Domain 1 · Third-party Risk Management Fundamentals and Third-party Risk Management Review
23% of the exam- About Third-party Risk Management
- Third-party Risk Management Process
- Technical Details
Certified Implementation Specialist - Third-Party Risk Management
ServiceNow's blueprint lists what the exam tests and how much each area counts. This page restates it in plain language, with the domains ordered as published and every objective as a checklist.
Official source: KB0011556, updated January 2026. Open the official CIS-TPRM blueprint
The original is a ServiceNow University knowledge article and may ask you to sign in to Now Learning. If anything here disagrees with it, the official blueprint wins.
Each domain's share of the exam, and what that means for every 10 hours you study.
| Domain | Weight | Of every 10 study hours |
|---|---|---|
| 1. Third-party Risk Management Fundamentals and Third-party Risk Management Review | 23% | 2 h 15 min |
| 2. Core Configuration | 14% | 1 h 30 min |
| 3. Assessment Configuration | 33% | 3 h 15 min |
| 4. Third-party Portal | 12% | 1 h 15 min |
| 5. Third-party Supporting Processes | 12% | 1 h 15 min |
| 6. Other Application Relationships | 6% | 30 min |
Weights as published in KB0011556. The study-time column only applies the weight; spend more on domains you're weaker in.
The blueprint's objectives for each domain. Tick them off as you can explain and do each one in a Personal Developer Instance.
The blueprint lists these as recommended preparation.
Listed as further reading, not core preparation.
Courses without a link are named in the blueprint but we haven't recorded a course URL for them; search for them in Now Learning.