ServiceNow Certified Implementation Specialist - Vendor Risk Management (CIS-VRM)

Certification Overview

ServiceNow Certified Implementation Specialist - Vendor Risk Management (CIS-VRM) is about building a workable third-party risk process on the platform. The exam covers vendor onboarding, assessment questionnaires, scoring, tiering, monitoring, and contract-related follow-up. In practice, this is a TPRM exam. You are expected to understand why a vendor is assessed, how risk is classified, and how monitoring changes once a supplier is considered critical.

Exam Domains

• Vendor Lifecycle Management: vendor and contact records, onboarding, maintenance, offboarding, and supporting documentation
• Assessment Questionnaires: templates, question types, portals, scoring rules, reassessments, and due dates
• Vendor Tiering and Classification: tier logic, categories, critical vendor handling, and monitoring depth
• Ongoing Monitoring: schedules, monitoring tasks, external signals, alerts, and follow-up
• Contract Compliance: vendor contracts, attestation, SLA and KPI monitoring, and renewal visibility
• Reporting: vendor risk posture, third-party summaries, issue tracking, and executive reporting

Who Is This For

This certification fits VRM consultants, procurement compliance teams, third-party risk analysts, security managers, and GRC practitioners who handle vendor oversight rather than internal control programs.