Why Study with PlanetCert?
The Latest Questions
Practice questions and exam topics aligned with the current exam objectives.
Detailed Explanations
Go beyond the answer. Master the material with comprehensive learning and professional explanations for every concept.
AI-Powered Insights
Personalized preparation guidance that adapts to your performance and identifies weak spots automatically.
Exam Information
Official specifications published by ServiceNow
Exam Format
90 min
60
Pass/Fail (percentage not disclosed)
Specialist
Registration
$450 USD
Pearson VUE or online proctoring
Validity
2 years
Pass the current mainline exam; Pass a delta exam when available; Earn continuing education credits through ServiceNow
CIS-VRM Exam Topics and Domains
CIS-VRM is organized into 6 weighted domains. Expect to work with Assessment Engine, GRC Platform, Integration Hub, Risk Calculator, and more.
1
Third-party Risk Management Fundamentals and Review
23%
About Third-party Risk Management
VRM/TPRM Objectives and BenefitsCommon Vendor Risk Types
- Understand the fundamentals of vendor risk management
- Identify different types of vendor risks
- Explain the benefits of implementing VRM
Third-party Risk Management Process
VRM LifecycleAssessment States
- Master the vendor risk management lifecycle
- Understand assessment state transitions
- Configure automated workflows
Technical Details
ServiceNow VRM Architecture
- Understand technical architecture
- Configure platform security
- Manage integrations
2
Core Configuration
14%
Third-party Portfolio Configuration
Vendor Master DataVendor Tiering
- Configure vendor portfolio
- Implement vendor tiering
- Manage vendor relationships
Third-party Contacts Configuration
Contact Management
- Configure contact management
- Set up communication workflows
- Manage contact updates
Third-party Risk Intelligence Scoring Configuration
Risk Scoring ModelsExternal Risk Intelligence
- Configure risk scoring models
- Integrate external risk data
- Customize scoring algorithms
3
Assessment Configuration
33%
Assessment Basics/Due Diligence Requests
Assessment TypesDue Diligence Process
- Configure assessment types
- Manage due diligence processes
- Set up document requests
Third-party IRQ (Tiering) and Due Diligence Configuration
Inherent Risk Questionnaire (IRQ)IRQ-Based Assessment Triggers
- Configure IRQ questionnaires
- Set up tiering assessments
- Automate assessment triggers
Risk Assessment Configuration
Assessment TemplatesAssessment Customization by Vendor Type
- Create assessment templates
- Customize questionnaires
- Configure scoring models
Risk Assessment Generation
Automated Assessment Creation
- Automate assessment generation
- Configure scheduling
- Set up distributions
Risk Assessment Calculations
Calculation Methods
- Configure risk calculations
- Set up scoring rules
- Interpret risk ratings
Assessment Lifecycle
Lifecycle Management
- Manage assessment lifecycle
- Configure state transitions
- Track remediation
4
Third-party Portal Configuration
12%
Third-party Portal Configuration
Portal SetupVendor Self-ServicePortal Security
- Configure vendor portal
- Set up self-service features
- Implement portal security
5
Third-party Supporting Processes
12%
IRQ Approval
IRQ Approval Workflow
- Configure IRQ approvals
- Design approval workflows
- Set up escalations
Third-party Risk Issues Approval
Issue Management
- Manage risk issues
- Configure issue approvals
- Track remediation
Third-party Risk Process Workflows
Workflow AutomationNotification and Alerts
- Design process workflows
- Configure notifications
- Implement automation
6
Other Application Relationships
6%
ServiceNow GRC Overview
GRC Platform Integration
- Understand GRC platform
- Configure integrations
- Leverage common services
Monitor Risk and Control Compliance
Compliance Monitoring
- Monitor compliance
- Track control effectiveness
- Manage exceptions
Other Application Relationships
ITSM IntegrationSecurity Operations Integration
- Integrate with ITSM
- Connect to SecOps
- Leverage platform capabilities
How do I earn this certification?
Passing CIS-VRM earns the CIS - Third-party Risk Management certification. It sits in the Governance, Risk, and Compliance (GRC) track.
Current Level Exams
Next Level Options
Alternative Paths
- CIS-SecOps - Security Operations Security risk management skills
- CIS-PPM - Project Portfolio ManagementPortfolio risk management
- CIS-HRSD - HR Service Delivery Vendor management for HR services
- CIS-FSM - Field Service ManagementThird-party contractor management
Practice with Precision
The PlanetCert Simulator mirrors the real exam environment with authentic questions and timed pressure.
How to study for this exam?
Use the official PlanetCert Practice Test alongside the study plan below to prepare efficiently for CIS-VRM.
What's changed on this exam?
Current Status
- ACTIVE
- Last content update: 2024-01-15
- Announcement date: 2023-10-01
Updates
- ServiceNow VRM Application Vancouver New AI risk scoring features likely in next exam update • Release date: 2024-01-15
- Integration Hub Latest Enhanced third-party integrations may appear in exam questions • Release date: 2024-01-15
- Now Intelligence AI/ML Features AI-powered risk scoring configuration questions expected • Release date: 2024-01-15
Who should take this exam?
This exam is typically taken by ServiceNow Implementation Specialists and GRC Consultants.
- ServiceNow Certified System Administrator (CSA)
- 6-12 months of hands-on ServiceNow experience
- Experience with vendor management processes
- Understanding of GRC concepts