CIS-VRM practice question 12 of 15
What third-party vendor security evaluation solutions are commonly integrated with VRM out-of- the-box? (Choose two.)
Full set: 60 questionsDomain Integrations
ServiceNow Vendor Risk Management (VRM) provides out-of-the-box (OOTB) integrations with leading third-party security rating services to automate the continuous monitoring of vendor security postures. Bitsight and Security Scorecard are two prominent solutions available directly from the ServiceNow Store for this purpose. These integrations pull security scores, ratings, and detailed findings into the vendor profile within ServiceNow. This data helps organizations to automatically trigger risk assessments, generate issues, and maintain an up-to-date view of their third-party risk landscape without manual intervention.
A. MyScoreMetrics: This is not a standard, out-of-the-box integration offered by ServiceNow for third-party security evaluation within the VRM application.
B. Vendor Insights: This is a generic term, not the name of a specific third-party security evaluation solution that integrates OOTB with ServiceNow VRM.
1. ServiceNow Product Documentation - Integrations with Vendor Risk Management: The official documentation lists available integrations for VRM. It explicitly mentions "Bitsight for VRM" and "SecurityScorecard for VRM" as key integrations for security scoring.
Reference: ServiceNow Product Documentation, Tokyo Release, "Integrations with Vendor Risk Management," Section: Security and risk intelligence integrations.
2. ServiceNow Product Documentation - SecurityScorecard for VRM integration: This document details the OOTB integration that "provides SecurityScorecard scores and data points for your vendors."
Reference: ServiceNow Product Documentation, Tokyo Release, "SecurityScorecard for VRM integration," Chapter 1: Overview.
3. ServiceNow Product Documentation - Bitsight for VRM integration: This document describes the OOTB integration that "provides Bitsight scores and data points for your vendors."
Reference: ServiceNow Product Documentation, Tokyo Release, "Bitsight for VRM integration," Chapter 1: Overview.
Keep practicing
Take the free CIS-VRM practice test
Ten exam-style questions with answers and explanations, plus the exam facts and study guides.
More questions
Other CIS-VRM practice questions
- Question 1On which of the following tables can you create vendor risk reports? (Choose three.)
- Question 2Which of the following are functions of the Vendor Risk Assessor? (Choose three.)
- Question 3What can be used to automatically assign a Vendor tier value?
- Question 4Before any changes to the configuration of an application are made, it is recommended tha…
- Question 5What is the advantage of using both VRM and GRC/IRM?
- Question 6What are some of the purposes of a Vendor Risk Issue? (Choose two.)
