In RAM, which assessment type is a valid option to enable?

In RAM, which assessment type is a valid option to enable?

• A. Operational Risk Assessment
• B. Application Risk Assessment
• C. Residual Assessment
• D. Inherent Assessment

Answer: (C)

In RAM within ServiceNow IRM, you track risk after controls have been applied. This is the residual assessment — it shows the remaining risk once mitigations are in place, so you can judge whether controls are sufficient and monitor any ongoing risk. Inherent risk is the level before controls, and it’s not something you toggle as an assessment type to enable. The other options refer to broader risk domains rather than the specific post-mitigation assessment type. So enabling the residual assessment is the valid choice because it reflects the risk that remains after mitigations and is the focus for tracking residual risk over time.

In RAM within ServiceNow IRM, you track risk after controls have been applied. This is the residual assessment — it shows the remaining risk once mitigations are in place, so you can judge whether controls are sufficient and monitor any ongoing risk. Inherent risk is the level before controls, and it’s not something you toggle as an assessment type to enable. The other options refer to broader risk domains rather than the specific post-mitigation assessment type. So enabling the residual assessment is the valid choice because it reflects the risk that remains after mitigations and is the focus for tracking residual risk over time.