Presentation deck from an Iceberg webinar on May 3, 2018. Vendor Risk Management is one of the top priorities for businesses today. Organizations rely on thousands of vendors to deliver products and services, but while business functions can be outsourced, you can’t outsource your risk or liability. In this free webinar, you’ll see how organizations are using ServiceNow’s Vendor Risk Management solution to: Gain visibility into their vendors, even between assessments; Prioritize risks and drive them to closure, without hundreds of emails and spreadsheets; Replace unstructured work patterns with intelligent workflows, so that resources can be focused on the most critical vendors and risks; Build confidence and trust in their vendor risk management processes, and find ways to reduce costs and drive new revenue streams. Panelists include Kirk Hogan (COO, Iceberg Networks) and Travis Giff (GRC Developer, Iceberg Networks).

1. Enhance
your
perspec.ve
of
vendor
risk
with
ServiceNow
WEBINAR
•
MAY
3,
2018

2. Delivering Risk Intelligence
Kirk
Hogan
SENIOR
VP
OF
GRC
SERVICES
&
CHIEF
OPERATING
OFFICER
Travis
Giff
SENIOR
GRC
ARCHITECT
&
DEVELOPER
Today’s
presenters
About
Iceberg
ü 100%
focus
on
Governance,
Risk
Management
&
Compliance
(GRC)
ü Staff
includes
25+
full-­‐Xme
GRC
consultants
&
cerXfied
developers
ü Customers
include
top
financials,
insurance,
health
care,
manufacturers,
retail,
gov’t
in
North
America.

3. Delivering Risk Intelligence
Outcomes
vs.
Features

4. Delivering Risk Intelligence
Webinar
Outcomes
ü Define
be^er
Success
Criteria
ü Discuss
what
is
at
stake
ü Discuss
who
will
benefit
ü IdenXfy
where
to
start

5. Delivering Risk Intelligence
NO
VISIBILITY
INTO
OVERALL
PROGRAM
ACTIVITIES
AND
VENDOR
RISK
POSTURE
SILOED
PROCESSES
AND
ORGANIZATIONS
LEAD
TO
MISSED
COMMUNICATIONS
MANUAL
AND
TIME
CONSUMING
PROCESSES
(EXCEL,
EMAIL,
MEETINGS)
VENDOR
RISK
PROCESSES
AND
TOOLS
CAN’T
KEEP
UP
Common
Vendor
Risk
Challenges
XLS
LEGAL
HR
IT

6. Delivering Risk Intelligence
LACK
OF
VISIBILITY
REGULATORY
BURDEN
LIMITED
RESOURCES
CHALLENGES
AUTOMATE
(SPEED)
PRIORITIZE
(AGILITY)
MONITOR
(VISIBILITY)
SOLUTION
BUILD
TRUST
PROVIDE
VALUE
REDUCE
TIME
&
COST
IMPACT
CUSTOMERS
PARTNERS
EXECUTIVES
&
BOARD

7. Delivering Risk Intelligence
Providing
Value
Build
confidence
&
trust
in
your
VRM
Program
Reduce
supplier
costs
Drive
new
revenue
streams
Move
faster
with
greater
agility

8. Delivering Risk Intelligence
“Trusted,
aggregated
and
transparent
risk
data
enabling
organizations
to
make
more
informed,
conDident
and
effective
business
decisions.”
Delivering
Risk
Intelligence
Disconnected
risk
&
business
data
Aggregated
&
integrated
for
context
Analyzed
&
interpreted
Be^er
business
decisions
&
acXons

9. Delivering Risk Intelligence
VENDOR
PORTFOLIO
Five
Key
Capabilities
of
ServiceNow
Vendor
Risk
Management
ASSESSMENT
MANAGEMENT
VENDOR
PORTAL
ISSUES
AND
REMEDIATION
GRC
INTEGRATION

10. Delivering Risk Intelligence
VENDOR
CATALOG
LEGAL
HR
IT
VENDOR
PORTAL
CONTACTS
ASSESSMENTS
DEADLINES
ISSUES
AND
REMEDIATION
GRC
INTEGRATION

11. As
a
Vendor
Manager
of
XYZ
Company
I
need
to
assess
the
risk
associated
with
a
new
professional
services
vendor
that
is
going
to
assist
with
implemenXng
my
organizaXon’s
Vendor
Risk
program.
Key
Ac.vi.es
• Set
up
Vendor
Porfolio
• Define
Vendor
Contacts
• Create
an
Assessment
Template

12. As
a
Vendor
Risk
Assessor
of
XYZ
Company
I
need
to
send
out
an
assessment
and
follow
up
with
the
professional
services
vendor.
Key
Ac.vi.es
• Distribute
Assessment
to
Vendor
• Review
Responses
to
Assessment
• Follow
up
with
any
Issues

13. As
a
Vendor
I
need
to
complete
the
Assessment
and
respond
to
any
follow
up
issues
as
per
the
request
of
XYZ
company.
Key
Ac.vi.es
• Respond
and
submit
Assessment
• Manage
my
team
• Follow
up
with
any
Issues

14. Vendor
Manager
Vendor
Risk
Assessor
Vendor
Build
trust
/
Provide
value
/
Move
faster
/
Grow
the
business
Visibility
Confidence
Efficiency
Partnership
Address
Risk
Earn
Trust
The
Outcome

15. Delivering Risk Intelligence
“Trusted,
aggregated
and
transparent
risk
data
enabling
organizations
to
make
more
informed,
conDident
and
effective
business
decisions.”
Delivering
Risk
Intelligence
Disconnected
risk
&
business
data
Aggregated
&
integrated
for
context
Analyzed
&
interpreted
Be^er
business
decisions
&
acXons

16. Delivering Risk Intelligence
Q&A
Kirk
Hogan
SENIOR
VP
OF
GRC
SERVICES
&
CHIEF
OPERATING
OFFICER
Travis
Giff
SENIOR
GRC
ARCHITECT
&
DEVELOPER

17. Delivering Risk Intelligence
A
full
lifecycle
of
GRC
services
Management
Workshops
Visioning
&
Alignment
CMO/FMO
KRI/KxI
Professional
Services
ImplementaXon
&
IntegraXon
SoluXon
Lifecycle
Management
Iceberg
APS
Post-­‐ProducXon
Support
Mentoring,
Coaching
&
Skills
Development
Sandboxes
Risk
Intelligence
Academy
Case
Studies
Best
PracXces
Webinars
GRC
Innova.on
ReporXng
/
Dashboards
Toolkits
&
Enhancements

18. Thank
you!
Webinar
replay:
icebergnetworks.com

19. Delivering Risk Intelligence
Integrated
Risk
Management