CIS-SIR Zurich Delta Exam
Maintain your Certified Implementation Specialist - Security Incident Response certification by completing the Zurich delta exam. Learn what's new and validate your updated knowledge.
Delta Exam Timeline
What's New in Zurich
Key changes and features you need to know for the delta exam.
Review the Official Study Guide
ServiceNow provides a detailed study guide covering all Zurich release changes for the CIS-SIR certification.
Open Study GuidePrepare with Practice Questions
Reinforce your knowledge with our CIS-SIR practice materials.
Security Incident Response Overview and Data Visualization
Understand the Security Incident Response application architecture, data visualization capabilities, and how SIR fits within Security Operations.
Security Incident Creation and Threat Intelligence
Learn how security incidents are created, classified, and enriched with threat intelligence data.
Security Incident and Threat Intelligence Integrations
Configure integrations with SIEM, SOAR, and threat intelligence platforms to enhance security incident response capabilities.
Security Incident Response Management
Master the tools and processes for managing security incidents through investigation, containment, and resolution.
Automation and Standard Processes
Configure playbooks, automated responses, and standard operating procedures to accelerate incident response.
Risk Calculations and Post Incident Response
Understand how security risks are calculated, reported, and how post-incident activities improve future response.
Delta Exam Tips
Format & Structure
- •Non-proctored, online exam on Now Learning
- •10 multiple-choice questions
- •20 minute time limit
- •Up to 3 retakes allowed
Preparation Strategy
- •Focus on Zurich release notes
- •Review the official delta study guide
- •Practice in a Zurich PDI instance
- •Complete any related Now Learning courses
Don't Let Your Certification Expire
Complete your CIS-SIR Zurich delta exam before April 16, 2026.