CIS-Risk and Compliance Practice Exam

The CIS-RC certification validates your expertise in implementing and managing ServiceNow applications specifically designed for risk management and compliance purposes. Earning this credential demonstrates your ability to configure workflows, manage data, and generate reports to streamline an organisation's risk assessment, incident response, and regulatory compliance activities.

Who Should Take This Exam?

• ServiceNow Risk Management and Compliance Specialists
• IT Security Professionals (focusing on ServiceNow GRC tools)
• IT Risk Management Professionals
• IT Auditors (focusing on ServiceNow implementations)
• Business Process Analysts (supporting ServiceNow GRC implementations)

Prerequisites

There are no formal prerequisites for taking the CIS-RC exam. However, a foundational understanding of:

• ServiceNow platform navigation and functionalities
• Core risk management and compliance principles
• would be highly beneficial for exam preparation and successful implementation in real-world scenarios.

Roles and Responsibilities 

• ServiceNow Risk Management and Compliance Configuration: You'll be responsible for configuring ServiceNow applications like Risk Management, Incident Management, and Compliance Management to meet the specific needs of the organization. This may involve defining risk assessment processes, configuring incident workflows, and establishing compliance reporting structures.
• Data Management and Reporting: You'll ensure accurate data entry and maintain data integrity within ServiceNow's Risk and Compliance modules. Additionally, you'll be responsible for generating reports to track risk trends, analyze incident data, and demonstrate compliance adherence to regulatory requirements.
• User Management and Access Control: You'll play a role in managing user access and permissions within ServiceNow's Risk and Compliance applications, ensuring data security and access is granted based on user roles and responsibilities.
• Integration with Other Systems: You may be involved in integrating ServiceNow's Risk and Compliance applications with other enterprise systems, such as security information and event management (SIEM) tools, to facilitate a holistic view of the organization's risk landscape.

Exam Details

• Exam Name CIS-Risk and Compliance
• Exam Format Multiple Choice
• Number of Questions 45 Questions

Course Structure

The important domains and their topics that the CIS-Risk and Compliance Exam covers are: 

1. GRC Overview 10%

• GRC Positioning and Framework
• Key Terminology
• Technical Details

2. Implementation Planning 5%

• Use Cases
• Implementation Team
• Implementation Checklist
• Personas, Groups, and Roles

3. Entity Scoping 25%

• Entity Scoping Overview
• Entity Type Approach
• Entity Class Approach
• GRC Entities Architecture

4. Policy and Compliance Implementation Approach 25%

• Policy and Compliance Record Lifecycles
• Policy and Compliance Architecture
• Policy Management Lifecycle

5. Risk Implementation Approach 25%

• Risk Record Lifecycle
• Risk Architecture
• Risk Scoring
• Risk Management Lifecycle

6. Extended Capabilities 5%

• Content Packs
• Integrations
• Performance Analytics
• Other Platform Capabilities

7. Audit Management Implementation 5%