CIS-VRM practice question 7 of 15
What are individual questions within a questionnaire or document request referred to as?
Full set: 60 questionsDomain Vendor Portal
In the ServiceNow Governance, Risk, and Compliance (GRC) framework, which encompasses Vendor Risk Management (VRM), the individual, reusable questions that comprise questionnaires and document requests are referred to as Metrics. These metrics are the fundamental building blocks used to gather evidence and assess a vendor's compliance and risk posture. A questionnaire template is constructed by grouping these metrics, often into categories, to form a complete assessment that can be sent to a vendor.
B. Ratings: Ratings are the scales or scores (e.g., 1-5, Compliant/Non-compliant) used to evaluate the answers provided for metrics, not the questions themselves.
C. Templates: Templates are pre-configured collections of metrics that form a complete questionnaire or document request, not the individual question units within them.
D. Tiers: Tiers are classifications assigned to vendors based on their inherent risk level (e.g., Strategic, High, Moderate), which is unrelated to questionnaire components.
1. ServiceNow Product Documentation: "Metric definition in GRC". This document states, "Metrics are qualitative or quantitative questions that are used to measure a process or function. Metrics are used in attestations and assessments to gather evidence and determine the level of risk or compliance." This directly identifies metrics as the questions.
2. ServiceNow Product Documentation: "Questionnaire templates in Vendor Risk Management". This guide explains the structure of assessments: "Questionnaire templates are composed of metric categories, which are in turn composed of metrics." This confirms the hierarchy where metrics are the base-level questions.
3. ServiceNow Now Learning: "Vendor Risk Management (VRM) Fundamentals" on-demand course. The "Assessments" module explicitly details the data model where Questionnaires are built from Templates, which contain Metric Categories and, finally, the individual Metrics (questions).
Keep practicing
Take the free CIS-VRM practice test
Ten exam-style questions with answers and explanations, plus the exam facts and study guides.
More questions
Other CIS-VRM practice questions
- Question 1On which of the following tables can you create vendor risk reports? (Choose three.)
- Question 2Which of the following are functions of the Vendor Risk Assessor? (Choose three.)
- Question 3What can be used to automatically assign a Vendor tier value?
- Question 4Before any changes to the configuration of an application are made, it is recommended tha…
- Question 5What is the advantage of using both VRM and GRC/IRM?
- Question 6What are some of the purposes of a Vendor Risk Issue? (Choose two.)
