Until recently, ewl Energie Wasser Luzern<\/a> relied on Microsoft Excel and Atlassian Jira for key areas of corporate governance such as risk management, internal control system (ICS), IT security management, and data protection. The limited automation capabilities\u2014especially in Excel\u2014resulted in high manual effort, increased risk of errors, and a lack of integration between departments.<\/p>\n\n\n\n Given the company\u2019s diverse business areas and the constantly evolving market and regulatory landscape, integrated corporate risk management had become increasingly complex. This demanded continuous risk monitoring, effective implementation of protective measures, and strict adherence to data protection and security requirements.<\/p>\n\n\n\n In light of rising cyber threats, ewl placed particular emphasis on continuously enhancing the protection of sensitive data and identifying and implementing new security measures at an early stage.<\/p>\n\n\n\n <\/p>\n\n\n\n The goal was to implement the GRC Toolbox as a central, integrated solution for risk management<\/a>, ICS<\/a>, data protection<\/a>, and IT security<\/a>. Standardized, software-supported processes were expected to streamline the management of measures and controls. At the same time, Excel-based solutions were to be replaced, an information security management system (ISMS) in line with the Swiss ICT minimum standard established, and a business continuity management (BCM) system\u2014including an IT emergency plan\u2014introduced. Further objectives included significantly improving the efficiency of audits and reviews, reducing manual workloads, minimizing sources of error, and enabling transparent reporting on GRC activities\u2014always with the aim of ensuring compliance with applicable standards and regulations.<\/p>\n\n\n\n <\/p>\n\n\n\n The decision in favor of the GRC Toolbox was driven by its user-friendliness, clear structure, and intuitive interface. A decisive factor was the ability to independently adapt and configure reports, input forms, and action plans, while managing multiple GRC areas centrally in one platform.<\/p>\n\n\n\n The implemented modules include Risk Management (RM), Internal Control System (ICS), Business Continuity Management (BCM), Information Security Management System (ISMS), and Data Protection<\/strong>. Together, they form an integrated system for identifying, assessing, and managing risks, ensuring effective controls, and meeting regulatory requirements in both information security and data protection.<\/p>\n\n\n\n In collaboration with Swiss GRC\u2019s consulting team\u2014particularly Senior GRC Consultant Daniele Fiasco<\/strong>\u2014ewl experienced a high level of expertise, reliability, and mutual trust. This strong foundation played a decisive role in the project\u2019s success.<\/p>\n\n\n\n <\/p>\n\n\n\n Despite an ambitious schedule, the project was completed successfully and on time. Cooperation between the ewl and Swiss GRC teams was seamless and solution-focused throughout.<\/p>\n\n\n\n Close coordination and the implementation partner\u2019s in-depth expertise made it possible to address specific requirements\u2014such as customized report templates\u2014flexibly and efficiently. Even for complex issues, practical solutions were found quickly, without any friction or delays.<\/p>\n\n\n\n <\/p>\n\n\n\n With the introduction of the GRC Toolbox, ewl fundamentally transformed its company-wide approach to governance, risk, and compliance. For the first time, previously separate areas such as ICS, risk management, data protection, information security, and business continuity management were consolidated into a single, centralized solution.<\/p>\n\n\n\n The results: clearly structured processes, standardized workflows, and significantly reduced operational effort. What was once characterized by manual work and siloed applications is now fully digitalized, transparent, and easy to manage.<\/p>\n\n\n\n The new solution enables systematic implementation of regulatory and internal standards, early identification of risks, and targeted responses to developments\u2014especially in security-critical areas such as protecting sensitive data.<\/p>\n\n\n\n A key success factor was partnering with a regional provider. As a Lucerne-based company, Swiss GRC not only delivered a powerful technology solution but also impressed with its local presence, strong consulting expertise, and deep understanding of ewl\u2019s challenges. This combination of local roots and professional excellence greatly contributed to the successful implementation and strengthened trust in the solution.<\/p>\n","protected":false},"excerpt":{"rendered":" As Lucerne\u2019s energy and water service provider, ewl supplies the region with electricity, water, gas, heat, and telecommunications\u2014reliably and sustainably. With around 400 employees, ewl ensures a secure energy future and is actively committed to renewable energy and innovative energy solutions.<\/p>\n","protected":false},"author":8,"featured_media":54099,"menu_order":0,"template":"","format":"standard","meta":{"_acf_changed":false,"inline_featured_image":false,"_eb_attr":"","_links_to":"","_links_to_target":""},"categories":[],"tags":[],"class_list":["post-54097","success_story","type-success_story","status-publish","format-standard","has-post-thumbnail","hentry"],"acf":[],"aioseo_notices":[],"aioseo_head":"\n\t\t\n\t\n\t\n\t\n\t\n\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\tObjectives<\/h2>\n\n\n\n
Approach and collaboration<\/h2>\n\n\n\n
Project challenges<\/h2>\n\n\n\n
Key results and impact<\/h2>\n\n\n\n