Which of the following is not a trigger for issue creation?

• A. Manual issue created by any manager or admin role as well as by audit user
• B. Indicator failure
• C. Risk assessment returns the inherent and residual risk impact as 'Very High'
• D. Attestation returns the result as 'Not Implemented'

Answer: (C)

The concept being tested is what events actually cause an issue to be created in IRM. In ServiceNow IRM, issues are triggered by concrete events that require remediation: someone with the right roles can manually create an issue; an indicator failing signals a problem that needs attention; and an attestation result like Not Implemented flags missing or incomplete compliance evidence that should be addressed. These are active triggers that prompt immediate workflow actions.

A risk assessment returning inherent and residual risk as Very High is simply a rating output. While it indicates there’s a high level of risk, it does not by itself generate an issue unless there are a rule or automation configured to map that rating to issue creation. So that rating is not a trigger, even though it may prompt scrutiny or remediation planning.

Thus, the best answer is that the risk assessment rating being Very High is not a trigger for creating an issue, while the other scenarios represent explicit events that would initiate an issue.