Which data source is not used to source control data for a customer's control framework?

Which data source is not used to source control data for a customer's control framework?

• A. An external regulatory content provider
• B. ServiceNow Product documentation
• C. ServiceNow content packs and accelerators
• D. Customer's existing controls

Answer: (A)

In ServiceNow IRM, the control framework is built from the customer’s own controls and from pre-built controls delivered by ServiceNow content packs and accelerators. Product documentation provides guidance and context, but the actual control data comes from those built-in or customer-sourced sources. External regulatory content providers supply regulatory requirements and standards, but they are not used as a direct data source for the control library within a customer’s framework.

In ServiceNow IRM, the control framework is built from the customer’s own controls and from pre-built controls delivered by ServiceNow content packs and accelerators. Product documentation provides guidance and context, but the actual control data comes from those built-in or customer-sourced sources. External regulatory content providers supply regulatory requirements and standards, but they are not used as a direct data source for the control library within a customer’s framework.