First bankcard presentation 3.3.15

March 3rd, 2015 : AGENDA

9:00-10:00 Introductions, Sandbox Q&A, Technology

Overview

10:00-10:30 Cornerstone OnDemand Executive Overview

10:30-10:45 Break

10:45-12:00 Deployment & Scoping Workshop

12:00-12:30 Contract & Pricing Review

First Bankcard Cornerstone OnDemand Partnership Team:

Josh Legassick - Sr. Solution ArchitectAdam Lee- Strategic Engagement Consultant

Chris Bond- Principle & Founder, BlueWater LearningDenise Matsuoka - Sr. Solutions ConsultantKathi Stacy- Regional VP, Enterprise SalesJulie McDonald - Regional Sales Manager

March 3rd, 2015

Key Themes : First Bankcard Partnership

• EasyUse, Implementation, Support, Client Success, Upgrades, Configuration, Training

• Proven Product, Implementation, Ongoing Support, Integration, Security, Architecture, Infrastructure

• ExpertExternal Training Management , All Verticals, Partner Ecosystem

SandboxQ&A

Denise Matsuoka, Sr. Solutions Consultant

Technology OverviewA D A M L E E , S T R A T E G I C E N G A G E M E N T M A N A G E R

Data Center Overview

Data Backup and Recovery

Standard Recovery Point Objective (RPO) 1 hourStandard Recovery Time Objective (RTO) 24 hours

Weekly Transfer

SAN

Production Site DR Site

Data Replication

Iron Mountain (AES 256)

• 2 Days Hot Backup on SAN

• Full and Weekly Backups Transferred to Tape

• Daily Backups Stored for 1 Week

• Weekly Backups Stored for 5 Weeks

• Monthly backups stored for 6 Months

Daily in

cremen

tal

We

ekly Fu

ll

Ho

urly Tran

saction

al

Tape

All information herein is strictly confidential and may not be shared or reproduced.

Cornerstone & Cornerstone OnDemand are registered trademarks of Cornerstone OnDemand Inc. Cornerstone OnDemand ©2012

Infrastructure Segmentation and Monitoring

8

Internet

Akamai

External Router

Perimeter Firewalls

Intrusion Detection System

Load Balancer

STAGE DMZ Servers

WWW APP FTP

STAGE Firewalls

STAGE DMZ Firewalls

STAGE CORE Servers

DB APP CORE

PROD DMZ Firewalls

PROD DMZ Servers

WWW APP FTP

PROD Firewalls

PROD CORE Servers

DB APP CORE

Internal Monitoring:

• Paessler PRTG – System Health Monitoring

• SolarWinds Orion – Network Monitoring

• Idera – Database Health Monitoring

• Splunk – Anomaly Detection

External Application Monitoring• Keynote – System Performance Monitoring

• Akamai – Content Distribution Monitoring

SANSAN

Capacity and Performance

Client ClientSW

IMLA

NE 1

SWIM

LAN

E 2

SWIM

LAN

E 3

SWIM

LAN

E STAG

E

SWIM

LAN

E PILO

T

SWIM

LAN

E DEM

O

LONDON DATA CENTER

SWIM

LAN

E 1

SWIM

LAN

E 2

SWIM

LAN

E 3

SWIM

LAN

E 4

SWIM

LAN

E LOA

D

SWIM

LAN

E STAG

E

SWIM

LAN

E PILO

T

SWIM

LAN

E DEM

O

LA DATA CENTER

INTERNET

All information herein is strictly confidential and may not be shared or reproduced.

Cornerstone & Cornerstone OnDemand are registered trademarks of Cornerstone OnDemand Inc. Cornerstone OnDemand ©2012

Trust – System Dashboard

10

Application Architecture

Application Architecture

12

Data Access Layer

Presentation Layer

HTML User Interface Mobile UI Web Services

Customer A

• Database• Configuration

Customer B

• Database• Configuration

Customer C

• Database• Configuration

Business Logic Layer

Session State Servers MSMQ ServersFile Feed Servers

(SFTP)

Customer A Metadata

Customer B Metadata

Customer C Metadata

Content Storage

Anti-Virus

-LMS Content-Documents

Akamai All Transactions Encrypted

in Transit via TLS

Application code on the

webserver is logically

separated into 3 layers

Presentation layer

(UI)

Business logic layer

(BLL)

Data access layer

(DAL)

User request for a page first

hits the presentation layer

which represents the UI

coded using ASP.NET

BLL has the business rules

and workflows written in an

object oriented

programming language –

C#

DAL is the one that

communicates with the

database server – SQL

Server

WCAG 2.0 Certified

Infrastructure & Security

Ap

plicatio

n

PC

I-DSS

Infrastru

cture

Datab

ase

Security and Compliance

Data Center

Perimeter Firewall

Intrusion Detection

DMZ Firewall

DMZ Servers

WWW APP FTP

PROD FirewallPROD CORE Servers

DB APP CORE

SSAE 16 and ISO 27001 Certified

Security Validation

VPN

Internal Processes

• ISO 27001 Certified

• Application Tested to OWASP Standards

• C & A government accreditation – Moderate ATO

• PCI Certified

• SSAE16 SOC 1 Type II Annual Audit

• Safe Harbor Certification

Penetration Testing

• ISec Partners Quarterly Penetration Testing

• Qualys Monthly Application Security Scans

• TrustWave Monthly PCI-DSS Penetration Testing

• Customer Scheduled Penetration Testing

16

Single Sign-on Overview

Customer Portal

Identity Management

Engine

Cornerstone

HTTPS POST

Identification and

Authentication

HTTP(S) to

Customer Portal

SSO Supported Standards

SSO Security Token Authentication

AES

SAML Support

SAML 1.1

SAML 2.0

Integration Overview

3 Layers of Integration

Why clients need integrationTo integrate their data & systems with CSOD to achieve a greater value for their investment. The basic steps are to extract data, transform data, and load it to another system. There are 3 integration layers to think about.

3 Integration layers

Data LayerData in/out of the system.

Platform LayerUse of web services or API. This is a true “service”

clients use it on demand often w/credentials.

Application LayerUI is involved in the workflow or steps

Single Sign-on, Deep-linking, etc…

1

2

3

API

Files

Cornerstone

Cornerstone Data Interfaces

• File Based Data Transfers leverage SFTP

• PGP Encryption for Payload Security

• OData ,SOAP, and REST Web Services APIs

Common Web Services Interfaces• Users• Organization Units• Learning Catalog• Transcript• Performance Reviews and Ratings• Job Requisition

CSOD Executive Overview

First Bankcard Cornerstone OnDemand Partnership Team

WhyPartner?

“Our ability to offer customized programs and approaches enables our partners to grow their business and stay

competitive,”

“We believe in driving results through continuous

improvement to help us make our partner’s one-

of-a-kind programs more valuable to its

customers.”

“Our partnership is resulting in a program that stands

apart from their competitors and addresses unique

needs of their customers”

-- Stephen F. Eulie, President First Bankcard

“First Bankcard has a very personalized approach, and it was very evident to us that they have a

commitment to their customers. Given our own customer-centric

methodology, it seemed to offer a perfect fit for our new credit card

program …

Key Themes : First Bankcard Partnership

• EasyUse, Implementation, Support, Client Success, Upgrades, Configuration, Training

• Proven Product, Implementation, Ongoing Support, Integration, Security, Architecture, Infrastructure

• ExpertExternal Training , All Verticals, Partner Ecosystem

Global Leader in SaaS Talent Management

As of March 31, 2014

26 Note: User and client count figures exclude Cornerstone Small Business (CSB) and Cornerstone for Salesforce.

18.1 MILLION USERS

2,100 CLIENTS

191 COUNTRIES

42 LANGUAGES

27

Established Market Leadership

“LEADER” “LEADER”

2014 Magic Quadrant for Talent Management Suites

2014 Worldwide Integrated Talent Management MarketScape

A leader in overall vendor satisfaction

Best-in-class learning and performance, strong mobile support, and good use of social collaboration and game mechanics to engage employees

A natively developed suite with a high degree of configurability

“LEADER”

2013 Forrester Wave forTalent Management

A “forward-looking company”

Flexible/adaptable products

Making mobile and social“everywhere”

Significant investment in non-US localization

Strong functional capabilities

Solid customer references and customer service

Streamlined, attractive user experience

Non-learning modules are equally robust and capable of being offered alone

One of very few talent platforms that is entirely organically built

A Sampling of our Clients

Financial ServicesRetail & Travel

Technology & Media

Business Services

Healthcare

Manufacturing

Energy & Utilities Public Sector

Engage, Enable, & Empower your Partner ecosystem

• Deliver Targeted Training

• Track Compliance

• Measure effectiveness

• Training for profit

• Partner engagement

• Partner Communication

• Crowdsourcing

CORNERSTONE for EXTENDED ENTERPRISE

30

Deliver targeted Partner Program & Compliance Training

CORNERSTONE LEARNING

• Compliance & Certifications

One Time

Ongoing

Electronic Signature

Audit Trails

Metrics/Reporting

• Social Learning

• Skills Development

• Mobile Training 31

Client Success at Every Level

33

• Maintain executive support of the solution as part of the external learning strategy in conjunction with the Client Success Manager

• Partner with executive team/business sponsor to ensure alignment of solution with overall business strategy

Sales Executive | Focus: Business

• Primary relationship manager

• Support client’s execution of their talent management strategy

• Practitioners with “real world” experience

• Recommend solutions to optimize workflows and processes within their external learning strategy and the portal environment

• Responsible for the overall success of the solution and client satisfaction

Client Success Manager | Focus: Solution

• Primary point of contact for system questions

• Work with client administrators to answer feature/function questions

• Engage the appropriate Cornerstone resources to resolve issues and service requests

Global Product Support Specialists | Focus: Feature/Function

Extraordinary Flexibility

CustomizationPersonalization Competitive Advantage

CustomizationPersonalization Competitive Advantage

Deployment & Scoping Workshop

Josh Legassick, Senior Solution ArchitectChris Bond, Principal & Founder Bluewater Learning

Wrap Up/Q&A/Follow Up

First Bankcard & Cornerstone OnDemand Teams

How did we do (Part 2) ?

• EasyUse, Implementation, Support, Client Success, Upgrades, Configuration, Training

• Proven Product, Implementation, Ongoing Support, Integration, Security, Architecture, Infrastructure

• ExpertExternal Training , All Verticals, Partner Ecosystem

Partner Training Portal Project Plan : Next Steps

43

44

“Training and

Communication is the

foundation to our business”

-Julie Aliano, 2.12.15