ServiceNow Third-Party Risk Management Practice Test

In this integration, control status updates are tied to the third-party risk assessment’s lifecycle. The automatic update happens at the point when the assessment is moving into the stage of Finalizing with third-party because that signals that all third-party input is being completed and the data is ready to be finalized and synchronized with policy, compliance, and risk records. This ensures the control status reflects a complete, reviewed assessment rather than intermediate steps.

Intermediary states like Responses received or Generating observations involve data collection or processing that isn’t yet finalized for propagation. And updating as soon as the contact submits would occur too early, before the assessment has been fully reviewed and finalized with the third party.