Configuration Compliance is used to do what in ServiceNow IRM?

• A. It replaces continuous monitoring indicators
• B. It is used to continuously monitor controls
• C. It cannot be used with control objectives
• D. It monitors only policies

Answer: (B)

Configuration Compliance is the mechanism in ServiceNow IRM that continuously checks whether the configurations of assets and systems align with the defined controls and baselines. By turning control requirements into automated checks against configuration items, it provides ongoing visibility into compliance, detects drift, and supports timely remediation.

It doesn’t replace continuous monitoring indicators; rather, it supplies the ongoing verification data that those indicators reflect. It isn’t limited to policies and does more than monitor policies alone—control objectives and the controls that implement them are evaluated through configuration state. That makes continuous monitoring of controls the best fit for what this feature does.