CIS-RCI practice question 16 of 25

What is associated with the control objective, that is active with the setting to create controls automatically enabled, to generate controls?

Full set: 165 questions
Answer options
A: Entity Type Correct answer
B: indicator template
C: Policy
D: Citation
Correct Answer:
A. Entity Type
Explanation

In ServiceNow GRC, controls are the specific mechanisms used to satisfy a control objective. To automate the creation of these controls, a control objective must be associated with an Entity Type. An Entity Type is a classification for a group of similar entities (e.g., 'Servers', 'Databases', 'Business Services'). When the control objective's "Create controls automatically" setting is active, the system generates a unique control for each individual entity belonging to the associated entity type.

Why Incorrect

B. An indicator template is used to create indicators for monitoring the performance of existing controls, not for generating the controls themselves.
C. A policy can be the parent of a control objective, but it is the link to the Entity Type that triggers the automatic generation of controls.
D. A citation is an external document (like a regulation or standard) that the control objective helps to address; it does not drive control creation.

References

- ServiceNow Product Documentation. (2024). Create a control objective. Washington DC release. Step 6 of the procedure states: "Associate the control objective with an entity type to generate controls for all the entities that belong to that entity type."

Scroll to Top