DSV Group uses BIC GRC Solutions from GBTEC

Prior to the implementation of the BIC GRC Solutions, the DSV Group relied on Microsoft Office to create and process reports. In particular, the second line of defense often faced the challenges of coordinating and aligning the documentation and keeping it up to date. On account of this situation and the strong compliance-driven focus of the banking group, a decision was made many years back to standardize reporting and simplify the decision-making process for management. An official requirements list, which was created in close cooperation with the executive team, provided the basis for the selection process among multiple software vendors.

Since the complex GRC processes in the DWV Group were already organized in a structured management system, the adaptability of the software was one of the group’s main requirements. The new software needed to fully map, reflect but also optimize the existing processes, which necessitates a high degree of flexibility from the software.

The BIC GRC Solutions met these requirements without compromise, which impressed the selection team in this extremely important aspect. The implementation team at GBTEC also brought the vast business and technological knowhow that was required. Thanks to the comprehensive optimization of data consistency, the group ensured a successful, seamless migration.

The DSV Group began the evaluation stage of the software selection process back in 2013 with the goal of replacing the documentation in Microsoft Office within the scope of information security. This would ensure that its mother company, Deutscher Sparkassen Verlag, obtained ISO 27001 certification, which it has maintained since 2014. During the initial concept design of the implementation project, the DSV Group placed a strong emphasis on interconnecting the individual disciplines of information security, data protection and internal audits.

The implementation in BIC GRC Solutions (formerly known als risk2value), which began in the fall of 2014, was fully completed by October 2015. Ongoing changes and improvements were made to the software in the following years. By the spring of 2018, the DSV Group started with the implementation of an integrated enterprise risk management solution, which was to be completed over the course of a year. During this phase, the company focused on self-service, which worked extremely well due to the flexibility of the tool. This created a tight integration among the risks from enterprise risk, information security, data protection as well as quality, environmental and business continuity management. Since that time, the group has been able to create common risk values that are communicated to the management team and can be used as the foundation for evidence-based management decisions. The internal group feedback regarding the implementation process was very positive.

The software has been adapted on a regular basis to reflect changing corporate structures. An enterprise rollout of BIC GRC Solutions began in the spring of 2020 while the implementation of the internal IT control system in BIC GRC Solutions started that same year. A permanent control management, which was driven by external audits and would not have been possible without software support, was implemented as part of this project.