Vendor Risk Management is one of the top priorities for businesses today. Organizations rely on thousands of vendors to deliver products and services, but while business functions can be outsourced, you can’t outsource your risk or liability. In this free webinar, you’ll see how organizations are using ServiceNow’s Vendor Risk Management solution to: - Gain visibility into their vendors, even between assessments; - Prioritize risks and drive them to closure, without hundreds of emails and spreadsheets; - Replace unstructured work patterns with intelligent workflows, so that resources can be focused on the most critical vendors and risks; - Build confidence and trust in their vendor risk management processes, and find ways to reduce costs and drive new revenue streams. Presented by Kirk Hogan (COO, Iceberg Networks)

1. “Yes, there is a better way to do
vendor risk assessments!”

2. Delivering Risk Intelligence
About Iceberg
ü Focused on Governance,
Risk Management & Compliance (GRC)
ü Staff includes 30+ full-time GRC consultants
& certified developers
ü Customers include top financials,
insurance, health care, manufacturers,
retail, gov’t in North America.
Kirk Hogan
SENIOR VP OF GRC SERVICES
& CHIEF OPERATING OFFICER
Glen Gower
DIRECTOR OF MARKETING

3. Delivering Risk Intelligence
A full lifecycle of GRC services
Management
Workshops
Visioning & Alignment
CMO/FMO
Developing an Effective
KRI Program
Professional
Services
Implementation/Integration
Full Solution Lifecycle
Management
Iceberg
APS
Post-Production Support
Mentoring &
Skills Development
Post-Production
Sandboxes
Risk Intelligence
Academy
Helping the Industry with
the Journey:
Case Studies
Best Practices
Webinars
GRC
Innovation
Advanced Reporting /
Dashboards
Productivity Toolkits &
Enhancements

4. Delivering Risk Intelligence
Webinar Outcomes
1
Successfully juggle
many vendor
communications
2
Conversational
approach with
vendors
3
Identify tangible
benefits
4
Demonstrate the
process

5. Delivering Risk Intelligence
NO VISIBILITY INTO OVERALL
PROGRAM ACTIVITIES AND VENDOR
RISK POSTURE
SILOED PROCESSES AND
ORGANIZATIONS LEAD TO MISSED
COMMUNICATIONS
MANUAL AND TIME CONSUMING
PROCESSES (EXCEL, EMAIL, MEETINGS)
VENDOR RISK PROCESSES ARE NOT CONVERGED AND TOOLS CAN’T KEEP UP
Common Vendor Risk Challenges
XLS
LEGAL
HR
IT

6. Delivering Risk Intelligence
VENDOR
CATALOG
LEGAL
HR
IT
VENDOR PORTAL
CONTACTS
ASSESSMENTS DEADLINES
ISSUES AND REMEDIATION
GRC INTEGRATION

7. As part of the Vendor Manager group of XYZ
Company, we need to assess the risk associated
with vendors that we do business with. Once
the vendor has been created in ServiceNow, it
becomes an ongoing conversation between the
Vendor Risk Assessor, and the Vendor.
Previously completed key activities
• Set up vendor portfolio
• Define vendor contacts
• Create an assessment template

8. As a Vendor Risk Assessor of XYZ Company I
need to send out an assessment and follow up
with the professional services vendor.
Key activities
• Develop & distribute assessment to vendor
• Review responses to assessment
• Follow up with any issues

9. As a Vendor I need to complete the Assessment
and respond to any follow up issues as per the
request of XYZ company.
Key activities
• Respond and submit assessment
• Manage my team
• Follow up with any issues

10. Delivering Risk Intelligence
Demo

11. Delivering Risk Intelligence
Thank you!
Webinar replay: icebergnetworks.com
Questions: info@icebergnetworks.com