Safety briefings for new employees: possible methods and approaches

Even in a pure office environment, there are many dangers. But they are much greater where machines and similar systems are at work - and safe operation often depends on human behavior. But how do you brief new employees in this regard as effectively as possible? There are several options, all of which have their strengths and weaknesses.

Well briefed is half avoided. This is doubly true when it comes to occupational accidents. But for the how of the instruction different possibilities exist. (Image: stock.adobe.com © Blue Planet Studio)

Industrial accidents are undoubtedly among the most biggest possible disturbances in companies not least because they can occur in so many different forms and cause the most serious consequences. In principle, they range from employees tripping and injuring themselves to collapsing high-bay racks, major fires and sometimes even massive consequences for entire regions. Let us think of one of the most serious Swiss industrial accidentsthe major fire at Sandoz in 1986 - most likely caused by incorrect shrinkage of plastic film during palletizing.

Now Switzerland knows Numerous legal requirements for accident prevention. Among other things, this includes the obligation to provide instruction. Quote from Art. 6 VUV:

"The employer shall ensure that all persons employed in his company are
employees, including those who work there, as well as the
Employees of another company, sufficient and
be adequately informed and guided about the
hazards that may arise during their activities and about
the measures of occupational safety. This information and
Guidance have at the time of starting the job and at each
substantial change in the working conditions to take place
and shall be repeated if necessary."

However, this "adequately informed" can be approached in different ways. We will now show you which ones.

Instruct employees in safety technology

  1. Movies

As early as World War II, the U.S. was using films to train soldiers. On the one hand, this decoupled learning from the didactic skills of the instructors. On the other hand, because films can get to the heart of certain issues in the language of the target group. To this day, educational films are therefore also a common teaching tool in the field of occupational safety worldwide, but this is linked to various negative facts:

  • Permanent attention needed.
  • Often only general, not related to the specific work location.
  • Sometimes irrelevant/outdated information.
  • Entertainment value may exceed information value.
  • Hardly any opportunity to repeat knowledge.
  • Elaborate and expensive to produce.
  1. Presentations

The presentation is similar to the film approach. However, it is more suitable in that multimedia information is conveyed using slides, photos and clips, supplemented by additional explanations from people present. This allows a much better response to the audience, and in addition, a presentation can be adapted to changing requirements with little effort. The disadvantages:

  • Good presentations depend at most on the skills of the presenter - both during the instruction and when designing the slides.
  • Every presentation is slightly different, even if the same person gives it with the same slides.
  • Recording and thus knowledge repetition only possible via detours (videos).
  1. Handouts and catalogs

It is not for nothing that most operating instructions are still enclosed in printed form. Because the written word is extremely patient, inexpensive to implement and, above all, everyone can go through the information conveyed again and again without their own intervention (such as taking notes) - without the need for an accompanying person. Moreover, such handouts can easily be turned into a gateway to the digital world. Then, when they are combined with a really powerful tool the QR code. It can, for example, lead to clips supplementing the written information at the appropriate point, can initiate final tests or build a wide variety of other digital bridges. Since the QR code basically only requires a URL, it can conceal anything imaginable.

But do these facts make handouts the best approach for safety briefings? Not necessarily:

  • Readers must be able to speak the language
  • Reading and comprehension are two separate requirements - the worse the writing, the harder the comprehension.
  • No way to verify an intensive read-through and understanding by all employees - at least not without testing.
  • May seem too dry on some characters due to its nature, which significantly reduces attention.
  1. Comics

Comics manage to tell complex stories with just a few drawn pictures, and sometimes even without any further text at all - and not just for children. Once again, it was the military that chose such an approach early on, in order to to explain concrete facts. The advantage is the possibility of conveying very specific, complex information, since comics do not rely on text alone, but an illustration. Furthermore, even comics on rather dry topics can get attention through an exciting design - and sometimes even be cross-linguistic. The disadvantages of classic written handouts are therefore greatly reduced. However, comics are not perfect either:

  • Creation requires graphic expertise. Almost anyone can write, but not draw.
  • Can sometimes seem too infantile to some contemporaries.
  • Due to the scope, rather suitable only for specific topics, such as "Safety check on the forklift before starting work".
  1. Online courses

In principle, a website can display anything that is desired within the framework of the programming language used and the available storage space. As a result, it can naturally also be a means through which an enormous range of safety information can be conveyed to new employees.

Written, pictorial, linguistic, all of these can be applied here and can also be repeated by the subjects themselves as they see fit. In fact, the entire briefing can even be designed in a way that makes it possible to measure usage - for example, via a dwell time on the respective slide or the need to click on several pieces of information before the next page can be called up.

There is only one disadvantage to this, but it is a big one. Because a lot of technical and IT expertise is needed to set up such courses. The higher the quality, the more expensive and time-consuming it becomes.

Good security briefings should take a multimedia approach. Only then can knowledge be conveyed on multiple levels and stick in the memory. (stock.adobe.com © dusanpetkovic1)

Safety briefings: the mix makes the difference

You may have noticed: None of the methods presented here is perfect on its own - if only because it is costly. While no company should put a price tag on something as centrally important as safety briefings, a certain framework must of course be maintained.

But what is the best approach under this premise? It is always a balanced mix of several methods. Perhaps the best basis is a clean presentation, especially if several new team members are to be instructed at the same time. Everything can be packaged very well in that.

A handout is issued to supplement this. On the one hand, it should contain the same content as the presentation slides. On the other hand, it can be supplemented with further written and comic-like information. Where it makes sense (e.g., with videos), a QR code should always be integrated that links to the corresponding digital content - especially for younger generations of digital natives, this is highly recommended.  

With this approach, safety briefings become more than just a one-time instruction. It becomes a multimedia code of safety that can be looked up and added to again and again. If this is cleverly combined with realities of the work environment (for example, by using the same designations at the work site), then it becomes information transfer that really sticks in the mind - and thus helps to prevent large and small workplace accidents.

Low Value Care: Overuse and misuse under the microscope

Unnecessary or incorrect treatments, often referred to as "low value care," are considered avoidable risk and cost factors in healthcare. A study by the University of St. Gallen with data from Groupe Mutuel uses two clinical pictures as examples to show how patients can be treated better while saving costs.

Against Low Value Care: In stable coronary artery disease, an optimized diagnostic pathway could save approximately CHF 5 million each year. (Image: Pixabay.com)

Low value care refers to services that provide little or no benefit to patients or even potentially cause harm. This results in unnecessary costs and scarce healthcare resources are wasted or not used effectively.

New study examines impact of low value care on two chronic diseases

A new study by the University of St. Gallen with data from Groupe Mutuel examines two aspects of the care pathway of two widespread chronic diseases on Low Value Care. Chronic obstructive pulmonary disease (COPD) and coronary heart disease (CHD) were chosen for this purpose because of their prevalence and the high level of suffering experienced by patients.

COPD was the third leading cause of death worldwide in 2019. In Switzerland, at least 400,000 people suffer from the incurable lung disease, at an estimated cost of CHF 603-847 million per year. Appropriate use of medications can slow the worsening of symptoms, stabilize quality of life and reduce the risk of hospitalization due to an acute worsening of health - a so-called exacerbation. Accordingly, analysis of Groupe Mutuel data shows that patients who regularly take long-acting medications have an approximately 50% lower risk of experiencing an exacerbation.

The problem is, among other things, that medications are not taken as prescribed, e.g. daily. The study shows: Nearly half of patients had adequate medication reserves at home less than 40% of the time. This means that a significant proportion of patients do not take their medications as prescribed over a period of time. This can lead to exacerbations, which also have a negative impact on healthcare costs. The analysis of the Groupe Mutuel data accordingly shows that the healthcare expenditure of COPD patients who do not take their medication regularly is on average around CHF 10 000 higher compared to patients who take their medication regularly.

"The results of this study indicate that it is time to develop digital health applications for chronic diseases. This could better ensure structured quality-optimized treatment programs that, for example, help patients take their medication as prescribed," says Alexander Geissler, Academic Director and Chair of Healthcare Management at the University of St. Gallen.

Too many invasive/cost-intensive diagnostic procedures

CHD is one of the most common cardiovascular diseases and a leading cause of mortality and hospital admissions in Switzerland. The study weighs the two diagnostic pathways of coronary CT versus invasive coronary angiography. Medical guidelines indicate that coronary CT is preferable to invasive coronary angiography for initial diagnosis in many patients. A coronary CT is noninvasive and there is no need to place a catheter in the heart, meaning there is no risk of anesthesia, infection, or complications for the patient. At the same time, it incurs less cost. The study finds that thanks to an optimized diagnostic pathway, there is a potential saving of approximately CHF 5 million per year for Groupe Mutuel policyholders when patients are treated using the cost-efficient diagnostics.

Through this commissioned study, Groupe Mutuel aims to contribute to improving the quality and efficiency of medical care for its policyholders: better outcomes at lower cost and risk increases value for patients. "Regarding research, our current focus is on overuse and misuse of care. It is becoming increasingly important to address existing inefficiencies in our healthcare system as resources become scarcer, making overuse and misuse of care particularly problematic in terms of low value care," says Daniel Volken, Head of General Secretariat at Groupe Mutuel.

Source: Groupe Mutuel

How Manufacturing Benefits from Artificial Intelligence of Things

What happens when AI and IoT combine? Then AIoT (Artificial Intelligence of Things) is created. This opens up new potential for creating value from data.

Connecting AI with the IoT offers new opportunities for industry. (Image source: AdobeStock)

Artificial Intelligence of Things focuses on collecting, analyzing and interpreting data from machines and sensors with the help of an MES/MOM. In this way, for example, forecasts can be derived and self-learning processes can be developed. There are several options for implementation.

Artificial Intelligence of Things: Symbiosis of AI and IoT

"The Internet of Things and a multitude of networked machines mean that more and more data is available. However, this data is worthless if it cannot be used in decision-making processes. They must therefore be processed and intelligently evaluated by AI applications as quickly as possible. Artificial intelligence can also draw comparisons with other processes, systems and their data and, by learning from experience, independently solve future tasks, avoid errors and optimize processes," explains Martin Heinz, CEO of iTAC Software AG, a provider of MES/MOM solutions.

The IoT structure therefore needs Artificial Intelligence, which in turn needs the Internet of Things as a source of data. iTAC also relies on this symbiosis and enables streaming and batch analytics on a central, scalable platform with out-of-the-box access to MOM data for predictable production. The iTAC.MOM.Suite takes advantage of the latest IIoT technology. The iTAC.IIoT.Edge software is a component of the MOM system (Manufacturing Operations Management System), but can also be used stand-alone, enabling significant improvements in manufacturing processes in a short time. It is able to combine IIoT data with MES data to form flat data structures and analyze this data in real time. In the process, the data packages can also be transferred to other analysis or ML/AI tools used by the customer and ML models created on other platforms can be integrated.

Predictive maintenance as a use case

"Machine learning and artificial intelligence-based applications in the analytics sector make more sophisticated and higher-quality analyses possible than conventional technologies and algorithms can. For example, artificial intelligence can find complex patterns in data, draw conclusions and use them to make predictions," explains Martin Heinz. By using iTAC's edge solution, numerous ML/AI use cases for advanced and digitized manufacturing can be expressed, for example in the area of prediction. The appropriate monitoring of machine and sensor data makes it possible, for example, to predict machine failures. Unplanned machine downtime can thus be reduced by up to 70 percent. Another use case is the reduction of test efforts. Most SMT lines with AOI struggle with a high rate of false calls. AI can be used to accurately differentiate between true defects and false calls. This reduces the need for manual inspection by operators by up to 60 percent, with associated time and costs. The result is higher throughput while supporting zero-defect production.

Source: iTAC Software AG (www.itacsoftware.com)

EYRA Group and Board of Cyber: Alliance for more cyber security

The partnership between Eyra Group and Board of Cyber enables Swiss companies to benefit from a continuous cyber performance assessment solution.

Keeping an eye on cybersecurity at all times: A joint solution from Eyra Group and Board of Cyber aims to make that possible. (Image: Unsplash.com)

Eyra Group, which specializes in managed services for private and public clouds, cybersecurity and personal data protection, is joining forces with Board of Cyber, a French company specializing in cyber risk management. Together, they plan to expand their services to include the Security Rating® solution. This automated, fast and non-intrusive SaaS solution will allow customers to continuously assess the cyber risks of their organization, as well as those of their suppliers, in order to improve their cybersecurity performance.

"Security Rating® by Board of Cyber is one of the first products on the market that allows business leaders to very quickly obtain a summary assessment of the cyber risks of their organization and ecosystem (supply chain security) and then monitor them over time. This solution is perfectly tailored to the Swiss market and is suitable for companies of all sizes and industries looking for pragmatic and economically competitive tools," comments Yves Froppier, Deputy CEO of Eyra Group.

Eyra Group - which has offices in Geneva, Lausanne, Zurich and Neuchâtel - offers its clients IT management, consulting and auditing, training and awareness, security technology implementation and development, and managed security services (MSSP) services. With Board of Cyber, Eyra Group strengthens its "Cybersecurity Assessment Solutions" offering as well as its audit and awareness services. Its customers will be empowered to manage all cyber issues: Anticipation, Prevention, Protection, Detection, Response and Recovery (Cyber Resilience), building around them a trusted ecosystem.

Source and further information; www.boardofcyber.io

Early warning system to protect against falls in hospital

Falls in hospitals pose a significant problem for patient safety. In Swiss hospitals alone, tens of thousands of patients fall every year. With its solution for fall prevention and mobility monitoring, the Solothurn-based digital health company Qumea has therefore become an integral part of the Swiss hospital and care landscape.

An early warning system against falls makes patient rooms a safe place. (Image: Roger Hofstetter / Schweizer Illustrierte)

In hospital, patients are at increased risk of falls due to factors such as illness, medication and unfamiliar surroundings. According to OECD data, there were 10 million falls in hospitals in Europe alone in 2020. Of these, approximately 40% resulted in physical harm, prolonged hospital stays and increased healthcare costs. Sitting guards are often used to protect high-risk patients, but they cost hospitals millions and compromise patient privacy. Other technological assistance systems are also used, but they are readily error-prone, limited to bedside monitoring, require cleaning and maintenance, and are rarely where they are needed.

Privacy-compliant early warning system

The Swiss digital health company Qumea, based in Solothurn, has therefore set itself the task of supporting care with a reliable early warning system to make the patient's room a safe place. An unobtrusive sensor, easily mistaken for a smoke detector, detects movement anywhere in the room. Artificial intelligence analyzes the data, recognizes movement patterns and provides targeted information to caregivers when a patient needs help. The system operates completely anonymously, meeting even the highest data protection requirements.

The system is already in use in over 30 institutions. These include the Cantonal Hospital in Aarau, the Schulthess Clinic and the University Psychiatric Clinics in Basel. QUMEA is now implementing its largest installation to date at the Hirslanden Clinic in Zurich. According to clinic director Marco Gugolz, "In addition to a significant reduction in falls, Qumea has also brought about a great deal of safety among the nursing staff and at the same time helped us to significantly save costs on the patient guard side." After completion of the pilot phase, the
Early warning system now rolled out to a total of 5 wards.

Interested parties from home and abroad

But it is not only in Switzerland that interest in the comprehensive early warning system in the patient's room is growing. The Caritas Hospital St. Josef is the first hospital in Germany to use the Qumea solution. Here, the system is mainly used for patients suffering from dementia and elderly patients*. "Especially when these patients wake up at night and get out of bed, the risk of falls increases immensely," says nursing service manager Andreas Riepl, who is responsible for the project.

Further north, in Sweden and Finland, Qumea has already won tenders from renowned hospitals. "Especially in the Nordic countries, the topic of fall prevention enjoys a lot of attention," says CEO and co-founder Cyrill Gyger. In May 2022, Qumea therefore opened a branch office in Stockholm.

Source: QUMEA

What the "car of the future" will look like in five years' time

Global IT consulting and services firm DXC Technology predicts five trends in how the automotive industry will change our relationship with cars over the next five years.

The car of the future is software-defined. (Image: Unsplash.com)

The transition to software-defined vehicles is reshaping every aspect of the automotive industry - from how cars are designed and manufactured to how they are used and maintained. Crucially, it is changing the driver's relationship with the rich ecosystem of partners and services around the automotive industry. DXC and Luxoft (a DXC company), which specializes in automotive software and platform-based business models, see signs that these five trends are accelerating.

The software in your vehicle is as important as its logo

Software-defined vehicles (SDVs) will be the cars of tomorrow, with features and functions controlled by software. "SDVs will be known more for their user experience than their physical features. Software will provide a direct link between the automaker and the customer, and platform-driven automotive companies will be able to seamlessly offer personalized services to their customers through their vehicles," said Matthias Bauhammer, Global Lead, Robotic Drive Offering at DXC Technology.

This data exchange will not be limited to a single car and its manufacturer. The "crowd data" from millions of vehicles can be used to provide smarter mobility services across an entire automotive ecosystem. Gaia-X 4 Future Mobility for example, is a European initiative that enables close networking between vehicle users, service providers, manufacturers and suppliers. Applications include intelligent transport infrastructures, vehicle lifecycle management and digital twins for autonomous vehicles.

Your car renews itself and offers upgrades on demand

As cars become increasingly software-defined and connected to the Internet, their ability to self-heal, self-renew and self-refresh will increase. "Our phone software is regularly updated to add new features, download apps, updates and security patches to fix problems and make our devices even more useful. The car may have a long way to go before it becomes as dynamic and interactive as our phone, but it's clear we're seeing a similar evolution," said Karsten Hoffmeister, head of autonomous driving at Luxoft.

Most of the world's automakers are already experimenting with on-demand services that reach users as software. BMW delivers downloadable upgrades via the My BMW App or the SIM card installed in the vehicle. Volvo offers its customers "Over The Air (OTA)" software updates that are sent directly to the vehicles. Some automakers are trying to monetize software upgrades. In a recent interview with Bloomberg the CEO of CARIAD, the Volkswagen Group's automotive software company, even hinted that pay-as-you-go autonomous driving could be a possibility.

For Generation Z, owning a car could be a thing of the past

The way we live and work is changing. Hybrid working means many workers no longer need to commute by car every day. While many younger people want the convenience of a car, they don't want the traditional ownership model, which tends to be expensive, responsible and inflexible. Another approach to getting on the road is to pay for a vehicle only when you need it, perhaps through a subscription-based car-sharing or peer-to-peer rental service. With their on-demand and remote control capabilities, SDVs lend themselves to these types of services.

Several car manufacturers are experimenting with subscription models, including Audi, Lexus, Nissan, Porsche and Volvo. Many third parties also offer subscription services, including car rental companies, for whom this is a logical extension of existing services. Start-ups such as Borrow plan to focus on electric vehicle subscriptions. An innovative example of a mixed mobility subscription model is GetTransfer.com, which offers its customers a wealth of rental, loan and transfer services for cars, helicopters and aircraft.

The car of the future makes an appointment with a workshop before you know you have a problem

"As part of the Internet of Things (IoT), connectivity built into cars is being used to transmit real-time vehicle diagnostics that are used to plan increasingly sophisticated predictive maintenance schedules," said John Makin, automotive strategist at Luxoft.

Feedback from AI-assisted analysis enables the car to report impending problems to the workshop, the dealer or directly to the manufacturer. Diagnostic information will be shared with mechanics in advance so they can order the components they need. This technology will relieve the driver of some of the responsibility of identifying problems during vehicle maintenance, while increasing road safety.

The U.S. electric car manufacturer Rivian, which provides home vehicle maintenance, for example, states that it can "perform comprehensive diagnostics remotely via our connected vehicle platform. Most problems can be detected proactively thanks to our onboard sensors and associated predictive algorithms. We can often notify you before you even notice a problem."

Your future electric vehicle could run on hydrogen 

Global sales of electric vehicles (EVs) are growing rapidly. In China, the world's largest automotive market, e-vehicles already make up 21% of the market from. According to consulting firm AutoForecast Solutions, e-vehicles could account for one-third of the North American market and about 26 % of vehicles produced worldwide by 2029. However, the rising cost of electric car batteries, long waiting times for vehicles and spare parts, and problems adapting charging infrastructure to meet growing demand are already impacting adoption. In many cities around the world today, drivers have to wait more than an hour to charge their vehicle at public charging stations.

With their intelligent route planning and energy optimization, SDVs can mitigate many of these problems, but the search for viable fuel alternatives to power them continues. The Institute of Vehicle Concepts (FK) at the German Aerospace Center (DLR) in Stuttgart has already tested a hydrogen fuel cell for cars. Initial tests show that a vehicle with a tank capacity of 6.3 kg of hydrogen can run about can generate 100 kWh of electricity. This is roughly equivalent to the average monthly consumption of a one-person household. With the increasing number of software-defined vehicles, we expect further development of alternative fuel sources throughout the automotive industry, from cars to trucks.

Compliance regulation: Companies must deal with these innovations

Various new regulations have been in force in the EU since the beginning of the year. Failure to comply with them could have serious consequences for companies, including fines, confiscation of goods, loss of market access and loss of confidence on the part of customers. For export-oriented Swiss manufacturers in particular, it is therefore important to review the existing compliance regulations.

Further regulations will be added to the paragraph jungle in 2023: Compliance regulations in companies must be adapted accordingly. (Image: Pixabay.com)

In Germany, the Supply Chain Sourcing Obligations Act LkSG has been in force since the beginning of the year. However, other regulations and provisions in EU member states will also be added in 2023. What the key point of the new regulations is and when they come into force is shown in the following list.

REACH: Nine more materials on the list of hazardous substances

In mid-January 2023, the European Chemicals Agency (ECHA) Nine more materials added to the list of hazardous substances. The list is a candidate list, i.e. companies are not prohibited from using these substances. However, manufacturers are obliged to provide customers and consumers with information on safe use if the concentration of the respective substance in the product is 0.1% or higher.

Furthermore, the proposal to extend the ban on perfluorocarboxylic acids (PFAS) in the EU via REACH (Regulation concerning the Registration, Evaluation, Authorisation and Restriction of Chemicals) is expected in February 2023. Further bans on the use of all perfluorinated and polyfluorinated alkyl compounds worldwide are also planned or in progress.

Revision of the RoHS Directive

The EU RoHS Directive (Restriction of Hazardous Substances) is currently undergoing a revision, which could elevate the directive to a regulation. This innovation would pose challenges for companies because, unlike directives, regulations are law in all EU member states and are implemented uniformly. It is also expected that the EU RoHS Directive will soon be expanded to include the commonly used flame retardant tetrabromobisphenol A (TBBPA). This will affect, among others, manufacturers using electrical and electronic equipment.

EU Directive on Forced Labor

The EU directive, which prohibits the import, export and making available of products manufactured using forced labor within the EU, is expected to come into force in two years. Nevertheless, companies should still start adapting to the directive in 2023 because it will require an extensive effort. Among other things, companies will need to build stronger relationships with their suppliers and develop data collection processes regarding forced labor. In addition, manufacturers will be required to create a method for identifying and closing data gaps. Guidance on what expectations companies must implement is provided by the U.S. Uyghur Forced Labor Prevention Act (UFLPA), which went into effect in 2022. However, the EU proposal will be significantly more far-reaching.

Extended Ecodesign Regulation ESPR

In March 2022, the European Commission published a draft on an extended Ecodesign Regulation under the acronym ESPR (Ecodesign for Sustainable Products Regulation). The framework will set requirements for CO2 and environmental footprint, energy and resource efficiency, and recycling, among others. The requirements by ESPR are broad. It is recommended to start initial preparations soon, as ESPR will merge the other presented requirements from REACH/PFAS, RoHS, Social Aspects of the Supply Chain/Prevention of Forced Labor, and Ecodesign. The goal is the digital product passport.

Numerous other changes in preparation

However, this is only a sampling of the policies or initiatives that are expected to be enacted or updated this year. Other examples include: The Toxic Substances Control Regulation (TSCA) or the Customs Trade Partnership Against Terrorism (CTPAT) or the whole world of sustainable reporting under the Corporate Sustainability Reporting Directive (CSRD). In addition, the second stage of the Law on Due Diligence in the Supply Chain (LkSG) will come into force in Germany from January 2024, and in parallel the EU is working on the European counterpart - the Corporate Sustainability Due Diligence Directive (CS3D).

In light of all these developments, companies and their officers should ensure that existing compliance regulations effectively implement existing requirements and reflect the current state in order to meet the new requirements.

Source: Magnus Piotrowski from Assent Inc.

The secure handling of passwords in companies

The correct handling of passwords continues to be an important topic. To ensure the necessary password security, companies must find ways to implement it as easily as possible. Craig Lurey, CTO of IT security service provider Keeper, summarizes which mistakes must be avoided at all costs and what options are available to get a grip on the password dilemma.

Many companies still make avoidable mistakes when dealing with passwords. (Image: Pixabay.com)

Many organizations, especially those that operate in the technical and digital space, require continuous communication and sharing of online files. As a result, account sharing is often required in a collaborative work environment. This means that employees must find an easy way to share access and passwords with each other - preferably without the risk of exposing the company to a cyberattack. A message through a messaging service or an email to a colleague may be the quickest way to share passwords. But it's an insecure and risky way that puts the entire company at high risk from cyberattacks.

The secure way to exchange passwords

At Cybersecurity Census Report 2022 Keeper Security found that only 13 percent of the companies surveyed in Germany are best equipped with a system for identity control, 56 percent provide their employees with at least some guidance, and 31 percent leave identity control, including the handling of passwords, to their employees. Either not everyone seems to be aware of the risk or it is accepted.

The most secure way to store and share passwords is with a password manager on a password-protected device. Password managers often offer multiple layers of encryption, making it virtually impossible for cyber attackers to find what they're looking for in a readable way. With zero-knowledge encryption, no one but the user can see the data - not even the password manager provider and not even an attacker.

Some password management tools, especially for enterprise use, offer secure sharing features. These make it easy to grant employees shared access without revealing username and password details. Also desirable in password managers is multi-factor authentication (2FA/MFA), which can be enforced at the role level. In general, it is recommended to enable 2FA/MFA on all platforms to improve the security posture of the company and teams.

Risky methods for sending and storing passwords

Password sharing is widespread among Internet users inside and outside the workplace. A survey by The Zebra, NBC News and the Pew Research Center. found that 79 percent of users admitted to sharing passwords with someone outside their home.

Companies that do not use a password manager may be using insecure methods to store and share passwords. This can lead to financial losses and an increased risk of a cyberattack. In the Cybersecurity Census Report 2022, the impact of a cyberattack in Germany alone was between €10,000 and €49,999.

Six methods to avoid when dealing with passwords

Users who do not have access to the functions of a good password manager use many different methods to exchange secret access data with each other. Under these circumstances, it is not possible to ensure that only those who are authorized to have access to passwords have access to them, nor is there any guarantee that the secret access data will not fall into the hands of unauthorized third parties. Six of the most popular and risky methods are:

  • Online documents: Apple Notes, Google Docs, Microsoft Word documents, and other online note-taking programs are easy ways to jot down information, but these tools were not designed for storing and sharing private credentials. In Keeper Workplace Password Malpractice Report 2021 49 percent of respondents confirmed storing work-related passwords in a cloud document. 51 percent store passwords in a document on their computer and 55 percent store work-related passwords on their cell phones. Although some documents can be password protected, many document software platforms do not offer encryption, two-step verification or other additional security measures. An unauthorized user who manages to get their hands on or hack a device can easily copy the document and send it to themselves, gaining access to all the information contained in the file.
  • Emails: Emails are one of the most popular forms of communication in the workplace. They are usually sent in plain text and without encryption. If an email inbox is compromised, unauthorized people have full access to passwords sent via email. In addition, passwords sent via email often pass through multiple systems and servers, and there is a copy in the "Sent" folder. And even if emails have been deleted, the emails may be stored in other folders on the account, such as the "Deleted" folder. Emails that are stored locally on the device's hard drive rather than with the provider are subject to additional risk from potential theft of the laptop, tablet or cell phone.
  • Text messages/SMS: Similar to email services, there is no security with text messages. The text message can be read by anyone who can intercept it. Again, if a mobile device is not password protected and falls into the wrong hands, the unauthorized user will gain access to all private conversations and messages. The same applies if the device is compromised.
  • Online messenger: WhatsApp, Slack and Microsoft Teams are popular tools for communication between employees for quick project updates or casual conversations. Although many of these cloud services are encrypted, the applications on the devices usually remain open or running in the background. If the device is used in a public environment and is partially unattended, anyone can access the passwords within seconds. For example, in June 2021, a group of cybercriminals used Slack to get an employee to help them break into EA Games. The group managed to acquire stolen cookies, which they used to gain access to an EA Slack channel. Then they sent a message to the IT support members claiming that they had lost their phone at a party.
  • Physical documents: Writing down passwords in a notebook or on a piece of paper may prevent cybercriminals from accessing credentials. However, credentials can easily be stolen by an unauthorized person in the offline world. Writing down credentials and sharing them in the office is also dangerous if the physical document is lost.
  • Verbal sharing: Even though a face-to-face conversation with a colleague eliminates the classic paper and online danger, it carries risks because the login data can be spoken out loud and thus overheard. In addition, passwords are usually not particularly secure with this method, as special characters that are occasionally not found on the keyboard may not be included in the password. Another, albeit minor, danger is that the conversation is recorded.

Further information: KeeperSecurity.com

Sustainability has not yet completely penetrated controlling

A third consecutive study by the International Controller Association ICV shows the development of the integration of ecological and social aspects into controlling.

(Image: ICV)

In recent years, the International Controller Association (ICV) has conducted three comprehensive studies on the extent to which green controlling has arrived in companies. The current conclusion is that sustainability has moved more strongly into the core business processes and is becoming increasingly strategically relevant, also due to regulatory requirements. However, sustainability aspects have not yet been incorporated into controlling tools.

Overall, according to another result of the study, for which the Executive Board of the International Controller Association surveyed its members exclusively in August and September 2022, sustainability controlling is understood as a cross-functional responsibility within the company. However, controlling itself is acting in the background, while sustainability management is gaining more and more importance. Another interesting insight: Sustainability information is increasingly finding its way into the management report, social media channels and websites, while the classic "stand-alone" sustainability report is losing importance. This indicates a change in communication with a stronger focus on the stakeholder.

Further insights and information gained by the ICV for controlling and controllers in the course of the study can be found in the study itself. It was conducted in cooperation between ICV Fachkreis Green Controlling for Responsible Business and ICV Ideenwerkstatt. 216 of the more than 6,000 association members completed the online questionnaire (2011: 295, 2016: 150). On the one hand, the ICV Green Controlling Study 2022 examined the current status of green controlling in companies in the D-A-CH region, but also compared these with the results of the predecessor studies from 2011 and 2016.

Non-members of the ICV can purchase the 57-page PDF containing the study results for 29 euros. www.icv-controlling.com

Office service provider Graphax now officially certified as climate-neutral

Graphax AG, which has been based in Dietikon for almost five decades, is one of the Swiss market leaders in digital office and information management The company is actively committed to CO2 reduction and has recently been allowed to carry the "climate neutral" label.

Graphax is now climate neutral as a company and has determined its own carbon footprint. (Symbol image; Source: Depositphotos.com)

Graphax AG, headquartered in Dietikon near Zurich and with eight branches in German- and French-speaking Switzerland, employs around 190 people. Thanks to its broad range of services, the company is one of Switzerland's leading providers of innovative technologies in the areas of information management, printer park management and complete solutions for digital and paper-based document workflow in the B2B environment. In addition to the continuous further development of state-of-the-art office solutions and the implementation of numerous complex process automations for various customers, Graphax AG has always been aware of the responsibility that companies in general have for the sustainable treatment of nature, according to the statement. For this reason, the company has calculated its own carbon footprint. The so-called Corporate Carbon Footprint (CCF) was determined together with ClimatePartner, a leading solution provider in climate protection for companies.

What exactly is the CCF?

The CCF is the sum of the CO2 emissions caused by the company within the defined system boundaries in a specified period. The calculation was based on the guidelines of the Greenhouse Gas Protocol Corporate Accounting and Reporting Standard (GHG Protocol). The CO2 footprint calculated in this way includes direct emissions caused within the company (electricity and heat generation, vehicle fleet, fugitive gases) and indirect emissions caused by purchased energy, business travel, and employee commuting. The calculation does not include other indirect emissions that occur outside the company during the production of raw materials and intermediate products, external logistics, and the use and disposal of products or other processes.

Constant control is important

In subsequent years, the report can be used to check whether the targets set have been achieved, in which areas progress has been made, and where emissions should be reduced even more. After all, only those who know the exact figures can make an effective contribution. For example, in 2021, business activities caused emissions of 1,820.1 t CO2. To put this in perspective: The emissions correspond to the CO2 footprint of 300 Swiss people. One person in Switzerland causes an average of 6.06 t CO2 per year. In addition to the head office in Dietikon, the branches in Lausanne, Satigny, Martigny, La Chaux-de-Fonds, Lucerne, Gossau, Muttenz, Ostermundigen and the warehouse in Pratteln were also included in the calculation.

Graphax has been climate-neutral since 2023

Being a climate-neutral company means that you have recorded your own greenhouse gas emissions, are continuously reducing them, and have offset the remaining emissions through climate protection projects. This is confirmed by the "climate neutral" label from ClimatePartner. It is
independently and the IT system for CO2 offsetting has been audited by TÜV Austria. As mentioned above, climate neutrality does not include other indirect emissions. CO2 offsetting is carried out entirely via a climate protection project that is certified according to international standards. For each ton of CO2 compensated there, a subsidy amount flows to a mountain forest project to help finance the weeks of operation in Switzerland. In this context, Graphax is making a very concrete commitment to the protection of international and Swiss forest areas. As the Swiss general distributor of Konica Minolta and the distributor of devices in the office sector such as copiers and printers, but also the high-performance printing systems in the commercial printing sector, the company is aware of the resulting paper consumption and would like to make a corresponding industry-related contribution to climate protection. Even more detailed measures can be viewed under the ClimatePartner ID tracking at climatepartner.com/19239-2212-1001.

What are the next steps?

In collaboration with ClimatePartner, Graphax is continuously working on CO2 reduction targets. The largest share of CO2 is actually caused by the company's own vehicle fleet, a well-known phenomenon among companies with a similar decentralized service structure throughout Switzerland. The management is currently thinking about restructuring the vehicle fleet. An internal survey to the workforce has already been conducted to elicit the employees' eventual readiness for electric mobility. The extensive supply chain management will be analyzed in the coming months with regard to possible CO2 optimization. In addition, the procurement of international green power certificates is currently being intensively discussed.

The concentration of greenhouse gases in the atmosphere is responsible for global warming. It is therefore necessary to reduce emissions as much as possible. For this to succeed, it makes sense to define clear and measurable reduction targets - as well as corresponding measures and responsibilities. ClimatePartner recommends distinguishing between short-, medium- and long-term reduction targets. Some measures can be implemented quickly, while others take time, for example because processes and products need to be rethought or the supply chain needs to be involved. Reduction must therefore be a continuous process and as such part of the corporate strategy.

Source and further information: Graphax AG

Hybrid work: Swiss New Work providers focus on quality

According to a new ISG study, Swiss companies are beginning to fundamentally rethink the future of their working methods and environments. Swiss new-work providers score points with their high quality standards.

There is no going back to the previous ways of working. Hybrid working is the order of the day. (Image: Unsplash.com)

With the return to the office after the COVID pandemic, most Swiss companies are realizing that there is no easy way back to previous working models. They are therefore increasingly turning to hybrid working. These ways of working allow people to work both from the office and from home. In addition, the new comparative study "ISG Provider Lens Future of Work - Services & Solutions Switzerland" reports that the focus is no longer just on technological issues of workplace equipment, but on embedding "New Work" in the overall corporate strategy. The study was conducted by the market research and consulting company Information Services Group (ISG) published. The provider comparison examines the competitive strength and portfolio attractiveness of 27 service providers active in the Swiss market for future-of-work services and solutions. 

Hybrid working: Swiss providers with competitive advantages

"The transition to working from home was primarily a technological challenge. Now it's about the overarching transformation of work and business processes," says Jochen Steudle, Senior Consultant, EMEA, at Information Services Group (ISG). Accordingly, the current need for consulting on hybrid working is very high. "There are no standard solutions here yet. So at present, it is primarily the service providers who are driving the necessary organizational change through innovations and thus also contributing to the necessary cultural change in mentality," Steudle continues. 

Especially when it comes to cultural issues, Swiss providers have a competitive advantage thanks to their "Swissness. "They simply know the sensitivities of Swiss customers better," says ISG analyst Steudle. "In addition, local service providers cultivate a particularly high quality standard, which also leads to plus points in the Swiss market compared to international competitors." 

The role of IT

According to the ISG study, the transition to hybrid working is also a must because younger skilled workers in particular would be hard to attract otherwise. According to the study, a demographic change is currently taking place in the world of work, as skilled workers born in the late 1990s and early 2000s are now entering the workforce. This "Generation Z" has, in some cases, completely new requirements for the workplace. Young professionals are already familiar with social media and digital collaboration before they even enter the workforce, he said. At the same time, the needs of older team members had to be taken into account. Therefore, companies can no longer rely on a standardized workplace according to the motto "one for all," but must offer flexible working models. 

According to the ISG study, a central role in this transformation is played by corporate IT and supporting IT service providers. In the case of new-work solutions, they are expected not only to provide IT systems and the associated processes, but also to play a key role in redefining companies' business and operating models. 

ISG examined a total of 22 providers in the market segment of "Workplace Strategy Transformation Services". The market researchers at ISG see six of them as "leaders". (Graphic: ISG)

Market for pure technology solutions shrinks

Accordingly, ISG research has found that the market for solutions focused exclusively on technologies or end-user computing is shrinking. Instead, initiatives for hybrid workplaces are increasingly in demand as part of a larger digital and organizational transformation. This does not mean that traditional, technology-oriented services are no longer in demand. But, he says, they are now usually part of larger transformation projects that focus more on the concrete impact on employee satisfaction and retention. In the hybrid work scenario, for example, it is essential to actively address digital burnout and inadequate work-life balance, he says.  

Among the market leaders in the Swiss segment for strategic services for workplace transformation, the ISG study found that two original Swiss providers were able to establish themselves. Compared to the large, globally active service providers, they score points with above-average quality standards. In addition, they know the market and the local companies better than average. In this way, they can keep up with the competition, although the international providers have price advantages, for example, because of their larger low-cost resources, according to the ISG study.  

The greater cultural proximity also plays into the hands of Swiss providers, especially with those generally smaller companies whose customers are concentrated in Switzerland and nearby foreign countries. ISG therefore assumes that Swiss providers will continue to be among the leading service providers in the market in the future. The prerequisite for this, however, is that they invest sufficiently in new and innovative solutions, as the "future of work" market will remain very dynamic for the foreseeable future. 

TD Synnex receives ISO 9001 certification for the DACH region

The IT services company TD Synnex has successfully passed two ISO certifications at the same time and received the certificates for ISO 9001:2015 and - for the first time for Germany - also ISO 14001:2015 at the end of the year.

The TD Synnex company is ISO 9001 certified throughout the DACH region, with ISO 14001 certification at its Swiss sites to follow this year. (Image: Depositphotos.com)

In spring 2022, the elaborate process of ISO certifications of TD Synnex Europe GmbH started, at the end of which Germany, Austria and Switzerland were presented with the certificates. For the first time, the company's quality and environmental management team sought dual certification. For DACH, TD Synnex was audited for the ISO 9001:2015 quality standard, while Germany was additionally audited for the ISO 14001:2015 environmental standard.

Continuously improve processes

Probably the most widely used quality standard, ISO 9001 specifies requirements that must be met as part of the implementation of a generally recognized quality management system. Existing processes and process optimizations are examined and it is determined which procedures are to be followed and who is responsible for which quality-relevant activities. ISO 14001 certification relates to environmental management and shows whether a company is making active efforts to promote environmental protection and reduce environmental damage. With the design and implementation of an environmental management system, the environmental impact of companies and the reduction of their greenhouse gas emissions are examined and necessary processes are certified. 

Barbara Koch, Senior Vice President & Regional Managing Director of TD Synnex DACH, comments: "I am very pleased that we can start the year with such positive news and would like to thank our entire team for their great efforts during the two demanding certifications. They demonstrate our high quality standards, our customer focus and our focus on CSR issues - all essential parts of our business strategy. In this way, we ensure that quality and environmental orientation are lived by each and every one of our employees on a daily basis. Continuously improving processes, enhancing quality and thus increasing the satisfaction of all stakeholders involved will remain on our agenda in 2023." 

ISO 14001 certification: Sites in Switzerland to follow

ISO 9001 certification was applied to all areas for the first time - previously the Value area, Advanced Solutions, was certified. It explicitly applies to the sites in Munich, Leinfelden, Nettetal and Eslarn as well as Vienna (AT), Rotkreuz (CH) and Altishofen (CH). Manufacturers and sales partners benefit on both sides from the clear definition and documentation of processes, from representation regulations, and from the internal audits in which potential for improvement is continuously identified, analyzed, and evaluated. The examination of opportunities, risks and new business opportunities support the claim to be a trusted advisor for all stakeholders. 

The ISO 14001 certification, which is essential for many distribution partners as part of their supply chain duty of care, was carried out for the first time for the Munich, Leinfelden, Nettetal and Eslarn sites - Austria and Switzerland are to follow by the end of this year. The certification was actively supported by the special "Green Team" of the German national subsidiary, which takes care of the topics of sustainability, reduction of waste and CO2, and many other environmental issues for both the locations and the entire supply chain of the distributor. The evaluation of new approaches, the follow-up and compliance with the catalog of measures and also the monitoring of developments and improvements are on the agenda of the team of specialists. One of the first activities to benefit distributors and their customers will be the labeling of environmentally friendly products in the InTouch e-commerce system.

Source