Risiken in das bestehende Risikomanagement integriert werden. - [ISMS: People, processes and technology are crucial](https://swissgrc.com/ar/isms-people-processes-and-technology-are-crucial/): This SwissGRC article explains what an information security management system (ISMS) is, which benefits it offers and why emerging technologies make security risks more complex. It addresses security professionals and business leaders. - [World Day for Safety and Health at Work](https://swissgrc.com/ar/welttag-fur-sicherheit-und-gesundheit-am-arbeitsplatz/): This article explains the World Day for Safety and Health at Work on April 28 and shows why governance, risk and compliance (GRC) matters for employee well-being. Swiss GRC also describes its own work culture and gives tips for staying healthy at work. ## موارد قابلة للقراءة آليًا - [المحتوى الكامل](https://swissgrc.com/ar/llms-full.txt): جميع الصفحات بصيغة Markdown في ملف واحد - [Sitemap](https://swissgrc.com/ar/sitemap.xml): جميع الروابط القابلة للفهرسة