Expected CSA Exam Topics, as suggested by ServiceNow :

• Topic 1: Platform Overview and Navigation: ServiceNow Platform overview and platform capabilities and services are discussed in this topic. It also delves into the ServiceNow Instance and Next Experience Unified Navigation.
• Topic 2: Instance Configuration: Sub-topics of this topic include installing applications and plugins, personalizing or customizing the instance. Lastly, it focuses on common user interfaces in the Platform.
• Topic 3: Configuring Applications for Collaboration: In this topic, questions about Lists, Filters, and Tags, Form Configuration, Task Management, Visual Task Boards (VTBs), and Notifications.
• Topic 4: Self Service & Automation: Sub-topics related to knowledge management, service catalog, and flow designer are present in this topic. Lastly, it discusses virtual agent sub-topic.
• Topic 5: Database Management: The topic of database management focuses on data schema, application or access control, importing data. Lastly, it focuses on CMDB and CSDM.
• Topic 6: Data Migration and Integration: In this topic, questions about UI Policies, Business Rules, System update sets, and Scripting in ServiceNow appear.

Expected CIS-VRM Exam Topics, as suggested by ServiceNow :

• Module 1: Vendor Risk Management Fundamentals: This topic covers the basics of vendor risk management (VRM), including its objectives, benefits, and common challenges. You’ll also learn about the different types of vendor risks and how to identify them.
• Module 2: ServiceNow Vendor Risk Management Application: The topic dives into the specifics of the ServiceNow VRM application. You’ll learn about the different modules of the application, how to configure them, and how to use them to manage vendor risk.
• Module 3: Vendor Portal Configuration: The vendor portal is a self-service portal that allows vendors to access information, submit documentation, and complete tasks related to the VRM process. You’ll learn how to configure the vendor portal to meet your organization’s needs.
• Module 4: Security and Compliance: Security and compliance are critical aspects of VRM. You’ll learn about the security features of the ServiceNow VRM application and how to comply with relevant regulations.

Expected CIS-VR Exam Topics, as suggested by ServiceNow :

• Module 1: Vulnerability Response Applications and Modules: This section of the exam measures the skills of Vulnerability Response Implementers and covers the foundational concepts of ServiceNow Security Operations. It introduces candidates to the overall Vulnerability Response application and its integration with the broader ServiceNow platform. The section also explores how application and container vulnerabilities are identified and tracked within ServiceNow using dedicated modules Getting Data into Vulnerability Response: This section of the exam measures the skills of IT Security Analysts and focuses on how vulnerabilities and vulnerable items are defined and gathered within the platform. It examines how to integrate ServiceNow with external vulnerability scanners and data sources, including those that support both application and container vulnerability response.
• Module 2: Tools to Manage Vulnerability Response: This section of the exam measures the skills of ServiceNow Administrators and addresses the various tools available within the platform for managing the vulnerability lifecycle. Candidates will need to understand how to use Vulnerability Workspaces and apply rules such as classification, assignment, remediation task, and target rules.
• Module 3: Automating Vulnerability Response: This section of the exam measures the skills of Security Operations Professionals and covers automation capabilities within the Vulnerability Response process. It focuses on managing exceptions and false positives, along with utilizing built-in workflows to streamline response activities.
• Module 4: Vulnerability Response Dashboards and Reports: This section of the exam measures the skills of Security Operations Professionals and includes the creation and use of dashboards and reporting tools to visualize vulnerability data. It introduces the basics of performance analytics as applied to vulnerability response and provides insights into how data-driven decisions can be supported through comprehensive visualizations and real-time performance tracking within the ServiceNow platform.

Expected CIS-SPM Exam Topics, as suggested by ServiceNow :

• Module 1: Information Security Governance: This section of the exam delves into security management concepts and principles, examining organizational structures and roles in security. It also covers developing and implementing security policies, standards, and procedures.
• Module 2: Regulatory Compliance and Legal Issues: This section addresses risk management and risk assessment methodologies, including threat modeling and vulnerability assessment. It also explores various risk mitigation strategies.
• Module 3: Asset Security: This section focuses on information and asset classification, data security controls, privacy protection measures, and intellectual property protection.
• Module 4: Security Architecture and Engineering: This section examines security models and design principles, system and application security, as well as cryptography and key management.
• Module 5: Communication and Network Security: This section covers network architecture and design, secure communication protocols, wireless network security, and strategies to defend against network attacks.
• Module 6: Identity and Access Management: This section explores authentication methods and technologies, authorization and access control models, and the identity management lifecycle.
• Module 7: Security Operations: In this section, the focus is on security monitoring and analytics, incident response and management, forensics and investigations, and patch and vulnerability management.
• Module 8: Software Development Security: This section emphasizes securing the software development lifecycle, including application security testing, code review, secure coding practices, and third-party software management.
• Module 9: Security Assessment and Testing: This section focuses on security audit principles and methodologies, penetration testing techniques, and the use of security metrics and reporting.
• Module 10: Privacy Management: This section covers privacy principles and regulations, privacy impact assessments, data protection techniques, and the concepts of privacy by design.

Expected CIS-SM Exam Topics, as suggested by ServiceNow :

• Module 1: Configuration Management Database/ CMDB Health Dashboard, CI Class Manager, CMDB Tables
• Module 2: Application Identification and Connection Sections/ CMDB Identification and Reconciliation
• Module 3: Implementation Skill Sets, MID Server Requirements/ Reclassification, CMDB Relationships
• Module 4: Discovery Troubleshooting/ Behaviors, Clusters, IP Services, Schedules, MID Servers
• Module 5: Service Mapping Pattern Design/ Service Mapping Process Flow
• Module 6: CI Class Management/ Pattern Designer/ Scripting/ Discovery Configuration
• Module 7: Identification and Connection Sections, Troubleshooting/ Operationalizing IT
• Module 8: Measurable KPI improvements, Service Mapping Benefits, Service Mapping Use Cases/ Service Mapping Configuration
• Module 9: Discovery Process Flow/ Identification Rules, Reconciliation Rules, Datasource Precedence Rules

Expected CIS-SIR Exam Topics, as suggested by ServiceNow :

• Module 1: Security Incident Automation using Flows and Workflows/ Explore How to Create Security Incidents
• Module 2: Security Incident and Threat Intelligence Integrations/ Understand Major Security Incident Management
• Module 3: Security Incident Calculator Groups and Risk Scores/ Security Incident Creation and Threat Intelligence
• Module 4: Risk Calculations and Post Incident Response/ Introducing Security IncidentResponse
• Module 5: Security Incident Response Management/ Definition of Escalation Paths
• Module 6: Understanding Customer Goals and Meeting Customer Expectations/ Security Incident Response Overview
• Module 7: Automate Security Incident Response Overview/ Security Analyst Workspace (New UI)
• Module 8: Standard Automated Assignment Options/ Process Definitions and Selection
• Module 9: Managing Pre-Built Integrations/ Understanding Threat Intelligence

Expected CIS-SAM Exam Topics, as suggested by ServiceNow :

• Module 1: License Metrics, Entitlements, and Allocations/ Reporting, Implementation, and Maintenance
• Module 2: Software Model Lifecycle and Retirement/ Software Asset Core Overview & Fundamentals
• Module3: Application Introduction and Recommended Practice/ Software Installation Optimization
• Module 4: Operational Integration of Software Processes/ Products and Models
• Module 5: Practical Management of Software Compliance/ Software Asset Management Basics•Process Architecture
• Module 6: Contract and Change Management/ Software Remediation
• Module 7: Service Catalog and Procurement/ Extending SAM/ Software Reconciliation