logo

NJP

What's new in Vendor Risk Management

Import · Aug 29, 2022 · video

so today's presentation is going to be talking about what's new in third party risk management so thanks so much for joining us and i will get into a couple of housekeeping details before i introduce stephanie so everybody's automatically placed on mute and as i said we can use the q a feature to ask any questions throughout the session many of the sessions we've had this month have been interactive so we'd love that um questions uh that we can't get to or we don't have an answer to we will follow up with you um so if that's necessary you can shoot us your email address in the chat uh the sessions are going to be recorded and shared in the servicenow community and uh after the session ends you may be prompted to fill out a short survey and that is just for our own internal feedback but we really appreciate participation if you don't mind so as i mentioned we've had several interactive sessions throughout this month we started with business continuity management in early august mid-august we had it and ops risk then we moved over to policy compliance and audit management operational resilience and now we're doing the vendor risk management portion of what's new for what is our tokyo release in mid-september we'll also go over the ops devops accelerator so definitely feel free to sign up for that session if you did miss any sessions again as i said they're in the community and they will also be on youtube um shortly thereafter so thank you so much for joining us today as i said i'm going to introduce stephanie but first i'll let you know who i am i'm rosalyn marvel and i'm the product marketing manager serving over bcm operation resilience and vendor risk management i have a background for the last several years i've been working in the vendor risk management space so i'm really excited to introduce you guys to stephanie because i met her several years ago at a trade show um and we became fast friends not thinking that we would work together um she is an excellent representation of third party risk being a licensed third party risk professional she's got a degree in ops management logistics and information systems as well as an mba and she's held several positions at varied companies working in different aspects of grc but her love and her passion is third party risk and so i'm really excited that she is our new product manager for the third party risk product so you'll be hearing a lot more from stephanie over the next course of the next few months and as she brings new enhancements to the market so welcome stephanie we're delighted to have you thank you very much roslyn and i'm excited to see that we have over 30 people today so that's fantastic and as roslyn mentioned we've known each other for a very long time because her and i have both been in the space for a very long time it's great that we have the opportunity to work together so today we're going to go over some of the new features that we've had i just started in the product management role here at servicenow within the last few weeks but i'm quickly trying to make as many changes in the future in the roadmap as possible and we'll be seeing a lot of changes exciting changes in the next year or two so i'm going to hand it back over to roslyn she's going to go over some uh slides for us and then i'll do the demonstration thank you thank you so much uh as stephanie mentioned um she didn't bring she didn't leave the development team that brought these enhancements to place so if there are any questions that we can't answer we'll be happy to get back to you um and that's just a nature of the timing on this but some of the enhancements that she's putting on the roadmap now i'm so excited to start talking about and i just i wish i wasn't under wraps um but uh the the two enhancements we're going to talk about today uh the first one is the reimagined third party portal um so what we've done is we've revamped the portal to try and streamline the activities and tasks that your vendors need to engage in when they come in at first we want to give them the best user experience possible and our real goal is to reduce that vendor fatigue the system fatigue that so many people complain about um and i think we're doing a great job of trying to streamline the space and get people to focus on the more important information and put it up front so that they can increase their engagement and get to you faster and get your answers and and results quickly so that's the first one and the second one we'll talk about is our third party score framework which helps you better visualize the external content and those scoring capabilities that we're bringing in from our third party content providers it allows you to um understand a little bit more about the risk thresholds and uh what trigger is action within within your um third party um catalog uh we're trying to really give you a greater understanding of each vendor and also understanding um of how they compare to each other throughout your portfolio so stephanie i'm going to pass this over to you because nobody likes a marketer to talk they really want to see the demo and see things in action um and so if you could walk us through those two enhancements that would be super helpful fantastic and of course they want to hear from you so let's go ahead and let me know if you all can see my screen i cannot that is we'll try again okay all pianists everyone else can see it everybody can see it yep absolutely okay okay so you can see good day alex right now all right fantastic so the two main things that i'm going to be going through today will be the enhancements to the third or the vendor portal so this is the portal in which the companies that you want to fill out assessments will have access to and they've cleaned up the look and feel and they've made it uh given it a more ease of use of capability so as i log in here we can see i've logged in as this individual called alex and he works for this company called work faster and we've sent him some assessments which he will see he's going to have the ability to see his assessments but he's also going to be able to now see all of the activities because he is the primary contact so if he chooses to allow other people to be primary contacts for this company right now we have alex newson and kevin dolan as a primary context kevin dolan will also be able to log in see kevin dolan's activities but he'll also be able to see all of the activities across this company of work faster he can add if you wanted janelle as well if he wanted three primary contacts or if he wanted to remove kevin now he's changed the primary contacts of people that your company will be working with at work faster now in addition to making a additional a change they can control who the primary contacts are at the company level they can also update the primary contacts at the engagement level the engagement levels are the individual products and services that are being offered by this third party and you can see here that they have the ability to add different contacts per engagement what that means is that whatever of these third parties that you have select i'm sorry these contacts that you've selected at the engagement level they will be able to see any information on that engagement including issues and tasks they'll also be able to go ahead and answer the assessments so they'll be able to share the workload that's sent out to them at the assessment level and at the task level this will allow them to also go ahead and assign who gets which task and who gets what issue to ensure that those things are taken care of at that level okay the other thing that we have up so we can see that we've set up a primary contact for engagements and it was successful so we are getting notifications when there are changes in addition to the changes in the added ability or the moving around of things we also updated the tour so the tour is going to reflect the changes to the portal the portal has a different um has a dark look and feel so you can see it's got some different shading to it and the colors are a little bit different and you can see that all of the way that this the tour walks you through has also been updated to reflect where things have changed within the portal okay now this the verbiage within here can be updated by your when you have your own installation if you'd like so if there was some additional information or if you wanted to reword it in a different way this is definitely something that you can go ahead and play with so it is available to you so i'm really excited about the nice new look and feel because it's easier to use you can see if i scroll down i can go ahead and i can keep going down and seeing all of the different engagements that this particular company has that were working with this particular company they have the ability to see all of the issues that are associated to them that are open that they need to complete and they can specify who they want to assign these individual tasks to so right now the insufficient password complexity is signed to kevin and i think i want to change it so i can go ahead and i can change that so the main primary contact can administer who gets the different tasks and issues sent to them within the portal does anybody have any questions looks like there's one question one question yep can you see that let me get that off of the screen sorry um can we have a property configuration um i think i'll have to get back to the one of them um why is the workday logo on the work faster company widget um it's just my internal data for my development box is sort of uh it's off so it is a development environment it isn't a live work workspace that we're in right now yeah oftentimes we try to add logos so that you can see what they'll look like um but those are all you know changeable by you and apologies for for not syncing those up but that's just um just something in nature of having live demo video yeah so the next thing that we have updated is here um we have updated the individual um i made my zooming in a little bit bigger so here i have logged into the workspace and how is the list of vendor contacts set okay so i have a question before i move on and it was about the vendor contacts and the way that the vendor contacts are set let me jump back into my other workspace since i have a question about it before i move on if i come back in here and i go home i am set up as the primary contact and when you first set up the third party you'll choose who the primary contact is and they will get an email that invites them to the vendor portal when the primary contact comes in here they have the ability to come up here and go to manage my team so when they manage their team you can see that they have all of these different contacts that they've already added if they want to invite another person so let's say you know right now they got somebody from you know corporate council they have the infosec person hr person and they have um infosec maybe they want to invite someone from procurement or a particular legal person they can go ahead and they can invite a contact and they will go ahead and complete their information in here what department what email they are on what language you know what the role is what their overall contact information is and once they add that information that person will receive an email with a login to get into the portal and once they've been added then you'll be able to select them in the drop down boxes if you wanted to make them a primary contact at the third party level you can do that here so that way if you have people that are getting promoted switching roles quitting whatever it might be that you have a new person in you do have the ability to add and take away yours the third parties have the ability to manage their people by adding new people and removing people okay can organizations add additional users to the list uh yes um they that's what i just went through that the organizations um the people internally uh to the company that's like you can add new people as contacts and the company that you're sending assessments to they also can add new people so it's on both sides thank you let me go ahead and i'm going to jump back in see here and stephanie we also have one that i don't understand actually it's a little bit uh but you might uh how bcp and dr will manage does that make sense to you or do we need to collect acp so business continuity plan and disaster recovery i don't see the question um i hear what you are saying but i don't see a it's actually in the chat um i think we need a little bit more detail if you don't give it mind giving us a little bit more detail on what you're trying to ask either put in the q a or continue in the chat that's fine i can translate it over um but we'd really like to get to your question if we can so um but there is one more question the q a stephanie i don't know so so bcp and dr will be managed through another product called business continuity management and that's where you'll be setting up your dr plans and your business continuity plans now you can assign vendors vendors are considered entities so an entity is a person place thing object it can be anything so a third party is technically an entity and you'll be able to associate the entities which are your potential third parties or vendors to your bcp plan and your dr plan so for example maybe you're using a third party to make sure that your servers are up and running after a disaster right so you'll be able to include the vendors there hopefully that answers the question that you were looking for so i'm going to move on to this um to the workspace so some of the things that they did is they changed the spacing to kind of give it a nicer visual view so they spent a lot of time on the actual visualization of this um as i scroll down we're going to be able to see that um i you know we have the fourth parties which we already had and some of the other things that we have added is we made the enhancements to the external content providers so the external content providers the way that they're brought in will be shown so what i just did is i switched over to a third party called work faster and work faster has in the risk overview they have a moderate rating we can see all the different components that make up that rating but what has changed is if i scroll down here just a little bit you're going to see that we have added the third party providers right here in a different view i can see rapid ratings and bit site right here on that main page you i can use this right here to scroll over to see the rest of them if i want to go ahead and look at any of these i can come over here and i can look at them in a little bit more detail by going into my third party scores and when the third party scores are brought up we're going to see a different visualization that we saw and what it's doing is it's allowing us to actually bring in the scores in more detail so right here we have the all if i want to look at more details the fifth site i want to come here we're going to be able to see the different factors for bitsight we'll see the score history so that's going to be new being able to see the history of what's been going on with the ratings so we can see if it's trending up or if it's trending down over time we can see the same thing for up guard as you can see we can see the raw scores if there was any kind of history and now we're able to break it down to individual factors where before it was just essentially you know one score you know one or two scores now you can actually by service provider it's going to be broken out by the individual scores that are being pushed in because we are working with a lot of different external vendors to bring in their data so it's just a little bit more flexible in how we're going to bring that information in and it does provide us a more better visualization of the information that's coming in um can we have a property configuration to turn on and off score calculation engine during vrm i'm not sure if i understand that if you don't want to set up scoring you don't have to if you want to change the scoring you could go ahead and you can change the scoring i'm not certain why you would want to try to take that one offline stephanie yeah i'm not sure what that is about thank you um ittr setup is not if itdr setup is not place for vendors i'm not sure if i understand if itdr setup is not place for vendor then what is the best parties so milan we'll follow up with you after the call because i think you've got a couple of cross product questions that um i don't want to put stephanie too much on the spot um as as she doesn't own those products either but we'll get back to you if you don't mind shooting us your email uh privately in the chat we'll get back to you after the call um the other question from garrett is uh do you need to uh do you get the scores automatically or do you have to have a separate subscription and i'll answer that in that you do need a subscription to all the third party content providers so depending on which ones you choose you can bring in those scores and that information automatically into our product but you do have an actual subscription to those services they're third-party services we can help you liaison those relationships not a problem but um the question is is can you have a subgroup of fourth parties under the third party and the answer is yes we do support fourth parties in our model so that is something that um you know as long as that's part of the hierarchy so we have um fourth parties in it we also have um subsidiaries that you can have within um within here okay and on our main home page if there are any fourth parties which we don't have any in my data set the fourth parties would be over here as a list of all of the fourth parties great all right um i think that is it for right now fantastic so um i think we can about to thank you everybody for your time done the demo we've answered any questions if you have additional questions feel free please feel free to contact us um there are a variety of ways to connect obviously you can find out more about our products by visiting the website there's a lot of engaging conversation and i've seen a lot of really interesting videos posted lately in the community so definitely check that out and continue to watch our live service servicenow on demand which is the new branding of these types of conversations we're trying to have a lot more engaging and interesting and back and forth dialogue with our customers in these settings so please definitely make sure that um you're connecting with us there otherwise i just want to thank stephanie and welcome again um you know it's great to have you here um as i said i'm putting a lot of pressure and weight on your shoulders for uh future enhancements and things you can bring to the product and i will uh put the find the community link and put it i will send that to you david uh because i i'm not technically capable of taking that off the slide at this point but i'll definitely send you the community link um after call so thank you guys so much for joining us if there's nothing else we can conclude and we will see you next time

View original source

https://www.youtube.com/watch?v=fb35BQkLMQU