This presentation, including any supporting materials, is owned by Gartner, Inc. and/or its affiliates and is for the sole use of the intended Gartner audience or other authorised recipients. This presentation may contain information that is confidential, proprietary or otherwise legally protected, and it may not be further copied, distributed or publicly displayed without the express written permission of Gartner, Inc. or its affiliates. © 2014 Gartner, Inc. and/or its affiliates. All rights reserved. Cloud Research — Gartner for Enterprise IT Leaders — Security & Risk Management (EITLSRM) Gartner G-Cloud Service Definition For further information on Gartner support for Cloud initiatives visit:

© 2014 Gartner, Inc. and/or its affiliates. All rights reserved. Gartner is a registered trademark of Gartner, Inc. or its affiliates. 1 Gartner Service Definition — Enterprise IT Leaders — Security & Risk Management (EITLSRM) Product/Service Description ■Gartner for Enterprise IT Leaders for Security and Risk Management is for senior IT leaders in large, complex enterprises who are managing IT functions for a business unit or the entire enterprise. The Service is managed by a Gartner Leadership Partner and Client Manager who will tailor program Deliverables to the unique needs of each Member ■The Cloud offerings from Gartner are built on the expertise of our 950 research analysts and 500 consultants; the world’s largest repository of knowledge on the business of IT. 117 analysts have expertise in the field of cloud with our database of IT research containing 5,794 research reports providing specific guidance on best practices for cloud deployment and strategy ■Gartner covers all aspects of cloud including crucial topics such as Infrastructure as a Service (IaaS), Platform as a Service (PaaS), Software as a Service (SaaS), cloud sourcing, cloud security, cloud strategy, cloud governance and IT cost optimisation through cloud ■The service provides a tailored service to assist members with their key Security and Risk Management challenges and is focused on supporting cloud and digital strategies Key Deliverables ■Gartner Assigned Service Delivery Team ■Analyst Inquiry ■One Annual on-site Meeting ■Facilitated Networking and Peer Community Events ■Gartner for IT Leaders Research and Related Content ■Summit Event Ticket Key Benefits ■Gartner for Enterprise IT Leaders (EITL) is a membership- based service for CIO direct reports that combines expert coaching with pragmatic Gartner research and the real-world experiences of peers. Tailored exclusively to professionals in IT leader roles, EITL is based on “Members” or “Leaders” individual value plans tied to their key initiatives Price ■Gartner will bill a firm fixed price of £32,600 excl. VAT, incl. all expenses for this service ■The service is provided for one licensed user for a period of 12 months

© 2014 Gartner, Inc. and/or its affiliates. All rights reserved. Gartner is a registered trademark of Gartner, Inc. or its affiliates. 2 Gartner Service Definition — Enterprise IT Leaders — Security & Risk Management (EITLSRM) Full List of Deliverables Gartner for Enterprise IT Leaders Security & Risk Management (the “Service”) is for senior IT leaders in large, complex enterprises who are managing IT functions for a business unit or the entire enterprise. The Service is managed by a Gartner Leadership Partner and Client Manager who will tailor program Deliverables to the unique needs of each Member. Client may designate one (1) Licensed User, referred to herein as “Member,” who may access the Deliverables The sections following this list provide additional guidance: ■Assigned Service Delivery Team ■One Annual on-site Meeting ■Facilitated Networking and Peer Community Events ■Gartner for IT Leaders Research and Related Content ■Summit Event Ticket ■Analyst Inquiry Member may also identify a “Designated Delegate” from within the Client organization to support the Member by attending one (1) Peer Community Event and accessing Peer Community Event content: ■Assigned Service Delivery Team — The Leadership Partner and Client Manager will serve as Member’s delivery team for this Service. They will maintain the relationship through the delivery of the Services and implementation of a Member Value Plan. The Client Manager will facilitate Inquiry and respond to specific requests for Gartner research and insight ■Member Value Plan — Customized service plan created in collaboration with the Member at the beginning of the Service and reviewed and revised periodically through the membership life cycle. Elements include Member expectations, value criteria, up to three (3) key initiatives and action plan

© 2014 Gartner, Inc. and/or its affiliates. All rights reserved. Gartner is a registered trademark of Gartner, Inc. or its affiliates. 3 Gartner Service Definition — Enterprise IT Leaders — Security & Risk Management (EITLSRM) ■One (1) Annual on-site Meeting — Member will meet with the Leadership Partner for coaching and advice, with focus on strategic planning and execution of up to three (3) key initiatives. Guidance will be based on the collective expertise of Gartner Research and the Member Peer Community ■Facilitated Networking — Member may request meetings or conference calls with peers around a specific topic to exchange information about best practices or areas of expertise ■Peer Community Events — Held two (2) times per year for 1.5 days, these Events focus on Member-selected topics, provide a venue for networking and peer exchange, feature Member presentations on working solutions and offer facilitated workshops with Gartner Analysts. Gartner may, as necessary, change Analysts or supplement the Analyst with a Gartner Subject Matter Expert ■Peer Community Research and Peer Content — Members can access My Gartner for exclusive case studies and findings, focused on critical issues and Member contributed presentations, tools and templates ■Gartner for IT Leaders Research and Related Content, Members will have access to this Research and Content, as it may be updated from time to time ■Summit Event Ticket — Admission to one (1) Gartner Summit Conference. In addition, a Summit Ticket may be used to register for a Catalyst Event. Tickets are transferable within the Client organization but may not be transferred to another company. A Ticket may not be used for attendance at a Supply Chain Executive Conference, Gartner Seminars or Gartner CIO Leadership Forum. Tickets are valid for 12 (twelve) months from the date of issue which is indicated by the expiration date shown on the front of the Ticket. Tickets provided as part of a Gartner Research offering are valid only for Gartner conferences that take place during the 12- month (twelve-month) contract term of the Research offering for which the Ticket has been issued. This service is subject to, and governed by, the Gartner Events: Online Registration Terms & Conditions section and the Usage Guidelines for Gartner Services of the Gartner Terms & Conditions document accompanying this service ■Analyst Inquiry — Inquiry provides access to Gartner Analysts who are associated with the Service purchased by Client. Participation is limited to the Gartner Analyst, the Member, and the Member’s team (as reasonably required for the Member’s business purposes). In all instances, the Member must be present on the Inquiry call and the topic may be any area of Gartner- covered Research so long as the purpose is to advance the Member’s agenda

© 2014 Gartner, Inc. and/or its affiliates. All rights reserved. Gartner is a registered trademark of Gartner, Inc. or its affiliates. 4 Gartner Service Definition — Enterprise IT Leaders — Security & Risk Management (EITLSRM) Full List of Deliverables ■Gartner Assigned Service Delivery Team ■Analyst Inquiry ■One Annual on-site Meeting ■Facilitated Networking and Peer Community Events ■Gartner for IT Leaders Research and Related Content ■Summit Event Ticket Additional Terms & Conditions ■The Member may, on an occasional and infrequent basis, forward copies of individual research documents, not to exceed ten (10) separate documents per Licensed User per contract year, to specific individuals within the client organization. This may not be done on a routine basis, or by means of posting on Client’s corporate intranet, or in a manner that has the intent or effect of avoiding the purchase of additional User Licenses from Gartner ■Unless otherwise provided above, this service is subject to, and governed by, the Gartner Events: Online Registration Terms & Conditions section and the Usage Guidelines for Gartner Services of the Gartner Terms & Conditions document accompanying this service

© 2014 Gartner, Inc. and/or its affiliates. All rights reserved. Gartner is a registered trademark of Gartner, Inc. or its affiliates. 5 Gartner Service Definition — Enterprise IT Leaders — Security & Risk Management (EITLSRM) Information Assurance ■Gartner possesses analysts and consultants with various security clearances, or we will, within reason, acquire those clearances as the client demands ■Gartner associates are bound by very specific rules around client confidentiality and security given that our clients reveal to us their greatest challenges and difficulties in order that we can help and support them most effectively Data Restoration ■No client data is retained by Gartner as part of the client’s access to this service and therefore there is no data restoration process related to this service Backup Restore and Disaster Recovery ■The Gartner service under discussion does not require Gartner to manage or store any critical client data Service Migration ■There is no need for a Service Migration plan given the nature of the service under discussion

© 2014 Gartner, Inc. and/or its affiliates. All rights reserved. Gartner is a registered trademark of Gartner, Inc. or its affiliates. 6 Gartner Service Definition — Enterprise IT Leaders — Security & Risk Management (EITLSRM) Onboarding ■Gartner offers an onboarding service. The New Client Onboarding team will onboard new licensed users to Gartner’s services and will provide a Web tour, tips on how to find research and how to request reports, data cuts or inquiry with analyst Offboarding ■Gartner does not offer offboarding services, however, named licence holders can be changed during the period of the contract through

© 2014 Gartner, Inc. and/or its affiliates. All rights reserved. Gartner is a registered trademark of Gartner, Inc. or its affiliates. 7 Gartner Service Definition — Enterprise IT Leaders — Security & Risk Management (EITLSRM) Pricing ■Gartner will bill a firm fixed price of £32,600 excl. VAT, incl. all expenses for this service Financial Recompense Model ■if a Service does not meet the specifications set out in the applicable Service Description, the breach will be handled in accordance with the Liability and Termination terms set out in the Call-Off Agreement Ordering and Invoicing Process ■Gartner will bill for 100% of the fees at contract signing ■All invoices are payable net 30 days from date of invoice Termination Terms (by Consumer/by the Supplier) ■Services may be terminated only for material breach by either party, upon 30 days prior written notice, if the breach is not cured within the notice period

© 2014 Gartner, Inc. and/or its affiliates. All rights reserved. Gartner is a registered trademark of Gartner, Inc. or its affiliates. 8 Gartner Service Definition — Enterprise IT Leaders — Security & Risk Management (EITLSRM) Service Management ■Gartner for Enterprise IT Leaders (EITL) is a membership- based service for CIO direct reports that combines expert coaching with pragmatic Gartner research and the real-world experiences of peers. Tailored exclusively to professionals in IT leader roles, EITL is based on “Members” or “Leaders” individual value plans tied to their key initiatives Service Constraints ■This is not applicable to this service Service Levels ■This is not applicable to this service

© 2014 Gartner, Inc. and/or its affiliates. All rights reserved. Gartner is a registered trademark of Gartner, Inc. or its affiliates. 9 Gartner Service Definition — Enterprise IT Leaders — Security & Risk Management (EITLSRM) Training ■Training is not included, however, the ‘Onboarding Service’ will provide the user with the skills and knowledge to effectively use the service Consumer Responsibilities ■This service is subject to, and governed by, the Gartner Events: Online Registration Terms & Conditions section and the Usage Guidelines for Gartner Services of the Gartner Terms & Conditions document accompanying this service Trial Service ■Gartner does not offer a trial service option in relation to this service Technical Requirements ■Gartner.com allows 24/7 access to our research and supports all revisions of Internet Explorer (plus Google Chrome, Firefox and Safari) — any browser that supports HTML5 — with no client installations required ■Each Gartner report is presented in a printer-friendly Microsoft product format (e.g. Portable Document Format or Excel)