CIS-VRM practice question 1 of 15
On which of the following tables can you create vendor risk reports? (Choose three.)
Full set: 60 questionsDomain Assessments
Vendor risk reports in ServiceNow are primarily generated from the core tables that store the essential data of the Vendor Risk Management (VRM) lifecycle. The Company [corecompany] table stores the vendor profiles, which is the foundation for all risk activities. The Vendor Risk Assessment [snvdrriskasmtassessment] table contains the records for each assessment, including its status, responses, and calculated risk scores. The Vendor Risk Issue [snvdrriskasmtissue] table tracks all issues identified during the assessment process that require remediation. Reporting on these three tables provides a comprehensive view of the vendor risk posture, assessment progress, and outstanding issues.
D. Vendor Contact [vmvendorcontact]: This table stores administrative contact information. While useful for communication, it is not a primary source for creating reports on vendor risk status or assessment outcomes.
E. Vendor Activity [vmvendoractivity]: This is not a standard, primary table used for substantive vendor risk reporting. Activities are typically tracked in journals or audit logs, not a dedicated reporting table of this name.
1. ServiceNow Product Documentation - Components installed with Vendor Risk Management: This document lists the key tables installed with the VRM application. It explicitly mentions snvdrriskasmtassessment (Vendor Risk Assessment) and snvdrriskasmtissue (Vendor Risk Issue) as core components. The corecompany table is the base for defining vendors.
Reference: ServiceNow Product Documentation, "Components installed with Vendor Risk Management," section "Tables."
2. ServiceNow Product Documentation - Vendor Risk Management dashboards and reports: The pre-configured dashboards and reports for VRM are built using these core tables. For example, the "Vendor Risk Overview" dashboard pulls data from vendors (corecompany), assessments (snvdrriskasmtassessment), and issues (snvdrriskasmtissue) to provide a holistic view.
Reference: ServiceNow Product Documentation, "Vendor Risk Management dashboards and reports," section "Vendor Risk Overview dashboard."
3. ServiceNow Product Documentation - Create a vendor: This guide confirms that vendors are stored in the Company [corecompany] table and are distinguished by the "Vendor" flag being set to true. This establishes it as the foundational table for any vendor-related reporting.
Reference: ServiceNow Product Documentation, "Create a vendor in Vendor Risk Management."
Keep practicing
Take the free CIS-VRM practice test
Ten exam-style questions with answers and explanations, plus the exam facts and study guides.
More questions
Other CIS-VRM practice questions
- Question 2Which of the following are functions of the Vendor Risk Assessor? (Choose three.)
- Question 3What can be used to automatically assign a Vendor tier value?
- Question 4Before any changes to the configuration of an application are made, it is recommended tha…
- Question 5What is the advantage of using both VRM and GRC/IRM?
- Question 6What are some of the purposes of a Vendor Risk Issue? (Choose two.)
- Question 7What are individual questions within a questionnaire or document request referred to as?
