One GRC platform for ONVZ
-
- Client:ONVZ
- Project: One central workspace for risk and compliance
- Role: Jesse, ERM Specialist at ONVZ
ONVZ
“The dashboard helps us keep an overview and respond flexibly to new laws and regulations. It grows with us, and that gives us confidence.”
The challenge
As a Dutch health insurer, ONVZ has spent recent years further professionalising and standardising its risk management and compliance. Around 2019, the need arose to organise these activities more centrally: less fragmentation, one clear way of working and a single place where all risk and compliance information comes together. The organisation was looking for one GRC platform that offered three things: central oversight of risks and controls, supported by one source of information; better collaboration between departments, working in one shared environment instead of separate documents; and a uniform dashboard for everyone involved. That’s where we came in.
The solution
Together with Yellowtail Conclusion, ONVZ brought its GRC activities together on one GRC platform: Key Control Dashboard. Strategic, tactical and operational risk management now sit side by side in one environment. Recently, ONVZ took the next step by adding risk control for data flows, based on data flow diagrams. These diagrams show how ONVZ controls the risks within its data flows.
Strategic risk management
Information security (ISMS), control self-assessments (CSA) and maturity assessments
Tactical risk management
Risks, controls and control frameworks
Operational risk management
Linked directly to processes
The approach
More than 130 ONVZ employees now use Key Control Dashboard. To support them well, we set up a central way of working together, including a user-friendly dashboard for occasional users. We configured Key Control Dashboard to match ONVZ’s own terminology and governance, creating an environment that fits the way its people work. Close collaboration meant the teams validated choices quickly, and users recognised and understood the set-up straight away.
The result
ONVZ now uses Key Control Dashboard across the organisation, set up to fit closely with the way it works. The environment keeps developing in line with new requirements and changing regulations. Thanks to Key Control Dashboard, ONVZ now has:
One central place for all risk and compliance activities
A single way of working for all users
Real-time insight into risks and controls
Including across data flows
Less fragmentation, more calm across the organisation
More efficient collaboration between departments
Looking ahead
Following the “map once, comply with many” principle, ONVZ is extending its set-up to cover new control frameworks. That makes the solution scalable, and keeps it ready for new laws and regulations as they arrive.
