Manage and mitigate enterprisewide risk with ServiceNow partners BOOK OF CUSTOMER STORIES TABLE OF CONTENTS BOOK OF CUSTOMER STORIES 3 Introduction 4 Enterprise risk and compliance 5 Making the possible practical with Deloitte 6 Experience real-time compliance with Devoteam 7 Finding value in integrated risk management with EY 8 A careful approach to rapid risk management maturity with Thirdera 9 Transform second line of defense functions with Wipro|Edgile 10 Aligning operations across geographies with Wrangu 11 Managing compliance and minimizing risk with Wrangu 12 Business continuity and resilience 13 Driving towards business continuity and resilience with NewRocket 14 A strong offense is a good defense with Wipro|Edgile 15 Third-party and supply chain risk 16 Building a technology and managed services TPRM solution with EY 17 Centralizing risk management with NewRocket 18 Bring new life to Third-party Risk Management with Wipro|Edgile 19 Tech and cyber risk 20 Creating a strong and scalable risk management foundation with EY 21 Going above and beyond on risk management with NewRocket 2 Are you struggling to make real-time, risk-informed decisions about both longstanding and new risks? Enterprises that have worked with ServiceNow and our partners have realized quantifiable results across the enterprise, including: Discover our range of risk management solutions and success stories—made possible by the joint power of our partners and the ServiceNow platform. The survival of your business may depend on how well you manage operational risk. 3 $2.6M saved annually automating end-to-end GRC processes2 63% reduction in vendor contract management time1 $1M tracking status with real-time reporting and dashboards2 70% improvement in productivity for GRC staff responsible for reporting1 BOOK OF CUSTOMER STORIES Sources: 1 Forrester Consulting Study: The Total Economic ImpactTM of ServiceNow HR Service Delivery 2 https://www.servicenow.com/now-on-now/transforming-grc-processes.html BOOK OF CUSTOMER STORIES 4 Enterprise risk and compliance Customers facing regulatory, critical events, and governance challenges turned to our partners and ServiceNow to help them put integrated risk management solutions in place. By the numbers: Discover what our partners can do to address your enterprise risk and compliance challenges. $1.6M Average annual reduction in penalty payments from failed audit findings1,2 70% Improvement in productivity for GRC staff responsible for reporting1 $885K Average annual reduction in external auditor payments1 Sources: 1 Forrester Consulting Study: The Total Economic ImpactTM of ServiceNow HR Service Delivery 2 Validated benefits calculated based on average loss frequency, which includes risk events The opportunity One of the world’s premier biopharmaceutical companies was looking to enhance maturity of its corporate compliance and risk management functions. They experienced disconnected resources stored in different places, inefficient workflows, and challenges locating important links and materials. The complex, non-integrated processes and systems made it difficult to achieve compliance. The solution Using ServiceNow as its risk management resource platform, combined with Deloitte enablement, the company was able to offer an intuitive, self-service experience that provides personalized resources, data, and insights to deliver compliance—better and faster. Users now have a more consistent and straightforward user experience with a single place to access personalized resources, tasks, and information surrounding risk and compliance. Making the possible practical with Deloitte Learn More ServiceNow product Integrated Risk Management Significant reduction in issue tracking fields and use of common fields. Several key systems and processes moved to ServiceNow with more forthcoming. Multiple different business processes harmonized into a single solution. BOOK OF CUSTOMER STORIES 5 The opportunity Topdanmark, one of the largest insurance companies in Denmark, found that multiple spreadsheets, PowerPoint decks, and SharePoint files did not provide the transparency and efficiency necessary to address their regulatory compliance needs. To meet customer expectations and streamline employee processes, they began looking for an alternative risk management solution. The solution The insurance company uses the ServiceNow Policy and Compliance Management and Risk Management apps that are part of the Integrated Risk Management solution to monitor their technology and cyber risks and maintain regulatory compliance. The platform ensures the company can comply with complex regulations, such as the Digital Operational Resilience Act (DORA) and General Data Protection Regulations (GDPR). Reports for their board—which took up to two weeks to collate—can now be done in an instant. Increased efficiency with process automation. Minutes to generate reports that used to take two weeks. Improved decision- making based on real-time data. Learn More Experience real- time compliance with Devoteam BOOK OF CUSTOMER STORIES 6 ServiceNow product Integrated Risk Management The opportunity A large global fintech client wanted to replace a homegrown GRC solution that involved manual processes, provided a poor user experience and lacked a single, aligned view of the organization. After a year with a competing partner, the company couldn't distinguish between strategic implementation and merely fulfilling requirements. The client turned to EY teams for a product-led, agile implementation. The solution Using IRM+, which blends Integrated Risk Management (IRM) with advanced technology architecture, EY teams proposed combining their mature risk management methodology with ServiceNow's out- of-the-box capabilities. This solution was provided as a true ecosystem play, involving close collaboration between EY Technology Consulting, People Consulting, Financial Services Risk Transformation teams, and the ServiceNow alliance team. The IRM+ approach not only addressed the client's immediate needs but also enhanced their overall risk management efficiency and stakeholder experience. Finding value in integrated risk management with EY Learn More ServiceNow product Integrated Risk Management Reduced complexity of implementation with smaller technical debt. Implemented data models underpinning all IRM functionalities. Higher adoption and user engagement. BOOK OF CUSTOMER STORIES 7 The opportunity A US-based healthcare and life sciences company wanted to take a thoughtful approach to risk management with an accelerated time to value. Along with reducing risk, they had the goal of streamlining tracking and completion of attestations while easing the pressure on their compliance team. The solution Together, Thirdera and ServiceNow accelerated the compliance process, enabling policy owners to unify and formalize risk management workflows and provide transparency into business risk for the executive team. The company gained the ability to put into practice numerous risk frameworks, policies, and controls that were previously out of reach. One year later, they still use 100% of the implemented GRC features with the Integrated Risk Management platform. A careful approach to rapid risk management maturity with Thirdera Learn More ServiceNow product Integrated Risk Management 400 risks actively tracked. 550% increase in number of automated controls monitored. 3 policy management tools consolidated onto one unified platform. BOOK OF CUSTOMER STORIES 8 The opportunity A major telecommunications company and media conglomerate in the US sought to transform its second line of defense functions across process and technology with the goal of better serving its business and customers. The company placed a strong emphasis on getting the most return on investment (ROI) out of its technology investments, while also building a sustainable program to support its risk management needs. The solution After assessing its needs and developing a viable strategy built on the ServiceNow platform, the company identified poorly designed processes that were candidates for intelligent automation based on the quality of data. It further integrated AI and machine learning capabilities within the ServiceNow platform using Intelligent Issue Management and Remediation to address its integrated risk management needs. The use of amplified dashboards has given it greater visibility into risk and eliminated human errors, thanks to machine-run tasks. Transform second line of defense functions with Wipro|Edgile 70% reduction in call, chat, and/or email inquiries regarding processes. 30% reduction in cost of operations (reduction of 6 contractor resources). 40% increase in operational capacity for exceptions program. Learn More ServiceNow product Integrated Risk Management BOOK OF CUSTOMER STORIES 9 The opportunity One of the EU’s largest banking organizations was faced with the challenge of providing unified, consistent privacy processes across the organization. Because of their size and complexity, each country had slightly different operations, and each division of the business operated in its own unique way. The bank struggled with transparency and lacked automation, which made consistent reporting difficult. The solution With a combination of ServiceNow IRM and Wrangu Privacy Hub, the bank achieved a holistic solution for its risk management needs. To ensure success at each stage, the delivery was broken down into phases, with each phase having a parallel stream. Using the flexibility of ServiceNow and Privacy Hub, Wrangu used the customer’s own pre-defined questionnaires, decision-making structures, and workflows to create significant automation, cost savings, and ease of implementation. Enhanced automation to ensure cost savings and ease of implementation. Enabled a joint view of risk and data privacy across divisions. Customized enhancements to meet unique needs. Learn More Aligning operaions across geographies with Wrangu BOOK OF CUSTOMER STORIES 10 ServiceNow product Integrated Risk Management