DE
Discover how Visana implemented the Swiss GRC Toolbox to establish a system-supported, transparent, and cross-functional risk management framework.
Initial situation and objectives
Visana was faced with the challenge of harmonizing its GRC landscape and mapping it within a central system solution. A key objective was to strengthen the interaction between existing governance and control systems and to consolidate the previously heterogeneous storage structures into a unified environment.
With the implementation of the Swiss GRC Toolbox, a central platform was established on which all risk-relevant information is systematically captured, managed, and documented. Cross-functional collaboration improved significantly thanks to standardized folder structures, clear user guidance, and transparent processes.
Visana pursued the goal of further developing its GRC system. The focus was on replacing parallel data repositories and introducing largely automated processes for risk assessment. The implementation of an annual cut-off was also important in order to enable transparent and system-supported comparisons.
Implementation and collaboration
Following an evaluation, Visana decided to choose Swiss GRC. The decisive factors were the user-friendliness and clarity of the GRC Toolbox, the high level of flexibility in integrating existing processes, and the future-proof architecture of the solution.
In collaboration with the Swiss GRC consulting team, the new GRC modules were gradually implemented and successfully put into operation.
Challenges and lessons learned
| Challenges | Solution approach |
| Different GRC requirements | Modular implementation and iterative expansion |
| Complexity of regulatory requirements | Use of configured standards and customizable templates |
Key outcomes and benefits
Holistic GRC on one platform: All core GRC processes are integrated into a single solution and documented in a traceable and auditable manner.
Traceability and audit readiness: Clear structures and system-supported processes enable easier audits and reviews.
Scalability: The modular design allows flexible further development according to evolving needs.
Increased efficiency: Standardization and digitalization of previously separate processes.
