How Bilfinger Integrates Risks, Controls, and Compliance on an Integrated GRC Platform

Bilfinger is an internationally active industrial services provider headquartered in Mannheim, Germany. The company helps clients in the process industry increase the efficiency and sustainability of their plants. With approximately 31,000 employees, Bilfinger offers services across the entire plant lifecycle: from consulting and engineering to prefabrication and installation, access solutions and insulation, as well as services designed to boost plant performance.


As part of its integrated governance, risk, and compliance approach, Bilfinger relies on Schleupen GRC to manage risks, controls, and compliance issues transparently and efficiently on a single platform. The solution is currently used across various areas such as the internal control system (ICS), enterprise risk management (ERM), compliance, human rights, and information security.

Managing GRC in an Integrated Manner

For many years, Bilfinger has pursued the goal of managing governance, risk, and compliance issues in an integrated and transparent manner as an essential component of sustainable and responsible corporate governance. Increasing regulatory requirements, along with demands for efficiency, comparability, and transparency, made a centralized platform for various GRC disciplines necessary. This provides a consistent view of risks, controls, and compliance requirements across different business units and GRC disciplines.

Not just implementing, but helping to shape the solution

When selecting the solution, the technical expertise of the Schleupen GRC team, the pragmatic approach to implementation, and the platform’s performance were key factors in the decision. Equally important, however, was the opportunity to actively contribute the requirements of various departments and to further develop the solution collaboratively.

Across several joint projects, Bilfinger has actively contributed its many years of experience in governance, risk, and compliance management to the further development of the solution. The goal was not only to digitize existing processes but also to continuously develop an integrated management system that meets various GRC requirements and can respond flexibly to new demands.

“We see Schleupen as a competent partner who understands our requirements and reliably supports us in the further development of our GRC and ICS processes,” says Timo Reither, Senior Vice President Group Risk Management at Bilfinger.

The professional exchange is always open, constructive, and of high quality. New ideas are discussed jointly, requirements are implemented in a practical manner, and solutions are continuously improved. The collaboration is characterized by trust, mutual respect, and a shared commitment to quality. 

More efficient processes in day-to-day GRC operations

Thanks to the centralized database and standardized workflows, Bilfinger has been able to significantly increase transparency regarding risks, controls, and actions and create a uniform foundation for group-wide governance, risk, and compliance management. At the same time, coordination efforts have been reduced, and the foundation for consistent reporting across various GRC disciplines has been established. This provides sustainable support for the further development of risk, control, and compliance processes.

 

“Our ambition is not to manage governance, risk, and compliance topics in isolation, but through an integrated and transparent framework. Together with Schleupen, we have established a platform that brings together various GRC disciplines, creates transparency, and supports us in continuously refining processes and efficiently integrating new requirements. Successful GRC solutions arise not solely from technology, but from close collaboration between users and solution providers.”

Timo Reither, Senior Vice President Group Risk Management, Bilfinger

More than software: A trusted partner for GRC

The collaboration between Bilfinger and Schleupen GRC demonstrates how modern GRC solutions are created: by combining subject-matter expertise, high governance standards, and a platform that is continuously refined. This generates added value that goes far beyond the mere provision of software and supports the sustainable advancement of governance, risk, and compliance processes. We sincerely appreciate the trust and partnership built over many years of collaboration.