In spring 2019, the Otto Group commissioned the digital service provider T-Systems Alpine with both the technical concept and implementation as well as the integration of a holistic enterprise risk management system (including ICS and compliance) in the T-Systems GRC cloud (governance, risk, and compliance cloud). The goal was to keep the use cases as lean as possible to enable a fast roll-out and onboarding of the users. A decentralized infrastructure was also connected – the GRC cloud. The risk2value software solution in combination with the GRC cloud allows the greatest possible flexibility through customer-specific configuration in the risk2value system standard. T-Systems pursued a dual consulting approach and combined specialist and technical expert advice. In order to provide the customer with the fastest possible results and greater freedom of adaptation, an agile implementation approach with a focus on core functionalities was chosen, which can be successively expanded with later roll-outs.
The cooperation with T-Systems Alpine was very constructive right from the start. The flexibility, quality of the results, and fast implementation particularly impressed us.
The software risk2value from Austrian software company avedos formed the basis of the project. With the GRC cloud, T-Systems Alpine offers a unique solution and is thus the competence center for the GRC field within T-Systems International as well as within the DTAG group. T-Systems was chosen after a tender and two-month test of a prototype (Proof of Value – PoV), which proved the feasibility of the Otto Group’s specific requirements. Decisive factors for choosing T-Systems included its extensive expertise in the field of the GRC cloud and a range of reference customers such as Wienerberger AG and Wiener Städtische Versicherung AG. In order to meet the specified deadline, the minimum viable product of the enterprise risk management system was implemented by the GRC team within a demanding timeline. The launch of the first wave of enterprise risk management at the Otto Group took place in July 2019, and the first data collection in the Group was successfully completed at the end of August. One decisive success factor was the involvement of the relevant stakeholders in the solution development process from the very beginning: early onboarding of the users created a high level of acceptance.
To prepare for the future, companies require four cornerstones: connectivity, cloud and IT infrastructure, security, and digitalization. The cloud can also be used for risk management.