# Bilan : webinaire sur la nouvelle loi sur la sécurité de l'information > Swiss GRC reports on its webinar about the Swiss Information Security Act (ISG) and Ordinance (ISV), which take effect on January 1, 2024. It covers the legal requirements and shows how the GRC Toolbox supports organizations in implementing them. - URL: https://swissgrc.com/fr/bilan-webinaire-nouvelle-loi-securite-information/ - Éditeur: SwissGRC® - Publié: 2023-12-07 - Dernière mise à jour: 2023-12-07 ## Points clés - The Swiss Federal Council decided to bring the Information Security Act (ISG) and the corresponding ordinance (ISV) into force on January 1, 2024. - Reto Zbinden, lawyer and CEO of Swiss Infosec AG, introduced the ISG, explained what ISG compliance means and summarized the objectives of the law. - Besfort Kuqi, CEO and co-founder of Swiss GRC, demonstrated the GRC Toolbox as an ISMS solution for implementing the ISG and ISV requirements. - Swiss GRC presented a GRC(O) framework that covers information security operations under Art. 25, 27, 28 and 29 of the ISG. - In governance, the GRC Toolbox supports setting up an information security management system (ISMS) in accordance with Art. 5 of the ISG. - The slides of both speakers are available as PDF downloads, and the webinar recording is available in German. With the Swiss Federal Council’s decision to bring the Information Security Act (ISG) and the corresponding ordinance into force on January 1, 2024, Switzerland is sending a clear signal for increased information security and cyber security. In this context, Swiss GRC organized a webinar that gave participants an insight into the upcoming legal changes as well as practical implementation options through a live demonstration of the GRC Toolbox. The [imminent entry into force](https://swissgrc.com/bundesrat-setzt-isg-und-verordnungsrecht-per-1-januar-2024-in-kraft/) at the beginning of the new year of the Information Security Act (ISG) and the Information Security Ordinance (ISV) marks a turning point in information security that will occupy numerous organizations intensively in the coming months and years. With this in mind, the webinar launched by Swiss GRC aimed to provide crucial information and insights on how to effectively meet the key requirements of the ISG and ISV. Besfort Kuqi, CEO and co-founder of Swiss GRC, opened the webinar and got the participants in the mood for the program. Insight into the significance and scope of the Information Security Act (ISG) Reto Zbinden, Lawyer and CEO of [Swiss Infosec AG](https://www.infosec.ch/), gave an introduction to the Information Security Act (ISG). He discussed the key aspects of the law, explained what it means to be ISG-compliant and summarized the objectives of the ISG. In doing so, he addressed the key requirements, processes and evidence needed for effective implementation. Finally, he made it clear that the increasing pressure to implement security measures is driving organizations to move away from traditional methods such as Excel or Word and instead use specialized tools to meet the complex requirements. > [Link to the presentation of Reto Zbinden](https://swissgrc.com/wp-content/uploads/2023/12/Webinar_Informationssicherheitsgesetz_RetoZbinden.pdf) A GRC(O) framework for successful ISG/ISV implementation In the second part of the webinar, Besfort Kuqi used a product demo to show how the Information Security Act (ISG) and the Information Security Regulation (ISV) can be implemented with the help of software such as the GRC Toolbox. As a proven ISMS industry solution, it supports organizations in implementing the ISG/ISV requirements. Besfort Kuqi not only spoke about the classic GRC approach, but went one step further and presented a GRC(O) framework to highlight the support of the GRC Toolbox for information security operations in accordance with Art. 25 (review of protection requirements and circle of authorized persons), Art. 27 (security procedures), Art. 28 (assignment to the security levels « high protection » and « very high protection ») and Art. 29 (security measures) of the ISG. ![GRC(O)-Framework - Softwareunterstützung bei der ISG/ISV-Umsetzung](https://swissgrc.com/wp-content/uploads/2023/12/GRCO-Framework-min-scaled.jpg) GRC(O) Framework © Swiss GRC AG 2023 As the graphic above makes clear, the software offers comprehensive support in the area of governance, in particular in setting up an information security management system (ISMS) in accordance with Art. 5 of the ISG. In the area of risk management, the functionality of the software includes important aspects such as the inventory of protected objects (Art. 7), coordination with third parties (Art. 10) and incident management (Art. 12). In the area of compliance, the software provides valuable support in the maintenance of legal bases and contractual obligations (Art. 6), in training and awareness-raising measures (Art. 11) and in the planning and implementation of controls and audits (Art. 13). > [Link to the presentation of Besfort Kuqi](https://swissgrc.com/wp-content/uploads/2023/12/ISG-Webinar_BesfortKuqi.pdf) Watch the webinar recording now (in German) ## Questions fréquentes ### Wann tritt das Informationssicherheitsgesetz (ISG) in Kraft? The Swiss Federal Council decided to bring the Information Security Act (ISG) and the Information Security Ordinance (ISV) into force on January 1, 2024. ### Who spoke at the Swiss GRC webinar on the Information Security Act? Besfort Kuqi, CEO and co-founder of Swiss GRC, opened the webinar and gave the product demonstration. Reto Zbinden, lawyer and CEO of Swiss Infosec AG, gave the introduction to the ISG. ### How can the ISG and ISV be implemented with software? The webinar showed the GRC Toolbox as an ISMS solution that supports the ISG/ISV requirements. Its functions cover governance, risk management and compliance, for example the inventory of protected objects (Art. 7), incident management (Art. 12) and the planning of controls and audits (Art. 13). ### Why do organizations move away from Excel and Word for ISG compliance? According to Reto Zbinden, the increasing pressure to implement security measures drives organizations to use specialized tools. They are needed to meet the complex requirements of the ISG. ### Is there a recording of the ISG webinar? Yes, the page offers the webinar recording in German. The presentations of Reto Zbinden and Besfort Kuqi are also linked as PDF files.