thinQmaster Virtual testing partner Adaptive practice exams that find your weak spots and drill them. Every answer explained. From $69
Enroll

thinQmaster

Find your exam

Five questions free, before you decide.

Step 1 · choose a vendor

In one of our camps? Your practice exams come with the tuition — they are on your study page already.

ServiceNow · Governance, Risk & Privacy · Professional

ServiceNow CIS - Risk and Compliance exam guide

Exam ServiceNow Certified Implementation Specialist - Risk and Compliance (CIS-RC)

CIS-Risk and Compliance validates that you can implement ServiceNow Integrated Risk Management: policies and controls, authoritative sources and citations, risk registers and assessments, issues and indicators. It suits GRC consultants delivering compliance programs on ServiceNow.

QuestionsSee official page
Time limitSee official page
Passing scoreSee official page
Exam feeSee official page
Valid forSee official page
DeliveryProctored exam booked through ServiceNow University (online proctored or test center)

Format: Multiple choice and multiple select, proctored. Fee note: ServiceNow sets voucher pricing in ServiceNow University; check there before booking (a retake costs less than a first attempt).

Who it's for

GRC consultants, compliance analysts and ServiceNow admins implementing IRM.

What the exam covers

The vendor does not publish a domain breakdown for this exam. Check the official exam page for the current objectives.

Eligibility & prerequisites

Required: ServiceNow Certified System Administrator (CSA) plus completion of the required ServiceNow University implementation training for this product before you can book the exam.

Recommended: Experience with GRC concepts (controls, frameworks such as ISO 27001 or NIST) and ServiceNow IRM configuration.

Keeping it active

ServiceNow mainline certifications must be kept current with the platform: complete the maintenance (delta) requirement ServiceNow publishes for new platform releases within its window, or the credential lapses. Check the current maintenance rules in ServiceNow University.

Skills & careers

Skills it validates

  • Importing authoritative sources and citations
  • Building policies, control objectives and controls
  • Configuring risk frameworks and risk statements
  • Running risk and control assessments
  • Configuring indicators and issues
  • Building GRC dashboards

Job roles

GRC ConsultantServiceNow IRM ConsultantCompliance AnalystRisk AnalystServiceNow Implementation Specialist

Where it fits in your path

Planning a degree too? See how this cert earns college credit in the College Credit Navigator.

Build my study plan

  1. Week 1: Complete the required Risk and Compliance implementation training on ServiceNow University.
  2. Week 2: Policy and compliance data model: authoritative sources, citations, control objectives and controls.
  3. Week 3: Risk management: risk framework, risk statements, assessments and scoring.
  4. Week 4: Indicators, issues, audit integration and dashboards; practice tests.

Make it yours: pick your exam date and weekly hours. We'll split your time by domain weight and give you a printable plan.

Exam-day tips

  • Memorize the IRM data model hierarchy from authoritative source to control.
  • Understand how entities and entity types scope controls and risks.
  • Expect questions on indicators (manual, basic, scripted) and how they generate issues.
  • Know the difference between control attestation and control testing.

Key terms for this exam

All 27 terms Study with thinQcards™

Frequently asked questions

How much does the CIS-RC exam cost?

ServiceNow sets exam voucher pricing in ServiceNow University and it can differ by region and by whether you hold a subscription or partner/customer entitlement; check the current price there before booking. Retakes cost less than a first attempt.

How do I keep CIS-RC active?

Keep it current with each ServiceNow family release by completing the maintenance (delta) requirement ServiceNow publishes within its window; otherwise the certification lapses.

Do I need GRC experience?

It helps a lot; the exam assumes you understand controls, frameworks and risk assessment.

What is IRM?

Integrated Risk Management is ServiceNow's GRC product family; CIS-RC covers its core risk and compliance applications.

What is required before the exam?

CSA plus the required Risk and Compliance implementation training in ServiceNow University.

Official page: www.servicenow.com. Reviewed November 2026. Vendors change fees and objectives, so confirm with the vendor before you book. Spot something out of date? Tell us.