Why Study with PlanetCert?
The Latest Questions
Practice questions and exam topics aligned with the current exam objectives.
Detailed Explanations
Go beyond the answer. Master the material with comprehensive learning and professional explanations for every concept.
AI-Powered Insights
Personalized preparation guidance that adapts to your performance and identifies weak spots automatically.
Exam Information
Official specifications published by ServiceNow
Exam Format
90 min
60
Pass/Fail (cut score not publicly disclosed, estimated 70%)
Specialist
Registration
$450 USD
Pearson VUE or online proctoring
Validity
Valid until next platform release
Complete annual maintenance exams (deltas); Pay yearly Certification Maintenance Program (CMP) fee
CIS-RC Exam Topics and Domains
CIS-RC is organized into 7 weighted domains. Expect to work with Control Objectives table, Performance Analytics, Workflow Engine, Advanced Risk Assessment, and more.
1
GRC Overview
11.67%
GRC Positioning and Framework
GRC Framework ComponentsPlatform Capabilities
- Understand GRC framework within ServiceNow
- Identify key terminology and concepts
- Explain technical architecture of GRC solution
Key Terminology
GRC Maturity Model
- Define key GRC terminology
- Understand GRC maturity progression
Technical Details
Integration Points
- Configure GRC integrations
- Understand technical architecture
2
Implementation Planning
5%
Use Cases
Use Case Identification
- Identify common GRC use cases
- Map business requirements to GRC features
Implementation Team and Checklist
Implementation Team RolesImplementation Checklist
- Plan GRC implementation projects
- Define team roles and responsibilities
- Create implementation checklists
Risk and Compliance Personas, Groups and Roles
GRC Roles
- Configure GRC roles and groups
- Implement role-based access control
- Understand role inheritance
3
Entity Framework
20%
Entity Scoping Overview
Entity Scoping Strategies
- Understand entity scoping concepts
- Select appropriate scoping strategy
Entity Type Approach
Entity Type Configuration
- Implement Entity Type approach
- Configure entity type hierarchies
Entity Class Approach
Class Rules and Management
- Implement Entity Class approach
- Configure class rules
- Manage automated entity classification
Entity Architecture
Entity Hierarchy DesignEntity Configuration
- Design entity hierarchies
- Configure entity relationships
- Implement bulk operations
4
Policy and Compliance
25%
Policy and Compliance Record Lifecycles
Policy Lifecycle Management
- Implement policy lifecycle management
- Configure policy workflows
Policy and Compliance Architecture
Control Management
- Configure control frameworks
- Implement control testing
- Manage control effectiveness
Policy and Compliance Configuration
Compliance Assessment
- Configure compliance assessments
- Implement evidence management
- Track compliance metrics
Compliance Supporting Processes
Exception ManagementIntegration with External Standards
- Implement exception management
- Configure external integrations
- Import regulatory content
5
Risk and Advanced Risk
25%
Risk and Advanced Risk Record Lifecycles
Classic Risk Assessment LifecycleAdvanced Risk Assessment Lifecycle
- Implement risk assessment methodologies
- Configure both Classic and Advanced Risk
- Manage risk lifecycle
Risk and Advanced Risk Architecture
Risk Scoring and CalculationQuantitative vs Qualitative Assessment
- Configure risk scoring and quantification
- Implement risk calculation formulas
- Design risk matrices
Risk and Advanced Risk Configuration
Risk MitigationAdvanced Risk Features
- Design risk mitigation strategies
- Configure advanced risk features
- Implement automated risk management
6
Common Elements and Extended Capabilities
8.33%
Integrations
Integration Capabilities
- Configure GRC integrations
- Implement data exchange
- Design integration scenarios
Content Packs
Content Pack Management
- Implement content packs
- Configure accelerators
- Customize pre-built content
Other Platform Capabilities
Performance Analytics
- Configure Performance Analytics
- Design GRC dashboards
- Optimize reporting
Regulatory Change Management
RCM Configuration
- Configure RCM
- Manage regulatory updates
- Assess regulatory impact
Common Elements
Cross-Module Elements
- Utilize common GRC elements
- Configure shared functionality
Continuous Monitoring
Continuous Monitoring Configuration
- Configure continuous monitoring
- Implement automated controls
- Design monitoring alerts
7
Audit and Advanced Audit
5%
Audit and Advanced Audit Lifecycles
Audit PlanningAudit Execution
- Implement audit management processes
- Configure audit planning
- Manage audit execution
Audit and Advanced Audit Architecture
Findings and Remediation
- Manage audit findings
- Track remediation
- Configure audit reporting
Audit and Advanced Audit Personas, Groups, and Roles
Audit Roles
- Configure audit roles and permissions
- Implement audit access control
How do I earn this certification?
Passing CIS-RC earns the ServiceNow Certified Implementation Specialist - Risk and Compliance certification. It sits in the Governance, Risk, and Compliance (GRC) track.
Current Level Exams
Next Level Options
- Certified Application Specialist - Risk and Compliance Advanced GRC configuration and customization
- Certified Master ArchitectServiceNow enterprise architecture expertise
Alternative Paths
- CIS-VRM - Certified Implementation Specialist - Vendor Risk ManagementComplementary GRC skills for vendor risk management
- CIS-SAM - Certified Implementation Specialist - Software Asset ManagementAsset management complements compliance tracking
- CIS-ITSM - Certified Implementation Specialist - IT Service ManagementIntegration between GRC and ITSM modules
Practice with Precision
The PlanetCert Simulator mirrors the real exam environment with authentic questions and timed pressure.
How to study for this exam?
Use the official PlanetCert Practice Test alongside the study plan below to prepare efficiently for CIS-RC.
GRC: Integrated Risk Management (IRM) ImplementationGRC: Integrated Risk Management (IRM) FundamentalsGRC: Classic Risk Assessment FundamentalsGRC: Audit Management EssentialsGRC: Regulatory Change Management EssentialsGRC: Integrated Risk Management (IRM) SimulatorServiceNow GRC Product DocumentationIRM E-BookGovernance, Risk, and Compliance Release NotesServiceNow Credentialing Program Guide
What's changed on this exam?
Current Status
- ACTIVE
- Last content update: 2025-11-01
- Announcement date: 2025-11-01
Updates
- Advanced Risk Assessment Xanadu 2024 Increased emphasis on Advanced Risk vs Classic Risk features • Release date: 2024-12-01
- Entity Framework Xanadu 2024 Performance optimization features now covered in exam • Release date: 2024-12-01
- Flow Designer for GRC Xanadu 2024 Workflow automation questions now reference Flow Designer instead of classic workflows • Release date: 2024-12-01
- Continuous Monitoring Xanadu 2024 New questions on real-time control monitoring and automated evidence collection • Release date: 2024-12-01
Who should take this exam?
ServiceNow Administration Fundamentals (SNAF) OR ServiceNow Certified System Administrator (CSA)
ServiceNow GRC - Integrated Risk Management Fundamentals on-demand course
- Welcome to ServiceNow
- ServiceNow Administration Fundamentals
- UI Builder Essentials
- Flow Designer Essentials
- Get Started with Now Create
- ServiceNow Platform Implementation
- CMDB Fundamentals
- GRC: Integrated Risk Management (IRM) Fundamentals
- GRC: Integrated Risk Management (IRM) Implementation
- GRC: Classic Risk Assessment Fundamentals
- GRC: Audit Management Essentials
- GRC: Regulatory Change Management Essentials
- GRC: Integrated Risk Management (IRM) Simulator