Certified Implementation Specialist - Third-Party Risk Management (CIS-TPRM) Mainline Exam Blueprint


ServiceNow Logo.png
 
 
Updated January 2026


Introduction

The ServiceNow Certified Implementation Specialist – Third-party Risk Management Exam Specification document defines the purpose, audience, testing options, exam content coverage, test framework, and prerequisites for earning the Certified Implementation Specialist – Third-party Risk Management  certification.

Exam Purpose

The Certified Implementation Specialist – Third-party Risk Management exam confirms you have the knowledge and skills to configure, implement, and maintain the ServiceNow TPRM application. This certification validates their ability to manage third-party risk processes, configure assessments, set up the third-party portal, and support workflows. Certified individuals enhance risk management by integrating third-party risk with broader GRC operations.

 

Exam Audience

The ServiceNow Certified Implementation Specialist – Third-party Risk Management exam is available to ServiceNow customers, partners, employees, and others interested in becoming a ServiceNow Third-party Risk Management Implementer. 

Exam Preparation

Exam questions are based on official ServiceNow training materials, the ServiceNow Product documentation site, and the ServiceNow developer site. Study materials posted elsewhere online are not official and should not be used to prepare for the examination.

ServiceNow recommends completing these training course(s) in preparation for the Certified Implementation Specialist – Third-party Risk Management exam.

    • Welcome to ServiceNow
    • ServiceNow Administration Fundamentals
    • System Administration Advanced 
    • UI Builder Fundamentals
    • Flow Designer Fundamentals
    • Get Started with Now Create 
    • ServiceNow Platform Implementation
    • GRC: Third-party Risk Management (TPRM) Fundamentals  
    • GRC: Third-party Risk Management (TPRM) Implementation
    • GRC: Third-party Risk Management (TPRM) Implementation Simulator
    • Certified Implementation Specialist - Third-Party Risk Management (CIS-TPRM) Delta Exam Study Guide

Additional Recommended Resources

In addition to the above, these additional resources are valuable in preparation for the exam.

    • Credentialing Program Guide – a resource to guide you through the entire certification process
    • Platform Analytics Workspace
    • Service Portal Fundamentals 
    • Automated Test Framework Fundamentals 
    • Knowledge Management Fundamentals 

 

Exam Scope

This table shows the exam domains, weightings, sub-topics, and the percentage of questions represented in each domain. The listed sub-skills should NOT be considered an all-inclusive list of the exam content. 

 

 

Number of Domains

 

 

Exam Domain

 

 

Percent of Exam

 

1

Third-party Risk Management Fundamentals and Third-party Risk Management Review

  • About Third-party Risk Management
  • Third-party Risk Management Process
  • Technical Details

23%

2

Core Configuration

  • Third-party Portfolio Configuration
  • Third-party Contacts Configuration
  • Third-party Risk Intelligence Scoring Configuration

14%

3

Assessment Configuration

  • Assessment Basics/Due Diligence Requests
  • Third-party IRQ (Tiering) and Due Diligence Configuration 
  • Risk Assessment Configuration 
  • Risk Assessment Generation 
  • Risk Assessment Calculations 
  • Assessment Lifecycle 

33%

4

Third-party Portal

  • Third-party Portal Configuration 

 

12%

5

Third-party Supporting Processes

  • IRQ Approval
  • Third-party Risk Issues Approval
  • Third-party Risk Process Workflows

12%

6

Other Application Relationships

  • ServiceNow GRC Overview
  • Monitor Risk and Control Compliance
  • Other Application Relationships

6%

Total

 

100%


 

Exam Registration

Step 1: Register for your exam 

  • Registration = payment. This step secures your exam attempt. Learning credits and credit card payments are accepted. Instructor-led training completion includes one free exam attempt. Discounted exam pricing may be available through associated company benefits.  
  • You can register at any time. Once registered, you have 90 days to schedule and complete your exam. 
  • Exam fees are non-refundable. Register only when you are prepared to schedule your exam. 

Step 2: Schedule your exam 

  • Click here to register for the CIS-TPRM exam. Note: ServiceNow provides reasonable accommodation to individuals with disabilities or English as a Second Language (ESL) while taking the certification exam. 

  • Schedule within 90 days. After registration, you must schedule your exam appointment and complete your exam within 90 days. 
  •  

Step 3: Choose your exam delivery method 

  • From the My Exams page, you will be directed to Pearson. 
  • Choose to take your exam at a Pearson test center or online with OnVUE, where proctors observe via a webcam. 

Step 4: Complete your exam  

  •  If you do not complete your exam within 90 days, your registration will expire, and you will need to register and pay the full exam fee again (start at step 1 again). 

 

Exam Structure

Exam Duration

The exam duration is 90 minutes.

Number of Items

The exam consists of 60 questions.

 

Multiple Choice (single answer)

For each multiple-choice question on the exam, there are at least three possible responses. Select the correct response. 

Multiple Select (select all that apply)

There are at least four possible responses for each multiple-select question on the exam. The question will state how many responses should be selected. Select ALL correct responses. Partial credit is not provided.

 

Exam Result

An exam result notification is immediately displayed as a *conditional pass or fail after completing and submitting the exam.  

In addition, an exam result report is available and shows your exam result and the percentage of items in each section you answered correctly. Your exam result is conditional, meaning your results are preliminary and may be updated upon final review.  

*A conditional result means the exam can be audited and reviewed at any time, and the certification may be revoked after investigation if it is found that the ServiceNow Test Security Policies have been violated.    

 Understanding Your Results: 

 
Each question on the exam is worth one point. Your total score is compared to a predetermined cut score - this score is not publicly shared and is not always 70%  - to determine a pass or fail outcome. The section percentages on the exam result notification show how you performed in each domain, but they do not determine your overall result, should not be averaged, and do not indicate expertise. 

If You Pass:  

  • You will earn the Certified Implementation Specialist – Third-party Risk Management certification and receive a Credly digital badge to showcase your achievement.

  • To maintain your certification, complete annual maintenance exams (deltas) and pay the yearly Certification Maintenance Program (CMP) fee. 

If You Do Not Pass: 

  • Review the exam blueprint and the recommended training before retaking the exam.
  • The retake policy requires a waiting period between attempts and payment of the exam fee for each attempt. 

 

Sample Questions

Sample Question #1 

What ServiceNow feature helps companies manage third parties without emails and spreadsheets? 

A. The Customer Service Portal 

B. The Third-party Portal 

C. The Third-party Registry 

D. The Third-party Platform

Answer: B

 

Sample Question – #2 

Which fields are included on the Third-party Contact form? (choose two)

A. Risk rating 

B. Rank tier 

C. Primary contact 

D. Email 

Answer: C, D

 

Sample Question – #3 

In which state are Third-party Risk Issues considered inactive?

A. Review 

B. Submitted to Third Party

C. Finalize with Third Party

D. Closed 

Answer: D

 

Sample Question – #4 

What actions can occur in the Third-party Portal?  (choose two)

A. View Project Gannt Charts 

B. Submit an incident 

C. Respond to a Third-party Risk Assessment 

D. Manage Third-party Contacts 

Answer: C, D

 

Sample Question – #5 

Risks registered within an organization are captured as which type of record in ServiceNow? 

A. Control Definition 

B. Risk Statement 

C. Control Template 

D. Attestation

Answer: B

 

Sample Question – #6 

What is a common table used for Third-party Risk Management reporting? 

A. Control [sn_control] 

B. Task [task] 

C. Third-party Risk Assessment [sn_vdr_risk_asmt_assessment]

D. Third party [core_third_party] 

Answer: C

Back to Top