Cloud Encryption Customer Challenge Protecting sensitive an d regulated da ta is a top priority for today’s enterprise corporate executives. With the ongoing digital transformation journey, many enterprises are enjoying the numerous benefits of the cloud including the ease of da ta sharing and collaboration. But as more da ta is sent to an d stored in the cloud, enterprises remain concern ed with topics like Shadow IT an d da ta loss or leakage. All data, specifically personal identifiable information that an enterprise stores or handles, needs to be properly protected. From financial information and paym ent details to employee records, customer details, loyalty schemes, sensitive da ta must be protected. A lack of skills, standards, an d controls have m ade it a challenge to make the cloud secure. IT departments can address data integrity an d security by working with their respective cloud providers to increase control an d maintain complia nce an d govern ance of their sensitive da ta by employing encryption services. ServiceNow® Cloud Encryption Encryption is regarded as one of the most effective approaches to da ta security. By applying encryption an d practicing secure encryption key management, organizations can help ensure only authorized users have access to sensitive data. Even if lost, stolen, or accessed without authorization, encryp ted da ta is unreadable an d meaningless without its associated key. Clou d Encryption is a new data-at-rest encryption offering from ServiceNow. The service uses hardware security modules (HSMs) val idated under FIPS 140-2, to help protect the confidentiality an d integrity of encryption keys. This Cloud Encryption offering conforms with the NIST 800-57 compl iant key lifecycle management, the same key man agem en t framework that supports ServiceNow Column Level Encryption (CLE) Enterprise. • Hyperlink style = Century Gothic Bold 9.5pt, Black/Underline. Protect sensitive data Encrypt your data-at-rest and provide an additional layer of security. Utilize encryption and key lifecycle managemen t capabilities that are designed an d built to NIST 800-57 standards. Reduce and manage risk Natively encrypt your sensitive data-at-rest to help meet your complia nce an d governance requirements. Ensure data confidentiality Use the strongest industry- ad opted government approved AES 256-bit encryption coupled with FIPS 140-2 Level 3 validated hardware security modules (HSM) to ensure da ta privacy. Limit the impact of breaches Prevent unauthorized access to critical data, whether from inside or outside of the organization. Protect the organization if a storage device is lost or stolen. Flexible control of data security Encrypt your da ta with encryption keys that you supply an d man age. Rotate keys whenever needed. Navigat ion an d key m anagemen t operations Clou d Encryption uses ServiceNow’s Key Management Framework (KMF) which enables flexible encryption policies. The KMF provides enh anced key managemen t capabilities following NIST 800-57 guidelines an d gives customers the choice of prov iding their own keys (bring your own keys, BYOK) or using keys generated by ServiceNow. Key rotation operations are completely ma na ged by customers from within their ServiceNow instance, providing flexibility and autonomy, as well as avoiding the need to involve ServiceNow support teams. ServiceNow’s Clou d Encryption is des igned to be database agnostic. The Cloud Encryption product is supported on MariaDB and RaptorDB. Clou d Encryption allows customers to bring more of their da ta to the cloud, while helping meet strict da ta security an d privacy standards. Clou d encryption provides an important layer of da ta security by ensuring data-at-rest is always protected. We continue to build trusted partnerships with our customers and help you meet your regulatory compliance mandates by protecting your sensitive data-at- rest © 20224 ServiceNow, Inc. All rights reserved. ServiceNow, the ServiceNow logo, Now, Now Platform, and other ServiceNow marks are trademarks and/or registered trademarks of ServiceNow, Inc. in the United States and/or other countries. Other company names, product names, and logos may be trademarks of the respective companies with which they are associated. servicenow.com K ey l i fecy c le m a na gem en t