ServiceNow CIS-RC free question 5 / 10 · Domain 4: Policy and Compliance
Direct citation-to-control mapping is in use. On the page of a control that is linked to no control objective (an independent control), a user clicks Add in the citations related list. Which citations are offered?
- None until the control is linked to a control objective
- All citations in the instance, with no hierarchy filter
- Citations of parent control objectives, traversed upward
- Citations linked to other controls on the same entity
Show the answer and explanation
Answer: B
Why this is correct
The Association of citations to controls page says that on the Control page, Add does not show all citations in the instance; it applies hierarchy-based eligibility rules. The list offers the citations directly associated with the control objective linked to the control, citations associated with parent control objectives (traversing upward), and citations associated with child control objectives (traversing downward). The page then gives the exception: if the control is independent, meaning it is not linked to any control objective, all citations are available for association. With no control objective, there is no hierarchy to walk, so nothing narrows the list.
Why the other options are wrong
"Citations linked to other controls on the same entity" … The eligibility rules on the Control page follow the control objective hierarchy, upward and downward from the objective linked to the control. For an independent control, the page makes all citations available.
"Citations of parent control objectives, traversed upward" … Traversing upward to parent control objectives is one of the rules for a control that is linked to a control objective. An independent control has no objective to start from.
"None until the control is linked to a control objective" … The page says that if the control is independent, all citations are available for association. Independent controls can be associated directly.
Key point
On the Citation page the direction is reversed: Add offers controls from the control objectives directly associated with the citation and from their child and grandchild objectives down to the last level, and independent controls are always eligible there too.
Go to the ServiceNow CIS-RC practice app (10 free questions; purchase unlocks all questions)