ServiceNow Certified Implementation Specialist – Vendor Risk Management — Question 37

Which statement best describes the SIG Lite?

Answer options

• A. The SIG Lite is a company specific questionnaire
• B. The SIG Lite is a ServiceNow developed questionnaire
• C. The SIG Lite assesses basic levels of due diligence and provides a broad but high-level understanding about internal security controls
• D. The SIG Lite assesses service providers that store or manage highly sensitive or regulated information

Correct answer: C

Explanation

The correct answer, C, accurately states that the SIG Lite provides a high-level overview of internal security controls while assessing basic due diligence. Options A and B mischaracterize the purpose and origin of the SIG Lite, while D incorrectly suggests it is used specifically for service providers managing highly sensitive information, which is not its primary focus.