ServiceNow Certified Implementation Specialist – Risk and Compliance — Question 25

Which GRC application would you use to manage internal or external consultancy processes that aim to prove the effectiveness of controls?

Answer options

• A. Audit Management
• B. Risk Management
• C. Vendor Risk Management
• D. Policy and Compliance Management

Correct answer: A

Explanation

The correct answer is A, Audit Management, as it specifically focuses on evaluating and verifying the effectiveness of controls through audits. Options B, C, and D deal with broader risk and compliance aspects but do not directly address the consultancy process aimed at proving control effectiveness.