Business Outcome: Resolve real security threats fast IMPLEMENTATION PLAN ACTIONS TO SERVICENOW CAPABILITIES BY PHASE Value Metrics REALIZE VALUE OF IMPLEMENTATION Phase 1 3 Modernize • SLA management • Decrease in time to 1. Build the inventory: • Configuration (CMDB) management prioritize and resolve • Inventory authorized devices and • Event management incidents software. • Knowledge management • Reduction in backlog of • Identify services needing protection. • Workflow management security incidents and • Inventory security controls, • Business rules management vulnerabilities enforcement technologies, response • Security incident response • Reduction of business risk playbooks, and orchestration • Vulnerability response through visibility into endpoints. • Service portal critical services 2. Connect security workflows: • Request management • Reduced time spent on • Connect security alert sources. enrichment tasks through • Connect vulnerability scanner automation and threat information. intelligence • Connect asset discovery mechanisms. • Connect email distributions and notifications. • Connect additional threat information sources, scanners, and feeds. • Connect orchestration endpoints. Phase 2 3 Transform • Incident management 1. Configure security operations: • Problem management • Define role-based access. • Change management • Configure security incident and • Performance analytics vulnerability workflows. • Threat intelligence • Configure threat intelligence sources. • Discovery • Develop business criticality and risk • Service mapping calculators. • Collaboration • Build SLAs, dashboards, and reports. • Notification management 2. Launch new security workflows: • Publish security request catalog. • Develop standard post-incident assessments. • Standardize threat intelligence collection. • Establish automated security incident and vulnerability responses. 25 © 2021 ServiceNow, Inc. All rights reserved. ServiceNow, the ServiceNow logo, Now, Now Platform, and other ServiceNow marks are trademarks and/or registered trademarks of ServiceNow, Inc. in the United States and/or other countries. Other company and product names may be trademarks of the respective companies with which they are associated.