Common controls from UCF are imported into which ServiceNow table?

• A. sn_compliance_policy
• B. sn_compliance_policy_statement
• C. sn_compliance_policy_exception
• D. sn_complilance_authority_document

Answer: (B)

Common controls from UCF are the individual control requirements that can be tested and evidenced. In ServiceNow IRM, these granular controls are stored as policy statements, which describe each specific control, its objective, testing method, and evidence. Placing them in the policy statements table allows you to map each control to a policy, assign owners, and track assessments and evidence at the control level. The policy table is for the overall policy, not the individual controls, and exceptions or unrelated documents live elsewhere. So the common controls import into the policy statements table.