1

ServiceNow Case Studies

Worldwide Technology Services Firm

“An additional layer or

protection for

ServiceNow was critical

to address data residency

but, even more important

was CipherCloud’s ability

to have each operating

region control their own

data and keys.”

Challenge:

• Share ITSM while each region controls its own data• Protect customer data in fields, notes, emails and

attachments• Reduce operational costs while automating manual

processes

CipherCloud Solution:

• Shared ServiceNow solution with local control of data• Granular protection of customer data• Lowered costs by eliminating manual processes

Why CipherCloud:

• Preserved service work-flows and approvals• Exclusive key ownership for each region• Policy-driven encryption and tokenization• Extend consistent polices to other major SaaS apps

Major NA Investment Bank

“CipherCloud made it

possible to leverage the

ServiceNow cloud while

ensuring compliance with

stringent U.S. Financial

Services regulations. Now

we are looking to expand

to CRM and collaboration

clouds.”

Challenge:

• Address national and state data privacy regulations• Support multiple ServiceNow modules and on-

premises systems• Enable business processes with protected data

CipherCloud Solution:

• Protected fields, email & attachments containing sensitive data

• Integrated on-premises systems support, ServiceNow ITSM and HR modules

• Addressed multiple compliance and governance requirements

Why CipherCloud:

• Preserved service automation workflows and approvals

• Customer controlled encryption keys• Policy-driven encryption and tokenization• Policy-driven encryption of fields, notes and files

ServiceNow has revolutionized the IT service model, enabling organizations to automate any process and deliver it as a service. CipherCloud for ServiceNow

enables organizations to expand the use of ServiceNow processes that handle private, sensitive, or regulated data. CipherCloud for ServiceNow encrypts and tokenizes data before it goes into the cloud. The added layer of security that CipherCloud provides, along with the operational security that ServiceNow provides, enables enterprises to address data privacy and residency requirements for sensitive data in the ServiceNow cloud.

2

About CipherCloudCipherCloud, a leader in cloud security, provides an award-winning cloud security platform delivering powerful end-to-end protection for data resident in the cloud, threat prevention, visibility, and compliance for enterprises to adopt cloud with confidence. Uniquely, CipherCloud provides the deepest levels of data protection in real-time to provide an immediate solution for challenging cloud security and compliance requirements. The world’s largest global enterprises and government institutions in over 25 countries protect and secure their cloud information with CipherCloud.

© 2018 CipherCloud, Inc. All rights reserved. CipherCloud® is a registered trademark of CipherCloud, Inc. All other trademarks are the property of their respective owners. Cyber Killchain® is a registered trademark of Lockheed Martin. SharePoint®, OneDrive® and Office 365® are registered trademarks of Microsoft®. SAP® SuccessFactors® are registered trademarks of SAP. ServiceNow® is a registered trademark of ServiceNow®.

Large U.S. Managed Healthcare Provider

“We found that

CipherCloud’s platform

provided the essential

capabilities for data

protection and compliance

to address HIPAA and

HITECH regulations.”

Challenge

• Protect PHI and personal data in the ServiceNow cloud

• Ensure authorized access for internal and remote users• Preserve work-flows, email notification and reporting

CipherCloud Solution

• Encryption and tokenization of PHI and personal data in ServiceNow

• End-to-End encryption authorizes access for internal & remote users

• Preserved automation in work-flows & variables using protected data

Why CipherCloud

• Experts on Healthcare industry requirements and ServiceNow

• Lowered operational costs with ensuring data protection

• Single cloud security platform for ServiceNow and other major clouds

Service Now Use Cases

IT Service Management

Use Case : Asset management, incident management, help desk/ticketing, change management

Sensitive Data : Assets, configurations, reported vulnerabilities, user credentials, versions and patch levels

Potential Risks : Network infiltration, Server takeover attacks

Human Resources

Use Case : Performance management, benefits inquiry, HR case management, on-boarding/off-boarding

Sensitive Data : Performance reviews/PII, national account numbers/SSN, heath insurance identifiers/PHI, salary and stock information

Potential Risks : Legal and regulatory fines, Unauthorized disclosure

Field Service

Use Case : Geo-location tracking, SLA prioritization/mapping, automated dispatch, asset/task coordination

Sensitive Data : Customer information, business metrics, critical infrastructure details, supply chain/inventory details

Potential Risks : Corporate espionage, Denial of service