Key data sources for Vendor Risk reporting include which of the following tables? (Choose two.)

The most critical data sources for reporting in ServiceNow Vendor Risk Management (VRM) are the tables that track the core operational lifecycle: assessments and issues. The Vendor Risk Assessment table [snvdrriskasmtassessment] is the central repository for all assessments, containing their status, risk ratings, and scores. The Vendor Risk Issue table [snvdrriskasmtissue] tracks all remediation activities, including the state, priority, and assignment of issues identified during assessments. Reports and dashboards in VRM are primarily built from these two tables to provide a comprehensive overview of vendor risk posture and mitigation progress.

B. Questionnaire Templates [asmtmetrictype] contain the structure and questions for assessments, not the transactional results or scores needed for reporting.
C. Vendor Benchmark Scores [snvdrclientscore] are specific to third-party security monitoring integrations (e.g., SecurityScorecard) and are not a universal core data source.
D. Survey Scores [sncsurveyscores] is a generic platform table; VRM utilizes the more specific assessment engine tables, with snvdrriskasmtassessment being the primary one.

1. ServiceNow Product Documentation - Vendor Risk Management: The "Components installed with Vendor Risk Management" page lists the key tables created with the application. Both Vendor Risk Assessment [snvdrriskasmtassessment] and Vendor Risk Issue [snvdrriskasmtissue] are listed as core tables for the application's functionality. (ServiceNow Product Documentation, Tokyo Release, "Components installed with Vendor Risk Management").

2. ServiceNow Product Documentation - Vendor Risk Overview dashboard: The documentation for the default VRM dashboards explicitly describes widgets that pull data directly from these tables. For example, the "Assessments by State" report queries the snvdrriskasmtassessment table, and the "Open Issues by Risk Rating" report queries the snvdrriskasmtissue table. This confirms their role as primary reporting sources. (ServiceNow Product Documentation, Tokyo Release, "Vendor Risk Overview dashboard").