{"id":48637,"date":"2024-10-07T14:49:01","date_gmt":"2024-10-07T12:49:01","guid":{"rendered":"https:\/\/swissgrc.com\/en\/?post_type=success_story&p=48637"},"modified":"2026-09-16T10:41:35","modified_gmt":"2026-09-16T08:41:35","slug":"baloise-optimizes-isms-and-it-risk-management-with-swiss-grc","status":"publish","type":"success_story","link":"https:\/\/swissgrc.com\/en\/success_story\/baloise-optimizes-isms-and-it-risk-management-with-swiss-grc\/","title":{"rendered":"Baloise optimizes ISMS and IT risk management with Swiss GRC"},"content":{"rendered":"\n

Find out how the Baloise Group was able to successfully harmonize its security standards by introducing the ISMS solution from Swiss GRC throughout the Group – across countries and across the board.<\/h4>\n\n\n\n

Initial situation<\/h2>\n\n\n\n

The Baloise Group<\/a>, headquartered in Basel, is one of the leading insurance and pension providers in Europe. With around 8,000 employees in several countries (Switzerland, Germany, Belgium, Luxembourg and Liechtenstein), a uniform yet flexible solution was required to meet the increasing regulatory requirements, such as DORA, across all countries and to harmonize internal processes at the same time.<\/p>\n\n\n\n

Objectives: Standardization and automation of ISMS processes<\/h2>\n\n\n\n

The main challenge was to find an ISMS solution<\/a> that would meet the diverse requirements of the individual countries as well as Baloise’s internal standards and processes. Flexible adaptation to local requirements was necessary without jeopardizing the overarching standardization of information security processes. In addition, the various needs and priorities of the stakeholders in the different national companies had to be taken into account.<\/p>\n\n\n\n

The ISMS implementation focused on the following processes:<\/p>\n\n\n\n