ServiceNow Certified Implementation Specialist - Security Incident Response (CIS-SIR)

Introduction

The ServiceNow Certified Implementation Specialist – Security Incident Response Exam Specification document defines the purpose, audience, testing options, exam content coverage, test framework, and prerequisites to earn the Certified Implementation Specialist – Security Incident Response certification.

Exam Purpose

The Certified Implementation Specialist – Security Incident Response exam certifies that a successful candidate has the skills and essential knowledge to contribute to the configuration, implementation, and maintenance of a ServiceNow Security Incident Response implementation.

ServiceNow Certified Implementation Specialist - Security Incident Response (CIS-SIR)

Exam Audience

The ServiceNow Certified Implementation Specialist – Security Incident Response exam is available to ServiceNow customers, partners, employees, and others interested in becoming a ServiceNow Certified Implementation Specialist – Security Incident Response. 

Exam Preparation

Exam questions are based on official ServiceNow training materials, the ServiceNow Security Incident Response - ServiceNow Docs and the ServiceNow developer site. Study materials posted elsewhere online are not official and should not be used to prepare for the examination

ServiceNow CIS-SIR Exam Summary:

Exam Name	ServiceNow Certified Implementation Specialist - Security Incident Response
Exam Code	CIS-SIR
Exam Fee	USD $450
Exam Duration	90 Minutes
Number of Questions	45
Passing Score	Pass / Fail
Format	Multiple Choice Questions
Books / Trainings	Secuirty Operations Funamentals Security Incident Respnse Implementation
Sample Questions	ServiceNow CIS-Security Incident Response Exam Sample Questions and Answers
Practice Exam	ServiceNow Certified Implementation Specialist - Security Incident Response (CIS-SIR) Practice Test

ServiceNow Security Incident Response Implementation Specialist Syllabus Topics:

Topic	Details	Weights
Security Incident Response Overview and Data Visualization	- Introducing Security Incident Resonse - Data Visualization - Understanding Customer Goals and Meeting Customer Expectations	15%
Security Incident Creation and Threat Intelligence	- Explore How to Create Security Incidents - Major Security Incident Management - Understanding Threat Intelligence - MITRE ATT&CK Framework	14%
Security Incident and Threat Intelligence Integrations	- ServiceNow Store and Share - Managing Pre-Built Integrations - Creating Custom Integrations	14%
Security Incident Response Management	- Security Analyst Workspace - Standard Automated Assignment Options - Definition of Escalation Paths - Security Tags - Process Definitions and Selection	15%
Risk Calculations and Post Incident Response	- Security Incident Calculator Groups and Risk Scores - Post Incident Reviews	12%
Automation and Standard Processes	- Automate Security Incident Response Overview - Security Incident Automation Using Flows and Workflows - Playbook Automation (Knowledge Articles and Runbooks) - Use Case: User Reported Phishing v2	30%