The ServiceNow CIS-RC exam is written for people who configure and implement Risk, Policy and Compliance, and Audit Management on the platform, not for risk managers who only use those applications. It tests how entities, policies, controls, risks and audits are built and connected, in 60 questions over 90 minutes, and the result is Pass or Fail.

Most of the confusion around this credential, though, starts with its name. The exam title says Risk and Compliance, the training courses say Integrated Risk Management, and the product family is still called GRC in several places. ServiceNow's published blueprint for the exam was updated in January 2026, and every exam figure below was read from it in October 2026. This article explains who the exam suits, what the seven domains ask, where the marks are concentrated, how the vendor's own sample questions are phrased, how booking and results work, and how the credential fits next to the other ServiceNow implementation exams.