Which role is not part of ServiceNow GRC?
A. Risk User
B. Risk Developer
C. Risk Manager
D. Risk Reader
What happens when you assign an Entity Type to a Risk Statement?
A. An assessment will be automatically generated to test each Entity listed in the Entity Type
B. A risk assessment is created automatically for every Entity listed in the Entity Type
C. A risk is automatically generated for every Entity listed in the Entity Type
D. The Entity is now going to present a risk score and controls are going to be tied to it
What table extends from Document Table?
A. Risk
B. Risk Framework
C. Risk Response Task
D. Risk Statement
Which of the following are scoped applications related to the Risk and Compliance applications? (Choose four.)
A. GRC: GRC Profiles
B. GRC: Attestation Design
C. GRC: UCF Compliance
D. GRC: Policy and Compliance
E. GRC: Performance Analytics
F. GRC: Risk Management
The Citation table is a child table of which parent?
A. Content
B. Authority Document
C. Item
D. Document
In which state can reviewers either send the Policy back to draft or forward it by requesting approval?
A. Retired
B. Published
C. Awaiting Approval
D. Review
The Risk Scoring values are entered on the Risk Statement. What records inherits the values from the Risk Statement?
A. Risk Criteria Matrix
B. Risk Framework
C. Registered Risk
D. Risk Response Issue
Which of the following statements correctly describe the risk management lifecycle process?
A. Access, Identify and Plan, Control, Review
B. Control, Review, Assess, Identify and Plan
C. Identify and Plan, Assess, Control, Review
D. Identify and Plan, Review, Assess, Control
What would you leverage in order to provide users with an alternate user experience to view policies, create policy exceptions, and search for controls?
A. Help Desk Portal
B. Catalog Portal
C. Access Portal
D. Service Portal
UCF has a collection of what? Select all UCF terms. (Choose three.)
A. Control Indicators
B. Authority Documents
C. Policies
D. Citations
E. Controls