Enabling Secure Multi-Organization Collaboration Andrew Porter IT Director, Enterprise Architecture Merck & Co., Inc.

2 The Business Drivers We Must…. Enable safe and secure collaboration in the cloud Reduce the cost of connecting and working with partners Improve our agility to open up new business relationships

3 Enabling Safe and Secure Collaboration in the Cloud Develop a platform on which secure collaboration can occur Ensure the privacy of all users and organizations Enable a robust set of collaborative tools and services through the platform Enable appropriate level of controls to protect the content Easy and intuitive to use Build based on an industry recognized trust framework “Collaboration at scale can only occur through an agreed upon Trust Framework. “

4 Reducing the Cost of Connecting and Working with Partners The cost to establish new connections is significant Connections often are redundant and our partners work with each other already Issuing and managing credentials is expensive and risky if that is not your core business competency The ongoing management of existing point-to-point connections requires time and resources – scalability is a concern Each connection is custom and not based on a set of standards or framework Solution – Establish a Life Sciences Identity Hub (Secure Access Manager - SAM) for companies to join Once connected, a company potentially can work with anyone else connected to the Identity Hub Build upon a standard Trust Framework (SAFE) Management of these connections is handled by Exostar; everyone benefits from economies of scale

5 Improving our Agility to Open Up New Business Relationships Partners remain connected as long as they wish; if there is a period of inactivity, the connection will remain in place; when work commences, the connection is ready With the foundation based on the SAFE Trust Framework, companies can spend significantly less time assessing and auditing, more time collaborating… Identity Hub model eliminates the need for internal management of partner connections A connection to the Life Sciences Identity Hub does not provide access to entitlements, only the ability to be granted entitlements

6 Questions Andrew Porter IT Director, Enterprise Architecture Merck & Co., Inc.