System-Enabled, Cross-Functional Risk Management at Visana with Swiss GRC

René Najer
René Najer Head of Risk and Quality Management, Visana
System-Enabled, Cross-Functional Risk Management at Visana with Swiss GRC
“
The development and expansion phase associated with the implementation of the Swiss GRC Toolbox was intensive. Significant progress was achieved within a short period of time. The prerequisites for a system-supported, transparent, and cross-functional risk management framework have now been established.

Visana is one of the leading Swiss health and accident insurance providers. The company offers health, accident, supplementary, and property insurance for both private and corporate customers. Overall, Visana serves around 900,000 private customers and approximately 17,000 corporate clients. Its headquarters are located in Bern, with around 1,400 employees working in approximately 50 agencies across Switzerland. The total premium volume exceeds CHF 4 billion.

Discover how Visana implemented the Swiss GRC Toolbox to establish a system-supported, transparent, and cross-functional risk management framework.

Initial situation and objectives

Visana was faced with the challenge of harmonizing its GRC landscape and mapping it within a central system solution. A key objective was to strengthen the interaction between existing governance and control systems and to consolidate the previously heterogeneous storage structures into a unified environment.

With the implementation of the Swiss GRC Toolbox, a central platform was established on which all risk-relevant information is systematically captured, managed, and documented. Cross-functional collaboration improved significantly thanks to standardized folder structures, clear user guidance, and transparent processes.

Visana pursued the goal of further developing its GRC system. The focus was on replacing parallel data repositories and introducing largely automated processes for risk assessment. The implementation of an annual cut-off was also important in order to enable transparent and system-supported comparisons.

Implementation and collaboration

Following an evaluation, Visana decided to choose Swiss GRC. The decisive factors were the user-friendliness and clarity of the GRC Toolbox, the high level of flexibility in integrating existing processes, and the future-proof architecture of the solution.

In collaboration with the Swiss GRC consulting team, the new GRC modules were gradually implemented and successfully put into operation.

Challenges and lessons learned

ChallengesSolution approach
Different GRC requirementsModular implementation and iterative expansion
Complexity of regulatory requirementsUse of configured standards and customizable templates

Key outcomes and benefits

Holistic GRC on one platform: All core GRC processes are integrated into a single solution and documented in a traceable and auditable manner.

Traceability and audit readiness: Clear structures and system-supported processes enable easier audits and reviews.

Scalability: The modular design allows flexible further development according to evolving needs.

Increased efficiency: Standardization and digitalization of previously separate processes.

Similar stories

Information security with a system: Helvetia’s journey to an ISMS at scale
Insurance

Information security with a system: Helvetia’s journey to an ISMS at scale

Helvetia is a leading Swiss insurance group headquartered in St. Gallen. With around 14,400 employees, the company operates in multiple European markets…

Bruno Freschi Bruno Freschi
Group CISO, Helvetia
Read the story
Baloise optimizes ISMS and IT risk management with Swiss GRC
Insurance

Baloise optimizes ISMS and IT risk management with Swiss GRC

Baloise is a leading Swiss all-lines insurer offering comprehensive insurance solutions and services for private individuals and companies.

Dominik Mutter Dominik Mutter
Senior Information Security Officer, Baloise
Read the story
Swiss GRC technology for modern risk and control management at Mobiliar
Insurance

Swiss GRC technology for modern risk and control management at Mobiliar

Mobiliar occupies a leading position in the Swiss market and is one of the largest property insurers in Switzerland.

Christian Grundt Christian Grundt
Head of Risk Controlling & Regulatory Affairs, Mobiliar
Read the story
Get in touch

Ready to write your own success story?

Talk to us about your governance, risk and compliance requirements. No form, just a conversation with someone who knows your industry.