Which RAM assessment types can be enabled when configuring a RAM?

Which RAM assessment types can be enabled when configuring a RAM?

• A. Residual Assessment
• B. Operational Risk Assessment
• C. Project Risk Assessment
• D. Application Risk Assessment

Answer: (A)

When configuring RAM in ServiceNow IRM, you decide which assessment modes are available to evaluate risk. The Residual Assessment focuses on the risk that remains after controls have been applied. Enabling this type lets the system capture and score post-mitigation risk, which is essential for understanding how effective your controls are and for tracking risk reduction over time. This aligns with typical RAM goals of comparing inherent risk (before controls) to residual risk (after controls) and driving mitigation improvements. The other options refer to broader risk categories (operational, project, application) that aren’t the specific RAM assessment type you enable in RAM configuration, so they don’t fit as the RAM assessment type being configured.

When configuring RAM in ServiceNow IRM, you decide which assessment modes are available to evaluate risk. The Residual Assessment focuses on the risk that remains after controls have been applied. Enabling this type lets the system capture and score post-mitigation risk, which is essential for understanding how effective your controls are and for tracking risk reduction over time. This aligns with typical RAM goals of comparing inherent risk (before controls) to residual risk (after controls) and driving mitigation improvements.

The other options refer to broader risk categories (operational, project, application) that aren’t the specific RAM assessment type you enable in RAM configuration, so they don’t fit as the RAM assessment type being configured.