ICT Risk Management ServiceNow Integrated Risk Management (IRM) ensures comprehensive risk management to identify, assess and monitor risks in real time. You can manage seamlessly policy and regulatory compliance and userobust tools for ServiceNow Business Continuity Management (BCM). For example, business impact analysis helps to identify critical and important functions and assess the potential impact of disruptions. Continuity planning means you can develop, maintain, and test business continuity plans to recover swiftly from disruption. Identification, collection and reporting of Monitor risk and resilience activities as well as critical and important services across your organization from the workspace in the Now Platform. major ICT-related incidents Information and intelligence sharing We simplify and automate root cause analysis, capturing any gaps detected on incidents, and ServiceNowThreat Intelligence Security Center (TISC) then reporting and assigning mitigation actions to aggregates, manages, and operationalizes threat intelligence. remediate within timelines. ServiceNow IT Service By integrating threat intelligence feeds into ServiceNow Security Management (ITSM) excels in incident and problem Incident Response (SIR), you can proactively identify and management, critical for maintaining operational mitigate potential security threats, enhancing operational resilience. The automated ServiceNow Security resilience and security posture. Incident Response (SIR) leverages machine learning Reporting, alerting, and audit trail to quickly investigate and mitigate incidents, significantly reducing downtime and automating The advanced and highly configurable reporting, notification, coordination and resolution of security incidents. and audit trail capabilities of the Now Platform allow your team ServiceNow Compliance Case Management (within to rapidly provide—with transparency and accountability—the IRM) enables incident reporting via templates to information requested by DORA's stringent documentation Competent Authorities. requirements. ServiceNow simplifies compliance reporting with automated tools that generate necessary regulatory reports, Digital operational resilience testing ensuring accuracy and timeliness. ServiceNow Performance Analytics offer real-time insights and historical data, guiding ServiceNow Business Continuity Management (BCM) informed decision-making and improving service reliability. can be leveraged to develop and test continuity Build even greater resilience with the Now Platform plans, ensuring swift recovery from any potential disruption. ServiceNow Security Incident Response Flexible to your organization’s maturity level, ServiceNow offers (SIR) enhances your security posture through other market-leading solutions to expedite DORA success. integrated threat intelligence to proactively identify • ServiceNow IT Operations Management (ITOM) – support potential threats. Additionally, the Vulnerability operational resilience with predictive AIOps and foresee issues Response (VR) feature manages the lifecycle of before they impact operations. vulnerabilities, from detection to remediation, • ServiceNow Service Mapping – map and monitor service working in concert with asset management and IT dependencies, helping to identify and mitigate potential risks processes for reliable risk reduction. and disruptions. • ServiceNow IT Asset Management (ITAM) – manage the life Third-party risk management and monitoring of ICT cycle of all your assets (e.g. hardware, software, cloud third-party service providers services, facilities), identify critical assets and dependencies, become aware of vulnerabilities on these and enable faster ServiceNow Third-party Risk Management (TPRM) incident diagnosis and response. provides automation and third-party access to • ServiceNow Enterprise Architecture (EA) – help facilitate risk reliably assess third-party ICT risks, ensuring that all assessments, technology portfolio management, enterprise third-party service providers adhere to standards. modeling and visualization, and digital integration You can conduct due diligence and monitor third management. parties and engagements, log related contracts, These comprehensive ServiceNow out-of-the-box solutions, capture fourth parties within the service provisioning partners, and platform strengths align perfectly with the DORA chain, and monitor the risk profile of each. framework to help you achieve and maintain high levels of operational resilience and regulatory compliance. © 2024 ServiceNow, Inc. All rights reserved. ServiceNow, the ServiceNow logo, Now, Now Platform, and other ServiceNow marks are trademarks and/or registered trademarks of ServiceNow, Inc. in the United States and/or other countries. Other company names, product names, and logos may be trademarks of the respective companies with which they are associated. servicenow.com

Operational Resilience Management - Page 2 Operational Resilience Management Page 1