ServiceNow CIS-TPRM free question 1 / 10 · Domain 1: Third-party Risk Management Fundamentals and Third-party Risk Management Review
On the TPRM Home page, a TPR assessor wants the third-party contact to respond to a concern about a questionnaire response during the due diligence process. Which quick action does the Home page describe for this purpose?
- Create an internal assessment for the engagement
- Create an assessment to start the risk assessment life cycle
- Create an issue for the third party or engagement
- Create a task for the third party or engagement
Show the answer and explanation
Answer: D
Why this is correct
The Quick actions on the TPRM Home page describe Create a task as the action to help ensure that a user at your organization or the third-party contact responds to your concerns about questionnaire responses or requested documents during the due diligence process. A task is therefore the follow-up for a specific answer or document, and it can be aimed at either an internal user or the third-party contact. The other quick actions create a third party record, an engagement, an internal assessment, an external assessment, or an issue. The Home page itself displays reports of important risk information and quick access to actions for TPR managers and TPR assessors.
Why the other options are wrong
"Create an issue for the third party or engagement" … The Home page describes Create an issue as the action to help ensure that your concerns about a third party or engagement are remediated. The purpose given for an issue is remediation of a problem, not getting a response about a questionnaire answer.
"Create an internal assessment for the engagement" … An internal assessment is answered inside the organization, as part of a due diligence request or ongoing risk monitoring, and the page says it can affect which questionnaires are later sent to the third party or engagement. It is not a way to ask the contact to respond.
"Create an assessment to start the risk assessment life cycle" … Creating an assessment initiates the third-party risk assessment life cycle, which sends questionnaires to the third party. It starts a new assessment rather than following up on a response that was already given.
Task versus issue
Use a task when you need someone to respond about a questionnaire response or a requested document. Use an issue when a concern about the third party or engagement needs to be remediated. Both are created from the same Quick actions area, so the choice depends on what you expect to happen next.
Go to the ServiceNow CIS-TPRM practice app (10 free questions; purchase unlocks all questions)