GALA GROUP

Coordination and implementation on several continents

Due to many international locations spread over three continents, the Gala Group faced a very particular challenge. A qualitatively equivalent ISMS had to be implemented and implemented for numerous spatially and legally separated entities at all locations.

The difficulty was to create a central overview and uniform documentation for all entities in the different countries. In particular, the area of risk management and the processing of security incidents had to be handled centrally so that proactive risk management could be implemented at all locations in the future.

‍

Tailored IT basic protection modelling

Athereon GRC enables the Gala Group to centrally collect and manage all information relevant to basic IT protection from the various legal entities. The common work areas within Athereon GRC ensure a uniform approach among the various teams.

Thanks to automated document management, all employees can access the documentation and guidelines relevant to the audit at any time. The automated workflows within the tool also increase the efficiency, predictability and documentation of GRC/compliance processes.

‍

Centralized management and control

The implementation of Athereon GRC helped Gala Group implement centralized management and control of security standards and compliance.

In particular, reviewing standards and managing risks in real time now make it possible to centrally monitor the many different legal entities. In this way, the individual locations can benefit from each other's learnings and processes.