Web applications are susceptible to vulnerabilities

Access control vulnerabilities and the risk of data disclosure are the most widespread security flaws in internally developed web applications. This is shown by a recent analysis by Kaspersky in the period 2021 to 2023.

Kaspersky analysis: The majority (70 percent) of the vulnerabilities found relate to data protection with regard to confidential information such as passwords or credit card data. (Image: www.depositphotos.com)

For the analysis, Kaspersky examined vulnerabilities in web applications developed in-house by companies from the IT, government, insurance, telecommunications, cryptocurrency, e-commerce and healthcare sectors.

The majority (70 percent) of the vulnerabilities found relate to data protection with regard to confidential information such as passwords, credit card data, health records, personal data and confidential business information or access control. The latter allows cyber criminals to bypass website policies and, for example, change or delete data.

In the majority of the applications examined, the experts found a total of several dozen vulnerabilities relating to access control and data protection; many of the highest risk levels were associated with SQL injections. Some of the vulnerabilities analyzed even posed a high risk. For example, 88 percent of all SQL injection vulnerabilities analyzed were high-risk; furthermore, 78 percent were classified as high-risk in the area of weak passwords.

In addition, 22 percent of all web applications examined by Kaspersky had weak passwords. One possible reason for this is that the apps included in the sample may have been test versions and not actual live systems.

Other types of vulnerabilities found and their occurrence in internally developed web applications. (Image: www.kaspersky.de)

Oxana Andreeva, security expert in the Kaspersky Security Assessment team, comments: "The research was carried out taking into account the most common vulnerabilities in web applications developed in-house by companies and their level of risk. Attackers could use them to steal user authentication data or execute malicious code on the server. Each vulnerability has a different impact on business continuity and resilience. Companies should therefore pay attention to security when developing web applications and constantly review them."

Kaspersky recommendations for protecting in-house developed web applications

  • Implement a Secure Software Development Lifecycle (SSDLC).
  • Carry out regular assessments of application safety and take appropriate measures.
  • Monitor the operation of the applications.

Source: www.kaspersky.de

AuditButler AG launches solution for secure license management

Increasing cost pressure and additional legislation make modern software license management essential. AuditButler AG, the new player on the market for license management solutions, offers a solution for companies and authorities of all sizes.

AuditButler AG's solution is aimed at companies and public authorities with 50 or more employees who want to set up their license management cost-effectively. (Image: www.audit-butler.com)

Today's hybrid software inventory - new and used on-prem licenses as well as cloud subscriptions - poses considerable challenges for those responsible in public authorities and companies. What's more, the next software audit, whether conducted by the manufacturer or requested by internal controlling, causes worry lines in the IT department.

However, license management tools are often expensive to uneconomical, especially in relation to the total value of the software inventory. They can rarely be operated by the users themselves and therefore lead to high service costs and dependencies. Well-known tools such as Flexara are mostly aimed at the extremely complex requirements of large companies. The prices for these solutions are therefore correspondingly opaque. Other manufacturers offer "all-round inventory tools", for example, which also inventory licenses from cars to drawing pads. As a rule, there is no know-how about the licensing of Microsoft licenses, for example. Whether expensive or inexpensive - in the end, these tools still have to be supported by Excel.

The intuitive tool impresses with its licensing expertise

AuditButler AG's solution is aimed at companies and public authorities with 50 or more employees who want to set up their license management cost-effectively but lack a secure option with sound licensing expertise, even in the lower price segment. The tool and accompanying optional services such as data onboarding are offered across all sectors - including public authorities - throughout the European Economic Area, initially in German, English and French. 

Ernesto Schmutter, one of the leading thinkers and designers in the European IT trade, is Chairman of the Advisory Board of AuditButler AG. "Thanks to its intuitive usability, AuditButler simplifies license management enormously, and at an affordable price," says the long-standing IT expert. 

It is a web-based tool that is available anytime and anywhere and does not require any pre-installation or system requirements. Users can configure it flexibly according to their own needs and receive an intuitive desktop version that is also optimized for mobile devices. All data is hosted exclusively on German servers, ensuring full data protection compliance. At launch, the tool will focus on Microsoft products, which are already stored in the database as a catalog. The inclusion of other manufacturers is planned, but can also be ordered individually.

AuditButler optimizes the license balance sheet through complete cost and benefit transparency. Savings potentials are identified and all information for license audits, purchases and/or sales is documented accurately and up-to-date and clearly visualized in the AuditButler dashboard. The tool thus creates constant audit readiness. Software asset and IT managers thus avoid a whole series of previously typical barriers, such as a lack of up-to-dateness or the identification of under- and over-licensing. 

The tool automatically organizes and visualizes all forms of licenses. It also archives associated documents such as software contracts, assigns individual software assets to their users or devices and is therefore particularly suitable for companies that want to work in a cost- and resource-optimized manner and at the same time ensure audit security. The full version of the tool starts at 179 euros per year. A free trial version is also available, as is an initial consultation.

Professional managed services with clear added value at transparent costs 

The AuditButler solution can be operated without external support - a core concern of developers and management. For the core phases of license management, AuditButler AG also offers optional Professional Managed Services, which are simply structured and transparently calculated. 

Onboarding training takes place in the form of a short video conference due to the ease of use, but can also take place on site if required. Initial data entry and ongoing data maintenance by experts with license know-how can also be booked as managed services. Customizing services include a wide range of options for customers, including the implementation of SAP interfaces, expansion to other license manufacturers and the development of individual reporting solutions. Other software asset management (SAM) services such as SAM consulting can be commissioned personally. 

Source: www.audit-butler.com

ConSense EXPO 2024: Trends, tools & tips for practiced QM systems

The ConSense EXPO from 16 to 18 April 2024 offers a program on QM and integrated management systems with a focus on data protection, compliance management and AI. External customer contributions and a keynote speech by Urs Meier on "Decisions under pressure" are the highlights.

ConSense EXPO 2024: Fresh QM trends from April 16 to 18, 2024 (Image: www.consense-gmbh.de)

ConSense software news at first hand

The ConSense team will be available at a total of 14 virtual trade fair stands to provide information on ConSense software products, modules and training courses. Trade visitors will receive the latest news about ConSense software, including the Compliance Management module, which will be available soon. For existing customers, exclusive slots are reserved daily between 14:00 and 15:00 for consultations. Live conferences offer the opportunity to delve even deeper into the ConSense software solutions and pick up new tips and tricks to facilitate practical application.

Exciting presentations: How QM benefits from experience from the world of football

The conference program once again includes exciting, useful and entertaining specialist presentations: Urs Meier, former Swiss FIFA referee and ZDF football expert, will draw the line between football and leadership. In his keynote speech "Between the fronts - decisions under pressure", he will explain effective strategies for making smart decisions, even under high pressure, from which the business world can benefit. In the live conferences, QM representatives from fields such as chemicals, insurance, logistics and ERP software will report on the successful introduction and further development of their management systems with the help of ConSense software. The program will focus on various topics, such as the switch to the ConSense portal.

Industry talk and planting trees: Exchange, puzzle and do good

Like an in-person trade fair, the virtual ConSense EXPO also offers space for industry talk. For example, the chat function at the trade fair stands and in the conferences enables participants to talk to experts. Entertainment combined with a good deed is provided by the puzzle competition, in which participants automatically support the "ConSense Qualitrees" project of ConSense GmbH, which supports the planting of trees for more environmental and climate protection as part of a fundraising campaign.

Source and further information on registration: www.consense-gmbh.de

Yokoy receives ISO 27001, ISO 9001, ISO 14001 and eIDAS-QSeal certifications

Yokoy, provider of an AI-driven expense management platform for medium-sized and large companies, is certified to the ISO 27001 standard and offers its customers a holistic approach to security. The certification is intended to confirm that Yokoy is committed to and has successfully implemented a rigorous information security management system (ISMS).

Yokoy was awarded the ISO 27001 certificate in November 2022 and recently successfully renewed it. (Image: www.depositphotos.com)

The ISO 27001 standard is regarded as the leading international security standard that defines the requirements for establishing and maintaining a robust ISMS. Yokoy was first awarded the certificate in November 2022 and it was recently successfully renewed.

"Financial data is one of a company's most precious resources and must be treated with the utmost sensitivity. Finance departments should therefore take comprehensive security precautions to best protect the integrity and confidentiality of this information," says Claudio Berther, Legal Counsel & DPO at Yokoy. "We are proud to be able to offer our customers and partners the highest standard of security with the ISO 27001 certification."

Yokoy combines intelligent company cards, expense management and invoice processing in a single AI-driven platform. For example, the software uses OCR technology to automatically extract important information from receipts, such as vendor name, date and amount. Yokoy's AI technology "reads" the data, assigns it to the correct categories and links it to the corresponding expense report. It is constantly learning. Thanks to a wide range of programming interfaces, the solution integrates seamlessly into the existing IT landscape.

Digital security and data protection have been top priorities at Yokoy from the very beginning. As part of the ISO certification, the company defined clear procedures to ensure who has access to the data and how it is stored. In addition, Yokoy defined processes for business continuity in the event of a disaster or to defend against the main IT security threats (ransomware and malware attacks) and data breaches.

Also certified according to ISO 9001, ISO 14001 and eIDAS

Yokoy also has ISO 9001 and ISO 14001 certification. ISO 9001 demonstrates an effective quality management system that helps Yokoy to meet customer requirements and other product and service quality criteria. ISO 14001 certification confirms that Yokoy identifies, assesses, manages and continuously improves its environmental impact. Yokoy also holds the QSeal certificate in accordance with eIDAS (Regulation on electronic identification and trust services for electronic transactions in the internal market), which confirms the integrity and authenticity of electronic documents and data.

Source: www.yokoy.io

Allianz Trade pay: The new service offering for B2B e-commerce

Actively supporting the B2B e-commerce sector in its rapid growth has been an integral part of the strategy of trade credit insurer Allianz Trade for several years. After developing an e-commerce credit insurance offering real-time protection against non-payment risks for B2B marketplaces, buy now pay later (BNPL) providers and e-commerce merchants, and establishing numerous partnerships with e-commerce players and financial institutions, the company is now going one step further: Allianz Trade is launching Allianz Trade pay.

With Allianz Trade pay, Allianz Trade is introducing a wide range of solutions for all e-commerce players. (Image: www.pixabay.com)

Wide range of proven solutions for e-commerce players

With Allianz Trade pay, the company is introducing a wide range of solutions for all e-commerce players - from credit insurance to instant financing and know your business (KYB) processes. Allianz Trade pay combines new services with existing tools. Firstly, e-commerce credit insurance offers real-time online customer credit, allowing B2B e-merchants to grant their customers payment terms while protecting them from the risk of non-payment.

Secondly, as an instant financing solution for domestic transactions, Allianz Trade's B2B BNPL partners cover the complete BNPL value chain up to instant payment via Allianz Trade's API connection. When a buyer purchases online, the online merchant immediately receives payment for the purchase, while the BNPL provider tracks the buyer's payment. In the event that a buyer is unable to pay, Allianz Trade provides insurance cover to the BNPL partner.

And thirdly, the instant financing solution for multinational companies is part of the existing portfolio. Allianz Trade's proven cross-country and cross-currency instant financing solution for multinational companies works in a similar way to the domestic option, but also involves a financial partner who pays the online retailer for online transactions in real time.

New solutions from Allianz Trade pay

Allianz Trade pay also offers various new solutions such as onboarding buyers. This service is a module for company searches at check-out. It supports online merchants in their KYB process by verifying the buyer's identity using open banking technologies and Allianz Trade's comprehensive database, which contains financial, commercial and strategic information on more than 83 million companies worldwide. Insurance covering fraud risks is also integrated. This service offers online merchants greater security and protects their business from financial loss due to identity theft by fraudsters posing as legitimate businesses. With a simple plugin for businesses using a CMS, all of the solutions described above can be easily set up. Companies simply need to add the plugin to the source code of their B2B e-commerce platform for the solution(s) to go live.

"With Allianz Trade pay, we cover the entire B2B e-commerce value chain, from KYB to payment. We address the needs of the entire ecosystem, from online retailers to BNPL players, banks and marketplaces. Our new solution is aimed at traditional retailers who want to grow their business securely, online marketplace operators who want to strengthen their KYB processes or payment providers who want to offer a new deferred payment option. The strength of Allianz Trade pay lies in our ability to offer complementary services and integrate them seamlessly into payment processes. Allianz Trade pay makes the B2B e-commerce market simpler, more secure, more flexible and more competitive," says François Burtin, Global Head of E-Commerce at Allianz Trade.

"We are convinced that Allianz Trade pay will help the B2B e-commerce market to grow even faster. Trade structures are changing and as the global market leader in trade credit insurance, we want to lead this change in our industry. The possibilities of Allianz Trade pay are limitless. We continue to develop innovative services and solutions, such as live and consolidated views, specific and dynamic dashboards and automatic alerts. B2B e-commerce is constantly growing. With Allianz Trade pay, we offer a solution to actively support the transformation of the trade business in companies," explains Anil Berry, Board Member for Commercial Underwriting, Sales, E-Commerce and Marketing, Allianz Trade.

Source: www.allianz-trade.ch

Six AI trends for IT managers

Generative artificial intelligence (AI) has already led to radical changes - and this was just the beginning. Going forward, IT leaders should prioritize the opportunities and challenges that generative AI presents - from the way you work to how you evaluate talent and interact with customers.

In future, IT managers should prioritize the opportunities and challenges arising from generative AI. (Image: www.pixabay.com)
  1. AI levels out traditional hierarchies: specialists have more opportunities to lead and grow

As a universally available technology, generative AI is leveling out hierarchies. People are increasingly selected according to their skills rather than their professional seniority. The right mix of skills for a project can be found at every level of the organization. Managers must reach all levels of the company equally in order to put together optimal teams in a project-oriented manner. Hierarchies become less important in this scenario, because instead of job title or seniority, a person's (AI) skills determine their "position" within a team.

  1. A new battle for young talent is emerging

The ongoing AI boom brings with it data protection concerns and budget cuts. This is fueling competition for talent in the areas of cyber and software development. At the same time, diversity in the workforce is increasing. A recent study conducted by Cognizant among business and IT decision-makers shows: Almost all (92 percent) of the executives surveyed believe that a highly diverse workforce will be necessary if they rely on generative AI in the future. 94 percent believe that the democratization of technology through generative AI will increase employment opportunities for underrepresented communities.

  1. Soft leadership skills are gaining in importance

As the AI technology landscape is constantly changing, both managers and employees must accept the unknown, evolve with it and recognize the synergies between human intuition and machine intelligence. Successful managers are able to gently help their employees to adapt, upskill and find their place in the new business world - for example through motivation, security, transparency and support.

  1. Specialized and orchestrated AI agents are omnipresent

Numerous agent-based AI systems will come onto the market in 2024. These systems are specifically tailored to certain industries and areas and focus on performing clearly defined tasks and streamlining workflows. The world of specialized AI agent systems will be an increasingly exciting area of application development: we will increasingly see AI agents performing critical and specialized tasks. These include updating CRM systems, analyzing and responding to audio recordings of customer service calls, activating a conversational interface for an ERP system, sustainable land use management or augmenting and improving marketing budget decisions.

  1. Generative AI improves purchasing processing and product range selection across all industries

Take financial services, for example: Generative AI can radically shorten the process of checking customers' creditworthiness and credit standing via specialized institutions, taking the shopping experience to a new level. Customers can get money faster and lenders can grant loans quickly and securely.

In retail, AI enables adaptive business architectures to offer new and rapidly scalable solutions that make omni-commerce, marketing and customer service more intuitive and personalized. For example, customers receive a personalized selection when searching for products, taking into account personal preferences and preferred styles.

  1. Regulated industries can detect fraud more easily and ensure compliance

Companies are increasingly looking to augment current fraud and compliance tools with AI techniques. AI can more easily detect anomalies (such as identifying suspicious activity or gaps between new policies and current implementations) and improve "explainability" (such as generating documentation needed for audit trails). In the financial services industry, generative AI helps companies adapt to changing compliance requirements and better identify potentially fraudulent behavior.

These AI trends show how comprehensively the use of generative AI will change the business world. Many areas that still manage without AI today will use it in the future. AI can relieve people of tedious, administrative and mechanical tasks, but also make highly complex systems controllable. For managers, this means that they don't have to ask themselves whether they can use AI in a particular area, but rather how they can use it.  

About the author: Gregor Bieler - Head of Central Europe at Cognizant.

Source: www.cognizant.com

EU supply chain law as a driving force for sustainability: Swiss companies under pressure

The EU is struggling with the Supply Chain Act, which is aimed at transparency and sustainability in global value chains. Companies, including those in Switzerland, urgently need to address sustainability, as EU laws have a major impact on their supply chains. CNT -Management Consulting analyzes this situation and emphasizes the importance of sustainability for Swiss companies.

The Supply Chain Act, aims for transparency and sustainability in global value chains. (Image: www.depositphotos.com)

The Corporate Sustainability Due Diligence Directive (CSDDD), better known as the EU Supply Chain Act, is currently the subject of much wrangling. After the directive was actually already agreed between negotiators from the Council of Ministers and the EU Parliament at the end of 2023, several countries backed out. They fear competitive disadvantages for European businesses and new bureaucratic burdens. "This directive obliges companies to identify and address environmental and social risks along their supply chain. It aims to promote sustainable business practices and minimize human rights violations and environmental damage," explains Susanne Wagner, Executive Manager at CNT Management Consulting AG. The plan now is to negotiate a new compromise that is supported by everyone so that it can be adopted in due course.

Swiss companies also need to take action

Even if the EU-wide law is on hold for the time being, sustainability should be an integral part of the corporate strategy of Swiss companies. "Even if this law does not yet take effect at EU level, there is increasing pressure from customers, business partners and society to seriously address sustainability issues and to act according to a clear moral compass," Wagner points out. Regardless of the social necessity, EU legislation also plays a role for Swiss companies insofar as the EU member states and, in particular, neighboring countries are Switzerland's most important trading partners.

Sustainability as a competitive advantage

Laws and directives are accompanied by additional obligations, bureaucracy and liability risks. Companies are therefore faced with challenges. However, what may sound like a disproportionate amount of effort at first glance can pay off for many companies at an economic level. "Many companies that originally opted for sustainable procurement due to social expectations are now also recognizing the economic, social and environmental benefits of the switch," reports Wilhelm Heckmann, Managing Director at CNT in Zurich. Among other things, companies benefit from the realization of efficiency gains, the promotion of the company's good reputation and the manufacture of innovative products. "We are observing a clear shift in the way companies think. Sustainability is no longer just seen as a social responsibility, but as a key factor for long-term success and competitiveness," adds Heckmann. He appeals for sustainability to be seen as an opportunity. In order to deal with any challenges, digitalization in particular offers Swiss companies innovative ways to achieve their sustainability goals - from the optimization of production processes to the introduction of sustainable supply chains and the reduction of energy consumption.

Webinar: Sustainability as a relevant part of the supply chain

CNT's online webinar "Sustainability" also covers what companies need to consider when striving for greater sustainability and how they can use sustainability as a competitive advantage. Under this Link companies gain a closer insight into economic, social and entrepreneurial aspects. The webinar is part of a "supply chain trilogy", with the other parts focusing on digitalization and skills.

Source: www.cnt-online.com

Engineers assume responsibility for education

To mark UNESCO World Engineers' Day, a groundbreaking media conference was held on 4 March at the premises of Emch+Berger AG in Bern, organized jointly by suisse.ing, IngCH, SVIN and SIA. Under the motto "Engineers take responsibility for education", important topics relating to the importance of the engineering professions for Swiss society and the economy were highlighted. At the same time, a new initiative was presented that aims to boost the appreciation of the engineering sector and the recruitment of future specialists.

Around 750 books entitled "Rund um Ingenieurwesen - Planung - Technik" will be distributed directly to pupils by engineers in the future. (Image: www.suisse.ing)

Systemic relevance of engineering services and demand for skilled workers

Swiss infrastructure has a replacement value of over CHF 500 billion and forms an essential basis for the country's economic development. Suisse.ing President Andrea Galli emphasized that engineers play a key role in tackling social challenges such as mobility, climate change and the energy transition.

Switzerland is accustomed to high-quality infrastructure

Switzerland is internationally renowned for its high-quality infrastructure. Unfortunately, however, there is a lack of awareness of the importance of this infrastructure and therefore also of the engineering sector. The maintenance and development of infrastructure is essential for the country's economic development, the provision of essential services to the population and modern social life. The maintenance, renovation and expansion of Swiss infrastructure are the country's essential needs and require high-quality research and teaching in infrastructure topics.

Serious consequences of federal budget cuts

At the same time, the industry is struggling with a skills shortage of historic proportions that urgently needs to be addressed. According to forecasts by the State Secretariat for Economic Affairs (SECO), the engineering sectors are suffering the most from the structural shortage of workers with a tertiary education. Numerous current societal challenges are directly dependent on the expertise of engineers. At the same time, the engineering sciences are facing challenges such as budget cuts in teaching and research. "In order to guarantee a stable infrastructure, the federal government, education and industry must act together. If study places are cut, professorships are not filled and basic research is minimized for budget reasons, this will have serious consequences for Switzerland's entire infrastructure," said Andrea Galli, President of suisse.ing.

Awareness-raising work: private sector activities and joint initiatives  

The private sector is actively involved in promoting young talent, offering technology weeks, girls' days and workshops and providing information about the diversity of engineering professions. A new initiative by the associations suisse.ing, IngCH, SVIN and SIA was presented as part of UNESCO World Engineers' Day. Around 750 books entitled "All about engineering - planning - technology" will be distributed directly to schoolchildren by engineers in the future. They will go into schools to introduce children and young people to the fascination of the industry. "Every child is a potential engineer. Direct interaction with schools is an important part of raising awareness of our industry, increasing the attractiveness of the various engineering professions and attracting more skilled workers to our industry," says Livia Brahier, Head of Communications at suisse.ing.

Personal perspectives and practical examples

Amélie Rieder, MSc in Civil Engineering EPFL, Emch+Berger AG Bern, gave a first-hand account of her decision to become an engineer and her experiences as a young woman in the industry. She spoke about the diversity and individuality of each project, the fascination with technology, as well as the interpersonal collaboration that this profession entails.

Source: www.suisse.ing

Former Federal Councillor Simonetta Sommaruga becomes President of Equal-Salary

The Equal Salary Foundation has elected former Federal Councillor Simonetta Sommaruga as its president. This is Ms Sommaruga's first public project since leaving the Federal Council at the end of 2022, and this commitment will give new impetus to the pursuit of equal pay and equal opportunities in Switzerland and beyond.

Equal-Salary Foundation - Noémie Storbeck, Simonetta Sommaruga and
Lisa Rubli. (Image: www.equalsalary.org / Raphael Moser)

Simonetta Sommaruga headed the Federal Department of Justice and Police (FDJP) for eight years. During her time in office, she courageously campaigned for equal pay and the representation of women in listed companies. She played a decisive role in the introduction of equal pay analyses and quotas in favor of women, thereby changing the Swiss corporate landscape. These legislative reforms obliged large companies to eliminate pay discrimination and promote greater diversity in positions, at management level and on boards of directors.

By taking over the chairmanship of the foundation, Simonetta Sommaruga is continuing her task of eliminating the pay gap. The pay gap is still narrowing too slowly, as the figures from the Federal Statistical Office show. Ms. Sommaruga is continuing her commitment to tackling inequality and is focusing on the responsibility of companies. "With the Equal Salary certification, companies are taking a decisive step towards equal opportunities. Today, a modern employer must be able to demonstrate that it offers women the same opportunities as men, including in terms of recruitment, further training and promotion," emphasizes the new President of the Equal Salary Foundation.

The Equal Salary Foundation certifies companies that can demonstrate, using an internationally recognized scientific methodology, that they comply not only with equal pay, but also with equal opportunities throughout the life cycle of their employees (recruitment, training and promotion). Certification is a positive, voluntary, concrete and tangible measure that enables companies to communicate equality on the basis of evidence while protecting the confidentiality of their employees' data. To date, the Foundation has carried out more than 150 certification procedures in over 90 countries. Several certified companies have renewed their commitment and demonstrate a strong commitment to promoting equality and building trust and respect for their employees, customers and partners.

Wage analyses with "Logib"

The Equal-Salary Foundation has been offering a new service since 2024: Wage analyses carried out using the "Logib" equal pay analysis tool (provided free of charge by the Swiss Confederation) can be integrated into the certification process following an external audit. This enables companies to proceed directly to the second phase of certification: the qualitative on-site audit. This simplified procedure should encourage more companies to seek equal pay certification and thus implement not only the purely quantitative but also the qualitative elements of equal opportunities in their company. "Today, companies are looking for qualified staff and at the same time there are more and more very well educated women. Equal pay and the compatibility of career and family are therefore key factors not only for society, but also in the interests of the economy," adds Simonetta Sommaruga, President of the Equal-Salary Foundation.

At international level, the European Commission has issued a directive on pay transparency, which will come into force in spring 2023. The aim of this standard is to enshrine employees' access to information about their own salary, as well as that of their male and female colleagues. Employers must offer salaries that respect equal pay and meet the requirement for transparency. Swiss companies operating in Europe will also have to comply with this directive sooner or later. The Equal Salary Certification offers direct and concrete support for companies that already comply with this new directive.

"It is with great pride that we welcome Simonetta Sommaruga as President of the Equal Salary Foundation. Her pragmatism, influence and ongoing commitment to equality make her the ideal person to represent the Foundation and advance the cause. To promote the cause of equality in Switzerland and abroad. The equitable sharing of economic power and responsibility between women and men is long overdue and this news marks the beginning of significant and welcome progress for all." Lisa Rubli and Noémie Storbeck, Co-Directors of the Foundation.

Equal pay in practice

Although most companies claim to pay women and men equally, the pay gap worldwide is still 18% (ILO report, February 2020). In Switzerland, according to the latest wage structure survey by the FSO, the pay gap is still 18%, of which 47.8% is unexplained.

Three questions for Simonetta Sommaruga:

  1. What were your reasons for accepting the chairmanship of the Equal Salary Foundation?

Equal pay was a very important issue for me as a Federal Councillor. That's why I revised the Gender Equality Act at the time. With the Equal Salary certification, we can make a concrete and attractive offer for companies: Certification is a voluntary, positive and measurable measure with which a company can show that it takes equal opportunities seriously.

The Foundation's international reach was also an important point for me. Thanks to its partners and the presence of Equal Salary auditors around the globe, the foundation can certify multinational and national companies all over the world.

  1. How does the Equal Salary certification differ from other labels in the area of equality?

The certification is based on a robust, scientific and internationally recognized methodology. The Foundation works with world-renowned partners who lend it credibility. Its rigor, guaranteed by a mechanism comparable to an ISO standard, is an exceptional tool for continuous improvement. Its very high standards place it at the top of the range of existing equal pay certifications.

The Equal Salary certification consists of two steps, both of which are checked by renowned auditors. The quantitative verification of equality is crucial, but the second step is also necessary for full equality of opportunity. The certification also checks the measures taken in the areas of recruitment, assessment, training and promotion. Many companies also need to make progress in this area. Equal-Salary has developed a unique and internationally recognized tool for this purpose.

  1. What are your priorities and goals as President of the Equal Salary Foundation in order to promote equal pay?

The Equal Salary Foundation has done pioneering work at national and international level and has already achieved very good results. I would like to continue this work and motivate even more companies to get involved in equal opportunities. They have a lot to gain at a time when skilled workers are in demand worldwide and there are an enormous number of well-educated women. The new EU directive has also triggered a new dynamic. I would like to use this momentum. Furthermore, I have noticed in Switzerland and in many other countries that society no longer accepts that women earn less than men simply because they are women.

Source: www.equalsalary.org

10 tips for a successful business continuity plan

Companies around the world are exposed to numerous threats. This is also shown by international studies. A study by Arcserve shows that 76 percent of all companies have already suffered a serious data loss. In this context, 83 percent described a downtime of 12 hours or less as acceptable. This may sound reasonable, but it is not realistic.

With a business continuity plan against data loss. (Image: www.depositphotos.com)

According to a study by Arcserve, only 52% of affected companies were able to recover from their data loss within 12 hours or less. Although 95 percent of companies stated that they had a disaster recovery plan, only just under a quarter of them described it as mature, robust, well documented and up-to-date. So where to start? The best place to start is with a detailed checklist for a business continuity plan.

Business Continuity Checklist:

  1. Put together a planning team

Assemble key personnel from the various business units and ensure that the management supports your business continuity project. This team should ensure that a comprehensive plan is created that covers all critical business areas and systems.

  1. Carry out a technology inventory

Carry out an audit of all IT assets, for example with a tool from the Top 10 list from Enterprise Talk. This provides an overview of hardware, software, cloud services, external service providers and other resources that are essential for the operation of a company. This overview enables you to carry out effective risk management and appropriate disaster recovery planning. 

  1. Set up a business impact analysis

First, prioritize the critical business processes and data - taking compliance requirements into account, of course. Evaluate the potential consequences of a business outage or data loss for your processes. The aim is to understand which business areas need to be restored immediately in order to minimize the negative consequences. A priority list for the recovery of business functions, processes and data is helpful for this.

  1. Draft business continuity plan

First, define the scope of the plan, including identifying critical business functions, data and resources, and documenting roles and responsibilities. Then, develop appropriate disaster recovery strategies to create a blueprint that will help you successfully manage your business despite a disruption.

  1. Designing employee training courses

It is advisable to develop a training program and carry out regular exercises. The focus should be on the timely detection of malicious emails and the reporting process for suspicious activities. However, employees should also be informed about crisis management, emergency procedures and responsibilities so that they can act as the first line of defense to the outside world if the worst comes to the worst. 

  1. Securing business-critical information

To protect sensitive information from cyber threats and physical damage, the implementation of security measures such as  Intercept X Advanced from Sophoshelpful. In addition, sensitive data should be encrypted and security protocols should be regularly updated and created.  

  1. Implement a backup strategy

Set up regular backup schedules that are aligned with your RTOs and RPOs and follow the 3-2-1-1 backup strategy. This is the only way to minimize downtime and data loss and to restore data and systems quickly after a disruption.

  1. Provision of failover and redundancy solutions

Having redundant systems, especially for critical functions and data, is essential. Take advantage of the high availability of modern cloud services, especially those that can perform a failover with a single mouse click. Such a service enables business operations to be maintained, even in the event that a primary system is damaged or fails.

  1. Creation of a communication plan

Develop communication guidelines for internal and external stakeholders and designate an official spokesperson. Preparing crisis communication templates is also helpful to minimize confusion in this critical situation and maintain trust and communication.

  1. Test and update frequently

Regular testing is the only way to ensure that a plan works. You should constantly adapt the plan to changing circumstances and take these changes into account in the business processes and technologies. Only in this way can you be sure that the business continuity plan will continue to evolve and work even in a changing risk landscape.

By following these steps, companies can have a business continuity plan in place to best respond to potential disruptions. In this way, the costs of data loss and business disruption can be avoided and a company's reputation protected. 

About the author: Sven Richter is Marketing Manager DACH at Arcserve, www.arcserve.com.

Allianz Suisse certified as a "Great Place to Work

Allianz Suisse has received the "Great Place to Work" award. The internationally recognized seal of quality certifies that Allianz Suisse has an above-average workplace culture that is characterized by credibility, respect, fairness, team spirit and pride.

At Allianz Suisse, great importance is attached to offering employees a working environment that is characterized by trust, respect and appreciation. (Image: www.depositphotos.com)

Allianz Suisse has been certified as an excellent employer by the international consulting and research institute "Great Place to Work". The certification is based on an anonymous survey conducted among Allianz Suisse employees in January 2024. The questions for the certification are based on the five different dimensions of an actively practiced, trust-based workplace culture: credibility, respect, fairness, team spirit and pride.

Ruedi Kubat, CEO of Allianz Suisse, on the results of the survey: "It fills us with pride to be recognized as a Great Place to Work. We are convinced that satisfied employees not only ensure a high quality of service, but also contribute to the continued success of our company by achieving a high level of customer satisfaction. The award is particularly valuable because it is presented by our own employees, who are best placed to assess Allianz Suisse as an employer."

The "Great Place to Work" award is intended to recognize special achievements in the development of trusting working relationships and the creation of attractive and supportive working conditions for employees. Allianz Suisse is proud that its commitment to a positive working environment has been recognized by "Great Place to Work". Allianz Suisse attaches great importance to offering its employees a working environment characterized by trust, respect and appreciation.

Approval rating of 80 percent - a strong figure

As the analysis of the anonymous survey shows, 80 percent of all participants believe that Allianz Suisse is a "Great Place to Work". At 80 percent, Allianz Suisse is very close to the competitive benchmark of 83 percent for Swiss companies that were nominated as "Best Workplaces" by "Great Place to Work" last year. Employees have a particularly positive experience of fairness, communication, team spirit, credibility, fairness, togetherness and friendliness. The survey results showed that employees feel they are treated fairly, regardless of their origin, gender or sexual orientation. Employees look after each other and new employees feel very welcome. In addition, employees rate the actions of their managers as competent, approachable and uncomplicated and give them very high marks for honest and ethical behavior.

The internationally active consulting and research institute "Great Place to Work" has been collecting and analysing data to measure the workplace culture of organizations for over 30 years. The institute works with over 10,000 companies worldwide every year and surveys around ten million employees in 60 countries.

Source: www.allianz.ch

Survey: Swiss innovative strength faces AI challenges

Ongoing concerns about supply and trade chains as well as the availability and prices of raw materials have dominated economic development in recent years - including in Switzerland. However, according to a recent study by the international consulting firm AlixPartners, this is likely to change: The mega trend of artificial intelligence is continuing to fuel the innovation plans of Swiss companies, as the results of the latest AlixPartners Disruption Index 2024 show.

In the coming months, 43% of Swiss managers intend to increase their investments in digital tools and technologies compared to the previous year. (Image: www.depositphotos.com)

"The topic of AI is already playing a significant role in many companies, and we are only just at the beginning in this respect. In the coming months, 43% of Swiss managers intend to increase their investments in digital tools and technologies compared to the previous year. In addition, AI is seen as a driver of change for well-known problems in many business areas, including the supply chain," says Beatrix Morath, Managing Director and Country Lead Switzerland and DACH Co-Lead at AlixPartners.

AI increases companies' willingness to innovate

According to the study, for which over 3,000 CEOs and executives from various industries worldwide were surveyed, including almost 200 from Switzerland, AI is a very present topic: 51% already regularly rely on the use of AI and 58% are optimistic that it will have a positive impact on their company in the future. This is because the increasing presence of AI is also contributing to the supply chain problems that have been driving companies around the world in recent years: Over a third of Swiss companies are investing in digital solutions to stabilize supply chains. In addition, AI is expected to help automate forecasting and optimize sales planning in the future. AI is also having an impact on cyber security: "Awareness of cyber security is growing continuously, as AI naturally also increases the risks in this area," explains Beatrix Morath.

"All these developments hold great potential. If implemented correctly, they can result in real competitive advantages. But it all depends on the determination of companies. In an international comparison, especially with Germany, we can see that Switzerland is ahead of the game and sees these topics as an opportunity. Actions must now follow in order to defend Switzerland's status as a driver of innovation, particularly with regard to the Asian market," emphasizes Morath.

Reluctance hinders digitalization and transformation progress

The survey also shows that the Swiss economy is still in a dilemma: while Switzerland is regarded as a spearhead of innovation, caution and security concerns remain high. Only 26% of Swiss companies are currently actively driving forward the transformation of their business models, while the majority are merely reacting to changing circumstances. This reluctance is also reflected in the fear of the Swiss for their jobs: at 38%, they consider their jobs to be the most at risk from disruptive developments in a country comparison. A further 36% at least fear that their technical skills will not be able to keep pace.

(Image: www.alixpartners.com)

"The continuing uncertainty surrounding the economic situation is also fueling the caution of many companies. And this can certainly pose risks in terms of international competition," as Managing Director Karsten Lafrenz analyzes. "In an international comparison, Switzerland is particularly pessimistic. Less than half are positive about the future in terms of a recession, whereas in China, for example, this is only the case for around a third of respondents." The expert also warns of the effects of increasing uncertainty on competitiveness. Too many managers are still preoccupied with the possible 'day after tomorrow'.

"However, in order to survive tomorrow, companies must constantly question their status quo and align it with the dynamic developments in our world. In the global struggle for market share, particularly with the emerging forces of Asia and the emerging markets, Swiss companies face the challenge of consistently driving their transformation forward - holistically, without compromise and at all levels," summarizes Lafrenz. This also means that refocusing on domestic markets will become increasingly important. According to 27% of the Swiss, deglobalization is one of the top three challenges for the domestic economy in the coming months. According to the experts, this is also accompanied by the fact that more than a third of those surveyed expect changes in the geographical location network of their companies - this particularly affects Swiss companies, not least due to the fact that their economic structure is strongly characterized by internationally operating groups.

Source: www.alixpartners.com