1© Copyright 2016 EMC Corporation. All rights reserved. VIEWTRUST SOFTWARE OVERVIEW RISK MANAGEMENT AND COMPLIANCE MONITORING

2© Copyright 2016 EMC Corporation. All rights reserved. CHALLENGES How do I…. Get a unified view of security and compliance risk across all IT assets (e.g. enterprise, cloud, hybrid-cloud)? Reduce cost and complexity of managing compliances with shrinking budgets? Become proactive rather than reactive in dealing with enterprise and mission risks? Perform continuous monitoring of risk with ever increasing volume of data? Create a single 360° operational view of enterprise risk and prioritize mitigations? Need a proactive view of risks across my cloud and non-cloud assets due to Cyber, Compliance, and IT Operations on a continuous and automated basis.

3© Copyright 2016 EMC Corporation. All rights reserved. VIEWTRUST CONTINUOUS RISK MONITORING Enterprise Risk Management Compliance Risk IT Operational Risk Cyber Risk Viewtrust provides continuous monitoring of risks across enterprise hybrid cloud as well as non-cloud environments to proactively address risks due to Cyber, Compliance, and IT Operations.

4© Copyright 2016 EMC Corporation. All rights reserved. AUTOMATED RISK AND COMPLIANCE MANAGEMENT Provides a unified view of enterprise risk on a single dashboard Automates compliance and risk management for private or hybrid clouds Provides continuous risk analysis with heat maps for proactive view Collaborative and workflow driven for compliance automation and documentation Scales with Big Data analysis and analytics engine Provides mission risk view to address what is critical to business Compliance Risk IT Operational Risk Cyber Risk

5© Copyright 2016 EMC Corporation. All rights reserved. VIEWTRUST ADDRESSES REGULATED MARKETS Viewtrust provides a scalable solution to address regulatory and industry standards requirements in a modular architecture FederalFinancialHealthcareEnergyRetail Enterprise Risk Management ✔✔✔✔✔ Cyber Situational Awareness ✔✔✔✔✔ Regulatory Compliance FISMA/ FedRAMP GLBA SOX HIPAA HITECH NERC CIPPCI Cyber Risk | Compliance Risk | IT & Operational Risk Presentation and Data Analytics Dashboard

6© Copyright 2016 EMC Corporation. All rights reserved. CONTINUOUS COMPLIANCE FOR HYBRID CLOUD + Virtual Datacenter / SDDC Enterprise Risk Management Unified View Automation of common SAP administrative functions improves service delivery while simultaneously reducing the human and physical resources required to perform those tasks Private Cloud Public/ Managed Cloud Automated Continuous Assessment for Risk and Compliance

7© Copyright 2016 EMC Corporation. All rights reserved. VIEWTRUST RAPID ROI Reduce compliance costs via efficiency through automation: – Automate entire compliance lifecycle – Facilitate efficient, collaborative, and consistent audit practice – Support multiple compliance frameworks unified in one tool Reduce enterprise security tool TCO: – Unify existing security tools and break data silos – Automate risk analysis based on threat and impact analysis – Automate identification and remediation of risk through workflow management

8© Copyright 2016 EMC Corporation. All rights reserved. CASE STUDY: EQUIFAX Challenge: Each market segment served by Equifax– Financial, Healthcare, Technology, and Public Sector—had its own compliance certifications. The continuous process required 100 analysts and 4-6 months with overlapping timelines, with requirements for industry-specific documentation and artifact versions. Solution: Virtustream Viewtrust Compliance Edition with certificates for PCI and FISMA compliance Results: INCREASED EFFICIENCY/ LOWER COST 90% reduction in staff (from 100 analysts to 10) resulting from establishing a repeatable and consistent process 70% reduction in number of verticals to certify separately because ISO (IA) baseline certification enabled cross-mapping across multiple verticals Leading consumer credit reporting agency with operations in more than 14 countries serving multiple market segments

10© Copyright 2016 EMC Corporation. All rights reserved. GLOSSARY TermDefinition BIABusiness impact analysis (BIA) is a systematic process to determine and evaluate the potential effects of an interruption to critical business operations as a result of a disaster, accident, or emergency. ERMEnterprise Risk Management (ERM) is a strategic business discipline that supports the achievement of an organization's objectives by addressing the full spectrum of its risks and managing the combined impact of those risks as an interrelated risk portfolio. GRCGovernance, risk management, and compliance (GRC) is the umbrella term covering an organization's approach across these three areas: Governance, risk management, and compliance SensorsInformational sources capable of providing reports based on the data its collected provided in any given format. (e.g. Tenable Security Center, McAfee ePO, Symantec CS) SIEMSecurity information and event management (SIEM) is an approach to security management that seeks to provide a holistic view of an organization's information technology (IT) security.