For classic risk assessment, what are the risk components that apply to the Qualitative method? (Choose two.)
Which GRC application would you use to manage internal or external consultancy processes that aim to prove
the effectiveness of controls?
Common controls from UCF import into which table in ServiceNow?
Control indicators may be triggered or scheduled in which state?
What would you use in order to accommodate a customer’s unique process around policy approvals? For example, each policy needs a second layer of approval.
Policies can be automatically published after which of the following occurs?
Who can move a Policy into Review? (Choose two.)
Which table stores the links from Policy to Control Objective?
When calculating compliance scores, what is true about the weighting of Controls? (Choose two.)
What are the Risk Scoring methods available in ServiceNow? (Choose two.)