if we're ready we can just get started and i'd like to just kick off the session by welcoming everyone and thanking you for joining us for the next edition of servicenow ask the experts my name is roz marvel and i'm product marketing manager for risk and compliance for servicenow and in this session we're going to talk about some recent enhancements to our vrm offering and then we'll talk with our partner who are really excited to join us today ecobottis and we're going to learn about a little bit about their integration to servicenow and understand a little bit about how what they're seeing in the marketplace today and how accidental insights and esg risk intelligence and continuous monitoring uh can be realized within your own vrm program so uh daniel's going to give us some perspective on the market as igubata sees it today we're planning on going for about 30 minutes um before i introduce your speakers let me just remind you of a couple of upcoming sessions that are happening in our risk space so we've got later this week learning about policy and compliance management and then next week we're going to have a session on business continuity management both of those sessions will be in the community so you can sign up there um if you do sign up uh you'll get the recording afterwards and they're also available for play on our youtube channel we've had several sessions throughout march and into april um so if you're looking for something definitely uh just check in the community and search there because they'll all be updated and available for you to uh to listen to there so we've got a couple of topics to talk about but first let me introduce you to our speakers many of you are probably familiar with jorge garcia he's been in security and risk space for several years serving in a variety of roles with an array of clients providing security identity third party risk and operational risk solutions and as one of the early users of soar tools jorge strongly believes that workflow can be embedded in all aspects of security and risk to help reduce attack vectors and mitigate risk factor and he has been succeeding to that end as the principal product manager of our vrm solution to date so welcome jorge and also joining us from ecobotis is daniel perry and daniel is the global alliances director for ecovatis which operates the first collaborative supply chain sustainability rating platform and his main focus is on developing alliances with worldwide software leading vendor developers and daniel has more than 20 years of experience in business development for innovative solutions for procurement organizations and he's been a guest speaker at events such as the institute for supply chain management nasdaq innovation lab the sustainability procurement leadership council and the united nations daniel originally comes from new zealand but he currently resides in the san francisco bay area so welcome danielle and with that i'll pass this to jorge who's going to get us started all right thank you ross and thank you everyone who took the time to really listen to us today so today we're going to go through kind of what the new release or the latest release of our vendor risk management solution and i'll walk you through some of the more notable features and functionality of this release the release became available about two weeks ago and it's associated to you know what a service now would consider to be our san diego release so a couple of things that i'll talk i'll touch on before i pass it on to daniel at audi ecovado says first we are expanding our partner ecosystem you would have seen that started last year and then this year we are continuing really this aggressive expansion into other risk domains and other you know potential partners that we can provide data in order to better automate the risk assessment process in order to better inform you as you make decisions on which vendors or suppliers you onboard or choose not so on board and then subsequently which actions you're going to take in order to mitigate that risk um we're also going to talk a little bit about fourth party management um this is a feature that we've released um also in san diego alongside one of our customers and so we had customers help us in being able to design this functionality being able to pilot how the features how the use of the functionality should be used um and you know if you are a current customer please feel free to reach out as we can build really cool things together and then finally we are continuing our journey to make sure that our uh solution and really the servicenow platform is modern um it's it's uh it's um intuitive and really provides the best user experience right and so we started this journey last year with what we're calling the vendor management workspace um very in modern ui and we've also um incorporated that into the san diego release as i said it's a journey right not a destination and so um in san diego you will see some further enhancements to the ui the ux in general and then you continue to see that throughout the upcoming releases across the many uh features and functionality that we release so with that said i'll start with the integrations um first we've already had a very similar session with ontario's about how they're able to bring in that data um to service now and then um if you want to take a look at here there's the link that ross was kind enough to put there um and you can you know feel free to reach out to us if you want a little bit more information and if you want to get a little bit more context as to what type of data points they could buy today we're talking with the covales and we're very excited about this partnership because we keep hearing about esg as a top of mind uh issue that the board of you know board of directors and c-suites are discussing specifically when it relates to supply chains and so being able to integrate with you know leading service provider in this particular space is extremely exciting for us um and we hope that it provides a lot of benefit and value to you and then finally um you know we we rely on the sig for one of our standard you know assessments that we offer out of the box and so as they continue upgrading their content and refreshing it with newer questions based on what they're seeing out there in the wild in terms of security or they're getting feedback from customers we're also refreshing this on a yearly basis i'm going to move on i don't see any questions and ross feel free to please interrupt me if there are any i'll move on to fourth party management this is a feature as i mentioned in which we uh participated with a current customer to design the capability to gather requirements and then finally to also test how it should be used and would be used in a real-life deployment the problem i think it's pretty straightforward right supply chains are complicated whether it's a digital supply chain or a physical supply chain and understanding the point of failure or the point of weaknesses is really important as we've seen with you know a lot of the different events that have occurred in the past two two and a half years and so our customers are interested in a you know trying to map out their supply chains again digital or physical and then b they're trying to understand those single points of failures and then be able to respond to it right and so uh voice parties is really the beginning of that journey to be able to be to plan ahead and then also to respond for any potential disruptions which um as we we're starting to see it's not a matter of if but rather or rather a matter of time and so what we've done um for this particular phase is a particular feature is we've taken it this approach in two different phases the first phase is what we um i'm going to show you here is the ability to first go through a segmentation or categorization step of your vendor population to understand and define your most critical third parties and then you're gonna send out a questionnaire to identify the fourth parties through kind of right to audit clauses that are embedded in contracts right and what that will give you is your or give you are your most critical fourth parties and the way that we'll visualize the product is first who are the known fourth parties and known fourth party is what we're saying it's a fourth party but it's also a third party and so you will have a good understanding hopefully of their security posture their esg posture their anti-robbery anti-corruption posture and be able to have a good understanding of what that fourth party means within your supply chain and then we have this other concept of an unknown fourth party right and so what we discovered through this pilot is that there was one particular entity one particular company that they realize had a large concentration in their third-party population and they had absolutely no clue what they did and so being able to identify that particular vendor or that particular entity then led them to do a little bit more research and understand what the impact of that um you know that relationship meant to them we do have a second phase coming up um and you'll see that you know hopefully the next time that you meet with us the second phase is how do we introduce both ai and ml as well as content that comes from either content provider or from contract information to then be able to map out beyond fourth parties right in an automated fashion where we're really drawing the entire supply chain um rather than relying on assessment information right and so feedback we receive this that is the future but right now there is no single solution out there or a content provider out there that gives you that information right and so what we're going to do is continue to do research and expand on this fourth party management capability and then last but not least before i pass it to daniel so he can talk a little bit more about ecobaris is just showing you a quick preview of the latest san diego ui um and so as i said you know we we've completely revamped our user experience from two years ago till today and then from last year um until today you also see changes right uh key changes that i think will be extremely useful is you now have the ability to have your filter navigator um embedded within a workspace experience right and so prior to this workspaces kind of were isolated and it was hard to shift between workspaces and kind of the legacy ui but if you were to click on here on all then you would see your filter navigator pop down and navigate to a in any other workspace or be any other page within your servicenow platform um we've also introduce this task page right so this is a work queue that allows you to view all the different activities and tasks that you need to perform um we've also you know this is part of the previous workspace but it's just a newer theme and newer user interface and then as you may be familiar with our 360 view which gives you kind of full context of what is happening with a particular vendor in terms of you know their scores coming in from partners like ecovaris their issues assessments that are in flight as well as any any engagements that you have with them so with that said i will pass it now to you daniel thanks jorge and uh nice to meet everybody um so we'll go on to the to the next slide so ichabodus uh we're a leader in sustainability ratings so we provide a robust platform to connect global companies and allow for sharing of data across supply networks with a focus on esg sustainability um csr there's a few different ways you can you can call it we refer to it as sustainability because it's sort of a catch or term if you just want to hit um spacebar on that one jorge and we'll go into the next slide great so uh just a quick summary and we've been doing this now for 15 years um and we've compiled the largest database of sustainability ratings we rate companies of all sizes but we are focused on rating predominantly suppliers to work with 750 large multinational companies who are assessing their suppliers and predominantly tier one across four different themes environment labor and human rights ethics and sustainable procurement we cover pretty much any industry and oh yeah we've got a pretty broad geographic presence as well so on to the next one the way that we define sustainability is under these four themes environment labor and human rights ethics and sustainable procurements you might hear terms esg so that stands for environment social and governance or csr corporate social responsibility we're looking at sustainability through the lens of business to business and trading partners so it's really about what are the risks and potential opportunities for performance in [Music] in sustainability when dealing with that context and our methodology is aligned with global best practice so these 21 criterias make up our sustainability methodology and depending on the size location or industry of the company that we're assessing the materiality can be different so certain areas might be covered certain areas may not be applicable certain criteria may have a heavier weighting than others on to the next one and for the buyer community we provide a suite of intelligence solutions so we're looking at risk mapping to understand the high level hotspots of where you should be focusing your rating campaigns our sustainability ratings is sort of our core solution and then we have the modules of carbon action for those that want to dive deep on carbon and their supply chain ecovatis academy for both buy side and supply side to improve their knowledge on the sustainability issues at hand and program management to help customers through the internal and external marketing of their programs onboarding and so forth on to the next one thanks so um when it comes to supply chain due diligence um there's a framework that we follow so we're looking at risk assessment verifying the risks and then mitigating and monitoring and or disclosing the performance against that risk on to the next one okay and these are some of the worldwide regulations that are related to supply chain due diligence so even though this is a you know north american presentation i'm based in california a lot of large american companies are facing international regulations that they're now having to adhere to um or be ready for such as the new supply chain act in germany for example some may have already been reporting or disclosing against french law around supply chain due diligence and duty of care and even um in in north america there's been some activity so there was previously china had already been upgraded to a tier 3 in terms of modern slavery so you know being able to show that your products are not coming from an area that has modern slavery was already part of current law then the the trade enforcement act made it so that goods could be stopped at the border if it was deemed to have come from a place that has one in slavery now they've gone a step further um by singling out the uyghur portion of of china with the wiga forced labor prevention act so because of all of these um similar competing regulations trying to manage your suppliers on a country by country basis just really isn't um the best way to go about it what you need to do is sort of have preparedness to be able to have uh your suppliers as as clean and modern slavery free and environmentally friendly as as possible or at least have them driving towards that um so there's different types of regulations worldwide there's due diligence disclosure and then somewhere it's mandatory due diligence and disclosure and and it's that third bucket that is getting folks um uh most most concerned because you're not only needing to say publicly that you're you know against uh modern slavery or you're against having a large carbon footprint or what have you but you also need to provide evidence that you're tracking or at least researching you know what's going on in your supply chain and then have actions and show that you're taking action um to mitigate that but the good news is you know with eco virus we're helping customers take care of that problem um so again just to summarize we're helping with identifying the risk assessing the risk preventing and corrective actions and monitoring and reporting so on to the last one um so how do we how do we do it um well one is where first of all we're integrated into your preferred solutions like servicenow so the suppliers that you want to go after we know who they are because you're feeding them directly from your system so you might have triggers and that sort of thing in service now to to kick start that process and once that process does kick start um what we're looking at is for any individual supplier we're assessing the materiality by industry country and size and every supplier receives some form of customized questionnaire so they feel like they're being asked questions that are relevant to them we assess them based on third-party inputs company management systems and we have a catch-all 360 watch where we're looking at thousands of different news sources and ngos government websites and so forth and then the assessment is done by humans so we have over 200 sustainability experts that look at that evidence based assessments and eventually all of their assessing rolls up into their scorecard and the scorecard is really clean easy to read it's exactly the same document that you're looking at that the supplier is looking at and it's available in multiple languages the cool thing about integration with servicenow is we can actually take those data points from the scorecard and plug them straight into your dashboards and your supplier profile views and so forth um within the tool that you're you're using all the time so you're not needing to swivel chairs yeah but just to add to that so there's a couple of things the first is we do have the ability to request a new questionnaire and you cover us directly from servicenow and so if you did um you know on board a new vendor and there's a need to understand their esg posture we can reach out to ecovatis and bring in the assessment but if we do not find an existing assessment then we could request for an assessment to be performed which is essentially this process that you see here on the screen the second thing is once the assessment has been performed they give you an overall score but they also give you the four themes um that they that they capture and we have the ability to not just capture the overall score we now have the ability to also capture those themes and then aggregate those scores and roll them up to calculate the final risk rating for that particular vendor right and so we'll show you um how it's essentially broken down by the risk area the risk domain um and then again you know seeing those four thematic scores and then of course a link to the nice report that is shown on the right hand side so that if you know your end user is very familiar with what this report looks like um we give you the service now look and feel but we'll also kind of provide you with the ecobatus report that brings in additional information and context that you know may not necessarily be passed over from the integration so with that said i do see uh two questions so i'll go ahead and now we'll move on to the questions i think the first one was from a sheet which was um do we have the ability to perform assessments in bulk um and you know there has been a need to do this either through log 4j or the vulnerability of what's happening today uh in ukraine and so we do have this scoped and it's part of our roadmap uh we are going to call it campaign management um and it's not going to be just limited to the ability to send out then the risk assessments it's going to be the ability to contact a subset or your entire supplier population based on criteria and then the ability to perform different actions right and so it's not just risk related if there are an improvement initiative right or if there is a zero carbon green initiative that you want all of your supplies to start following you can create a campaign to track that improvement initiative and then say hey let's work and collaborate together to reduce our carbon footprint the second question is from monica and it's with the vendor access the assessment from the servicenow portal or do they have to access a separate system with a separate login and password so what we are doing in this first phase is if you are the vendor themselves um they do have the ability to come into our vendor portal from servicenow but they would not see the assessment responses from e-colis right we do think that there is um that's you know added value but not necessarily the the main result or the computation that's coming in from these sustainability experts and so what we're bringing in is the final computed score alongside the themes and so if the supplier wanted to see that their eco-virus assessment score and assessment data they would need to be logging in into the ecavadas vendor supplier portal there's also a question in the q a portion there jorgen i think that one's directed for you as well okay so um there's one more are there any updates in regard to the whistleblower functionality so uh for this one um i think it's with you know based on that slide where um daniel showed the different regulations we are hearing whistleblowing as first a key component of the german supply chain app law and i'm sure others will follow suit and so we do not have whistleblower functionality in the servicenow platform we are working with a couple of partners that have whistle-blowing functionality uh wisley is the one that we're working with um and then with this is also something that is in our roadmap because it's not just related to supply chains and sustainability acts or sustainability data it's also something that we want to introduce as part of our irm portfolio just so that if they do see a control failure and they're you know wanted to remain anonymous this whistle-blowing thing is something that is in our scope and our roadmap across our entire iowa portfolio there's a question for you from monica daniel where they're asking is the vendor responding to any questions i'll answer it from the servicenow perspective from a servicenow perspective they are not but they do i believe need to answer questions um within the e-coladas ecosystem yeah can you talk a little bit about the process there yeah sure so um when a supplier is invited to go through the sustainability assessment the first thing they do is they register so they um so we validate exactly who they are where they're located how many employees they have what industry they're in and so forth then a questionnaire is generated for them which is unique based on our massive question data set so what they end up with is something that is um enough questions i'd say so we want to make sure that we get we keep it relevant but also give them the opportunity to show what they're doing over and above what's expected of them because remember our our ratings as a as a performance rating not a compliance or risk uh score uh the vendors will access um the ecovertis questionnaire that whole process is completely separate from servicenow for good reason because it's been 15 years in the making and and is quite complex um so we're not rebuilding all of those questions and stuff and and other platforms um but in terms of the buy side look and feel user interface is all very seamless yep and then the the the cool thing is that they only complete the assessment once um you know for customer x and then have the ability to um to expand so i think monica you're saying like you've seen that in in other cis and other kind of applications and tools and it's very very similar to that right it's almost an assessment exchange in in that and that's possible yeah one of the one of the things that we focused on when we set up eco virus was to make sure that there was a lot of value in it for the for the vendors um so with their as opposed to cyber right no one really wants to talk about what their cyber risk score is um and we know we have a sister company that does cyber security ratings um but with sustainability once a company achieves their sustainability assessment once they achieve their rating it's something that they may want to promote so through our platform they can share scorecards with whomever they want and via the integration with servicenow you know many of the suppliers that customers would be accessing would be suppliers that have already achieved their scorecards and and i get where you're coming from too many systems to be logged in the the the solution to too many standards is always another standard right um but again we are the de facto standard for sustainability ratings we've been doing it for 15 years and really what we were addressing um was the too many different ways of measuring what is sustainability and as you saw from our methodology we've got four different themes 21 different criteria someone coming to you and saying i just want to ask a question directly to you vendor about your diverse hiring practices and then someone else comes and says but i just want to know about your greenhouse gas emissions and then someone else says i just want to know about if you're ethically hiring people within your organization and so what we've done is put all of those different themes together and put it into one sustainability rating monica i'd love to have a chat with you offline because it sounds like you've got a lot of great ideas on this topic okay um so the other question follow into that was um do you need to have a subscription to ecovodas or or how does that um work so just a little bit of detail there yeah absolutely can chat the uh link to the store because there was a question on how do you get this so um accessing that would be in the link yeah great so um because ecovitis is like a programmatic approach we're helping customers with their essentially their sustainable procurement programs so helping them with internal marketing of it external marketing of it and then ongoing program management as they're engaging with their suppliers and onboarding new suppliers so therefore it is an enterprise um level implementation so you do need to have an ecovirus program in place to be able to take um to get the benefit of being able to integrate um with servicenow but as you can see on the servicenow store there's links you can go through to um get a referral off to an ecovitis account executive who can talk with you about our plans and programs great so monica if you want to share your contact details with with me i can get that over to daniel that'd be great so um coming up on yes one more question yep sorry um any plans to integrate with sourcing procurement processes and we do and so we did release a solution or an application called procurement service management that's part of the servicenow portfolio but of course we know that everything is going to be done in service now and so we are also looking to create integrations to some of these sources and procurement processes you will find some already exist as part of what we call the integration hub and so the koopas the rebus of the world you will find as an existing scope uh sorry spoke that we can already connect and integrate with um and we're also expanding that so that integration hub we have i believe over 250 different integrations to different systems great so for additional resources we just put a few links up there so that you can be uh accessing those as i said in the community will be this recording as well as past and future ask the expert sessions those are also available on youtube as well so thank you so much for your questions i'm really insightful monica we will definitely uh follow up with you thank you for sharing your details and if anyone has any additional questions please feel free to contact us here um or uh definitely you know your sales rep is always available um but thank you so much daniel jorge for your time it's really exciting to be at the forefront of the esg market and i know you guys are doing amazing things so thank you for partnering with us we really appreciate it thanks everyone thanks everyone take care bye