As a national research center of international standing, the Paul Scherrer Institute (PSI)<\/a> is part of the ETH Domain under the supervision of the Swiss Confederation. In this role, the Institute bears responsibility not only for scientific excellence but also for ensuring safe, compliant, and transparent governance.<\/p>\n\n\n\n Before the project began, risk management<\/a> and internal control<\/a> activities were largely manual \u2014 decentralized spreadsheets and multiple data silos characterized the landscape. The desire for a structured and auditable solution grew steadily within the compliance function. Additionally, the opportunity to leverage synergies with other institutions within the ETH Domain \u2014 some of which were already using Swiss GRC solutions \u2014 played a role in PSI\u2019s decision to evaluate Swiss GRC.<\/p>\n\n\n\n <\/p>\n\n\n\n PSI set out to establish a digitalized and structured representation of its internal risk management, compliance, and control processes with the following goals:<\/p>\n\n\n\n <\/p>\n\n\n\n At the outset, PSI considered joining an existing GRC Toolbox instance already in use by another ETH Domain institution. However, a joint analysis soon revealed that this approach would involve too many limitations and too little flexibility. In close coordination, it was therefore decided to establish a dedicated instance for PSI, tailored to the specific needs of the Institute.<\/p>\n\n\n\n Today, PSI actively uses the modules for Risk Management (RM), Internal Control System (ICS), Compliance<\/strong>, and IT Security Management<\/strong>. Three of the four modules include targeted customer-specific extensions beyond the standard version. A key element was the technical integration with SAP Signavio<\/strong>, particularly within the ICS module, to leverage synergies between existing process management and the internal control system \u2014 thereby avoiding duplicate documentation.<\/p>\n\n\n\n While the implementation of this interface proved more complex than initially anticipated, it was successfully realized through phased deployment and direct, solution-oriented coordination among all stakeholders \u2014 professionally guided by Michael Niedermann<\/strong>, Lead Consulting Europe at Swiss GRC.<\/p>\n\n\n\n <\/p>\n\n\n\n <\/p>\n\n\n\n With the GRC Toolbox from Swiss GRC, PSI today benefits from:<\/p>\n\n\n\n <\/p>\n\n\n\n The solution has significantly enhanced transparency, governance, and efficiency across all relevant areas.<\/p>\n\n\n\n <\/p>\n\n\n\n By implementing the GRC Toolbox from Swiss GRC, PSI has laid the foundation for a professional and scalable governance system. The decisive factors for this choice included Swiss GRC\u2019s proven expertise in the public sector and academic environment, the modular architecture allowing for phased implementation, and the company\u2019s strong consulting and implementation capabilities.<\/p>\n\n\n\n The solution supports PSI not only in maintaining internal standards but also in sustainably strengthening institutional resilience \u2014 within an organization that combines scientific excellence with a strong commitment to transparent and reliable governance.<\/p>\n","protected":false},"excerpt":{"rendered":" With around 2,300 employees and an annual budget of CHF 460 million, the Paul Scherrer Institute (PSI) is Switzerland\u2019s largest research institute for natural and engineering sciences. It hosts the country\u2019s major large-scale research facilities and, as part of the ETH Domain, forms a key pillar of the Swiss research landscape. PSI conducts cutting-edge research in future technologies, energy and climate, health innovation, and the fundamental principles of nature.<\/p>\n","protected":false},"author":8,"featured_media":54851,"menu_order":0,"template":"","format":"standard","meta":{"_acf_changed":true,"inline_featured_image":false,"_eb_attr":"","_links_to":"","_links_to_target":""},"categories":[],"tags":[],"class_list":["post-54850","success_story","type-success_story","status-publish","format-standard","has-post-thumbnail","hentry"],"acf":[],"aioseo_notices":[],"aioseo_head":"\n\t\t\n\t\n\t\n\t\n\t\n\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\tObjectives<\/h2>\n\n\n\n
\n
Implementation and collaboration<\/h2>\n\n\n\n
Challenges and lessons learned<\/h2>\n\n\n\n
Challenge<\/strong><\/th> Solution Approach<\/strong><\/th><\/tr><\/thead> Desire to use an existing instance from another ETH Domain institution<\/td> Analysis revealed limitations \u2192 decision to implement a dedicated PSI instance<\/td><\/tr> Complexity of SAP Signavio integration<\/td> Close technical coordination and phased implementation<\/td><\/tr> Need for targeted module extensions<\/td> Flexible customization at module level<\/td><\/tr><\/tbody><\/table><\/figure>\n\n\n\n Key results and added value<\/h2>\n\n\n\n
\n
Conclusion<\/h2>\n\n\n\n