Effective, December 1st, Elanco will be no longer be using Lilly’s Archer tool or process for SERF.
So, how has SERF changed? What does that mean for me?
- WHAT has changed: Streamlined form, faster turnaround, fewer supplier assessments
- WHO is involved: SERF triage team is comprised of members of: Information Security, Privacy, IT, Quality, Regulatory, and Procurement organizations
- WHAT is in scope: All systems, services, and suppliers operating on behalf of Elanco (either in the current Lilly environment for Elanco or the prospective new environment for Elanco)
- WHEN: SERF meetings are conducted on Thursday mornings, effective 2019. Turn-around time from submission to meeting is typically 1-2 weeks.
- WHY bring suppliers through SERF: SERF is part of Elanco’s third-party risk management program. Components of this include: entry into an inventory, tracking of types of engagements for suppliers, identification of data supplier has access to or handles on behalf of Elanco.
- HOW does SERF benefit you: After SERF, you will know if a supplier assessment is required, if a privacy assessment is required (to ensure compliance with various privacy laws), have knowledge of some of the basic security controls required based on data being handled or processed, next steps toward validating the solution, etc. In summary, SERF is the front door to Elanco and the triage team will help guide you to the next step in the process.
To enter the SERF process, complete the form located here:
http://lillynet.global.lilly.com/sites/ElancoITQuality/Supplier%20Management/Overview.aspx
Then email the completed form to Elanco_SERF_Notify@lists.lilly.com