Understand the certification
Certification Overview
ServiceNow Certified Implementation Specialist - Risk and Compliance (CIS-RC) is about turning GRC work into something the platform can actually run. The exam expects you to understand how policies map to controls, how controls are tested, how evidence is collected, how audit work is tracked, and how risks are assessed and treated over time. It is not just a product exam. If you do not understand the operating logic behind policy, control, test, evidence, finding, issue, and remediation, the scenario questions will feel random.
Exam Domains
- Risk Management: risk frameworks, risk registers, assessments, inherent vs residual risk, treatment plans, and acceptance decisions
- Policy and Compliance Management: policies, policy statements, control objectives, controls, compliance frameworks, attestations, and evidence tracking
- Audit Management: audit programs, engagements, tests, workpapers, findings, and management response
- Issue and Exception Management: issues, exceptions, remediation tasks, ownership, and follow-up
- GRC Reporting: risk posture, compliance posture, executive reporting, and ongoing monitoring visibility
Who Is This For
This certification fits GRC consultants, compliance managers, risk analysts, internal audit specialists, and ServiceNow practitioners working on regulatory, control, and governance programs.
Exam at a glance
- Exam code
- CIS-RC
- Provider
- 其他
- Format
- Single choice / Multiple select
- Language
- English
- Validity
- 3 years
- Exam fee
- $250
Skills in focus
Learning outcomes
- Earn the ServiceNow CIS-RC certification
- Set up risk registers, control structures, compliance mappings, and audit workflows
- Translate regulatory and governance requirements into workable ServiceNow records and processes
- Run issue, exception, and remediation workflows in a structured way
- Improve your fit for GRC consulting, risk, and compliance roles
Who this is for
- ServiceNow GRC consultants implementing risk and compliance workflows
- Compliance managers and risk analysts moving governance work into ServiceNow
- Internal audit specialists configuring audit and control testing processes
- CSA-certified professionals with a background in compliance, audit, or security governance
Before you start
- CSA is required before taking CIS-RC
- Working knowledge of risk management and common compliance frameworks such as ISO 27001, SOX, or GDPR
- At least 6 months of ServiceNow GRC exposure is strongly recommended
- You should understand the chain from policy to control to test to evidence
- Prior work in audit, compliance, or security governance will help a lot
Your learning path
3 chapters
Plan your preparation
- Learning hours
- 20h
- With relevant experience
- 8-10 weeks
- Starting from scratch
- 12-16 weeks
- Daily study
- 1-2h
Included in your preparation
- Full GRC flow from policy and control through audit finding, issue, and remediation
- Clear treatment of inherent versus residual risk and how treatment plans are modeled
- 158+ scenario-based questions across frameworks, attestations, and control testing
- Practical audit management coverage including engagements, workpapers, and findings
- Mock exam aligned to the official 60-question, 90-minute format
Preparation tips
- 60 题 90 分钟，平均每题 2 分钟，合理分配时间
- 及格分 70/100，不确定的题先标记跳过，回头再做
- 排除法非常有用 — 先排掉明显错误的选项，剩下的再分析
- 多选题会告诉你选几个，仔细看题目要求
Common mistakes
- 没有读完所有选项就选答案 — 题目经常有"最佳"答案和"正确但不最佳"的干扰项
- 备考只刷题不理解原理 — 考试场景题需要理解底层概念
- 忽略时间管理 — 在难题上卡太久，导致后面简单题没时间做
Before you register
What core content does the ServiceNow CIS-RC exam cover?
CIS-RC tests implementation skills for the ServiceNow Risk and Compliance (GRC) module, including: Risk management framework configuration, Policy and compliance management, Audit management, Control testing and assessment, Issue and exception management, and GRC reporting and dashboards. You need to understand how compliance frameworks like NIST and ISO 27001 are implemented in ServiceNow.
What are the passing criteria and cost for CIS-RC?
The exam contains 60 questions in 90 minutes with a passing score of 70%. The exam fee is $250 USD. Questions are primarily scenario-based, requiring you to select the best ServiceNow GRC configuration based on compliance requirements. This question bank provides 161 practice questions for thorough preparation.
What prerequisites are needed for CIS-RC?
You must first pass the ServiceNow CSA (System Administrator) certification. Additionally, enterprise risk management (ERM) fundamentals, familiarity with common compliance frameworks (SOX, GDPR, ISO 27001), and ServiceNow platform configuration experience are recommended. A background in GRC or information security significantly reduces preparation difficulty.
What roles is CIS-RC certification suitable for?
It primarily targets professionals implementing risk and compliance solutions on the ServiceNow platform. This includes GRC implementation consultants, compliance administrators, risk analysts, information security managers, and internal audit specialists. Certified professionals typically configure risk registers, compliance policy engines, and audit workflows.
What is the difference between CIS-RC and CIS-VRM?
CIS-RC focuses on internal enterprise risk and compliance management (policy creation, control testing, internal audits). CIS-VRM focuses on third-party vendor risk management (vendor assessment, contract compliance, continuous monitoring). Both belong to different modules within the ServiceNow GRC product family and are complementary but independently tested.
How do I renew CIS-RC certification?
CIS-RC certification is valid for 3 years. Renewal requires passing a Delta exam (covering new version updates) or retaking the full exam. Monitor ServiceNow bi-annual version releases and renewal announcements on the Now Learning platform.
Learner experiences
Loading reviews…
Start with the first chapter.
2 free chapters · Full preparation from $39