CIS-VRM practice question 1 of 15

On which of the following tables can you create vendor risk reports? (Choose three.)

Full set: 60 questions

Domain Assessments

Answer options
A: Company [core_company] Correct answer
B: Vendor Risk Assessment [sn_vdr_risk_asmt_assessment] Correct answer
C: Vendor Risk Issue [sn_vdr_risk_asmt_issue] Correct answer
D: Vendor Contact [vm_vendor_contact]
E: Vendor Activity [vm_vendor_activity]
Correct Answer:
A. Company [core_company]; B. Vendor Risk Assessment [sn_vdr_risk_asmt_assessment]; C. Vendor Risk Issue [sn_vdr_risk_asmt_issue]
Explanation

Vendor risk reports in ServiceNow are primarily generated from the core tables that store the essential data of the Vendor Risk Management (VRM) lifecycle. The Company [corecompany] table stores the vendor profiles, which is the foundation for all risk activities. The Vendor Risk Assessment [snvdrriskasmtassessment] table contains the records for each assessment, including its status, responses, and calculated risk scores. The Vendor Risk Issue [snvdrriskasmtissue] table tracks all issues identified during the assessment process that require remediation. Reporting on these three tables provides a comprehensive view of the vendor risk posture, assessment progress, and outstanding issues.

Why Incorrect

D. Vendor Contact [vmvendorcontact]: This table stores administrative contact information. While useful for communication, it is not a primary source for creating reports on vendor risk status or assessment outcomes.
E. Vendor Activity [vmvendoractivity]: This is not a standard, primary table used for substantive vendor risk reporting. Activities are typically tracked in journals or audit logs, not a dedicated reporting table of this name.

References

1. ServiceNow Product Documentation - Components installed with Vendor Risk Management: This document lists the key tables installed with the VRM application. It explicitly mentions snvdrriskasmtassessment (Vendor Risk Assessment) and snvdrriskasmtissue (Vendor Risk Issue) as core components. The corecompany table is the base for defining vendors.

Reference: ServiceNow Product Documentation, "Components installed with Vendor Risk Management," section "Tables."

2. ServiceNow Product Documentation - Vendor Risk Management dashboards and reports: The pre-configured dashboards and reports for VRM are built using these core tables. For example, the "Vendor Risk Overview" dashboard pulls data from vendors (corecompany), assessments (snvdrriskasmtassessment), and issues (snvdrriskasmtissue) to provide a holistic view.

Reference: ServiceNow Product Documentation, "Vendor Risk Management dashboards and reports," section "Vendor Risk Overview dashboard."

3. ServiceNow Product Documentation - Create a vendor: This guide confirms that vendors are stored in the Company [corecompany] table and are distinguished by the "Vendor" flag being set to true. This establishes it as the foundational table for any vendor-related reporting.

Reference: ServiceNow Product Documentation, "Create a vendor in Vendor Risk Management."

Scroll to Top