ServiceNow Vault The business challenge Organizations are transitioning to the cloud to reduce operational costs, enhance user experience, improve performance, and make it easier to collaborate with partners, customers, and third-party entities. However, with all these benefits, security and compliance risks remain a major barrier to cloud adoption. CISOs are challenged by weaknesses in security governance and compliance as well as issues around complexity of secure configurations and the shortage of skills. Data is at the center of every business and is essential to meeting customer needs. To safeguard digital assets from cyberattacks and insider threats, it is essential to have a sound data protection and data privacy strategy. A strong security posture in the cloud cis critical for organizations to achieve higher business outcomes. The ServiceNow solution ServiceNow Vault helps organizations strengthen their security posture and comply with regulatory requirements by providing a set of advanced security and privacy controls on the Now Platform to protect business critical applications and sensitive data. Vault presents a unique value to organizations by integrating these critical security and privacy services into a single, highly available platform and making it easy for organizations to procure and consume. Vault consists of six key services: ServiceNow Zero Trust Access enables organizations to define granular access control policies and assign user access based on a variety of attributes including but not limited to - network (IP address), geographical location, device being used, authentication method and identity provider attributes. Security administrators can dynamically reduce user access privileges based on the risk profile and avoid unauthorized access and prevent data breaches. Take control of your data with advanced data encryption for data-at-rest and data-in-app with flexible “bring your own key” management Increase your security posture by enabling least-privilege and dynamically reducing access privileges based on user risk profile Ensure privacy of personal and sensitive data (PII or PHI) with intelligent data discovery, data classification and data anonymization for ServiceNow instances Protect your digital credentials on the Now Platform including passwords, APIs, tokens, certificates and keys and avoid data leakage or lost credentials Validate integrity and authenticity of software to minimize threats and reduce the attack surface Simplify log export with a complete turnkey service to extract and export ServiceNow system and applications logs at scale and in near real time-as- a-service Comply with industry regulations by ensuring the privacy and confidentiality of proprietary and sensitive data ServiceNow Vault ServiceNow Platform Encryption includes Cloud Encryption (protecting data-at-rest) and Column Level Encryption Enterprise (protecting data- in-app). These encryption services protect ServiceNow instances data enabling organizations to protect their sensitive and proprietary data and in turn comply with regulatory mandates. Platform Encryption supports the ServiceNow key management framework (KMF), whereby organizations have the option to “bring your own key” in addition to using ServiceNow managed encryption keys. ServiceNow Data Privacy provides organizations the ability to identify sensitive and personal identifiable information (PII) including where it is located using Data Discovery. Once discovery is complete, organizations can use Data Classification to inventory and classify data for responsible use across the organization. Finally, organizations can protect data by using Data Anonymization ensuring compliance with data privacy laws. ServiceNow Code Signing helps organizations increase their security posture and improve security by validating sensitive application configuration data and scripts on the MID server before they are executed. Organizations can validate the integrity and authenticity of software and make sure no software tampering. ServiceNow Secrets Management allows organizations to centrally manage their digital credentials on the Now Platform and ensures users and applications have access and privileges restricted precisely to what they need and for which they are authorized. This prevents secret sprawl, reduces the attack surface and provides a secure and better user experience. ServiceNow Log Export Service provides organizations the flexibility to export their ServiceNow system and application logs at scale and in near real time as-a-service. As organizations move towards a zero- trust security architecture, Vault provides a strong response to the changing threat landscape and protects against advanced threats, insider threats, and the growing complexity of network environments. Vault helps organizations increase agility, improve their overall security posture, minimizes the attack surface, and protects critical assets and data. For more information visit ServiceNow Vault © 2023 ServiceNow, Inc. All rights reserved. ServiceNow, the ServiceNow logo, Now, Now Platform, and other ServiceNow marks are trademarks and/or registered trademarks of ServiceNow, Inc. in the United States and/or other countries. Other company names, product names, and logos may be trademarks of the respective companies with which they are associated. SN-DataSheet-Name-01012023 servicenow.com ServiceNow Data Privacy ServiceNow Platform Encryption Data ClassificationData Discovery Know Your Data Data Anonymization Protect Your Data