Which Script include can be modified to change how the compliance scores roll up?

Which Script include can be modified to change how the compliance scores roll up?

• A. ScoreRollUp
• B. ComplianceUtils
• C. ComplianceScoreCalculator
• D. AssessmentStrategy

Answer: (C)

The thing being tested is where the numeric roll-up logic for compliance scores lives and how you change it. In ServiceNow IRM, the actual aggregation that turns individual control results into an overall compliance score is handled by a script include that contains the scoring algorithm. Specifically, the ComplianceScoreCalculator script include houses the logic for combining scores, applying weights, normalization, and the roll-up rules used across assessments. Because of this central placement, modifying this script include directly changes how all scores are rolled up, and ensures a consistent behavior system-wide. Other script includes play different roles: a helper or utility set may support various operations, a roll-up trigger might orchestrate when roll-ups run, and an assessment strategy defines how assessments are evaluated, but they don’t encapsulate the core numeric aggregation logic. Therefore, the best place to adjust how roll-ups happen is the ComplianceScoreCalculator.

The thing being tested is where the numeric roll-up logic for compliance scores lives and how you change it. In ServiceNow IRM, the actual aggregation that turns individual control results into an overall compliance score is handled by a script include that contains the scoring algorithm. Specifically, the ComplianceScoreCalculator script include houses the logic for combining scores, applying weights, normalization, and the roll-up rules used across assessments. Because of this central placement, modifying this script include directly changes how all scores are rolled up, and ensures a consistent behavior system-wide.

Other script includes play different roles: a helper or utility set may support various operations, a roll-up trigger might orchestrate when roll-ups run, and an assessment strategy defines how assessments are evaluated, but they don’t encapsulate the core numeric aggregation logic. Therefore, the best place to adjust how roll-ups happen is the ComplianceScoreCalculator.