CIS-VRM practice question 7 of 15

What are individual questions within a questionnaire or document request referred to as?

Full set: 60 questions

Domain Vendor Portal

Answer options
A: Metrics Correct answer
B: Ratings
C: Templates
D: Tiers
Correct Answer:
A. Metrics
Explanation

In the ServiceNow Governance, Risk, and Compliance (GRC) framework, which encompasses Vendor Risk Management (VRM), the individual, reusable questions that comprise questionnaires and document requests are referred to as Metrics. These metrics are the fundamental building blocks used to gather evidence and assess a vendor's compliance and risk posture. A questionnaire template is constructed by grouping these metrics, often into categories, to form a complete assessment that can be sent to a vendor.

Why Incorrect

B. Ratings: Ratings are the scales or scores (e.g., 1-5, Compliant/Non-compliant) used to evaluate the answers provided for metrics, not the questions themselves.
C. Templates: Templates are pre-configured collections of metrics that form a complete questionnaire or document request, not the individual question units within them.
D. Tiers: Tiers are classifications assigned to vendors based on their inherent risk level (e.g., Strategic, High, Moderate), which is unrelated to questionnaire components.

References

1. ServiceNow Product Documentation: "Metric definition in GRC". This document states, "Metrics are qualitative or quantitative questions that are used to measure a process or function. Metrics are used in attestations and assessments to gather evidence and determine the level of risk or compliance." This directly identifies metrics as the questions.

2. ServiceNow Product Documentation: "Questionnaire templates in Vendor Risk Management". This guide explains the structure of assessments: "Questionnaire templates are composed of metric categories, which are in turn composed of metrics." This confirms the hierarchy where metrics are the base-level questions.

3. ServiceNow Now Learning: "Vendor Risk Management (VRM) Fundamentals" on-demand course. The "Assessments" module explicitly details the data model where Questionnaires are built from Templates, which contain Metric Categories and, finally, the individual Metrics (questions).

Scroll to Top