Back to Study Guides
Study guide
14 min read

How to pass CIS-ITSM in 2026

Domain weights, a 5-week study plan, the CIS-DF prerequisite you cannot skip, and the mistakes that cost people $225 retake fees. Everything you need to pass CIS-IT Service Management on the Zurich release.

What CIS-ITSM tests

CIS-ITSM is ServiceNow's certification for IT Service Management. It validates that you can configure, manage, and troubleshoot the four core ITSM modules: incident management, problem management, change management, and request management.

If you work in IT service delivery, you already live inside these modules. Incidents come in, you route them, resolve them, and close them. Problems get raised when the same incident keeps recurring. Changes go through approval boards before touching production. Requests flow through service catalogs with their own approval chains and fulfillment workflows.

The exam tests all of this. Not just "what is an incident" but how assignment rules route incidents to the right group, how SLA timers attach to records, how major incidents trigger a different workflow than standard ones, and how the priority matrix calculates priority from impact and urgency values.

CIS-ITSM is the third-most-searched CIS certification on ServiceNow's training site. The reason is straightforward: ITSM is the module that most ServiceNow implementations deploy first. It is the entry point for organizations moving from email-based ticketing to a structured platform. And it is the module where most new ServiceNow professionals spend their first year of work.

For anyone who already holds a Certified System Administrator (CSA) credential, CIS-ITSM is the natural next step. CSA covers platform fundamentals across all modules. CIS-ITSM goes deep on the four modules that make up everyday IT operations. The jump from CSA to CIS-ITSM is a jump from "I can configure the platform" to "I can architect the ITSM workflows that run on it."

What catches people off guard is how interconnected the modules are on the exam. A question about change management might require you to understand how a change record links back to the problem that triggered it, which in turn links to the incidents that exposed the underlying issue. ServiceNow tests the relationships between modules, not just individual module knowledge.

The exam also covers SLA management across all four modules. SLA definitions, SLA timelines, breach notifications, and the conditions that pause or restart SLA clocks appear throughout the test. If you have only configured SLAs for incidents, you will miss questions about SLAs on change requests and catalog tasks.

The CIS-DF prerequisite

Starting in 2026, you cannot register for CIS-ITSM without first passing CIS-Data Foundations. ServiceNow made CIS-DF a mandatory prerequisite for seven CIS certifications, and ITSM is one of them.

This is not optional. The registration system checks your certification history. If you do not have CIS-DF on your profile, the CIS-ITSM exam will not appear as an available booking option on Pearson VUE.

The good news: CIS-DF is free through June 30, 2026. ServiceNow is waiving the exam fee for your first attempt during the rollout period. After that date, CIS-DF costs $450 for a first attempt and $225 for a retake, just like every other CIS exam.

If you are reading this and planning to take CIS-ITSM, the sequence matters. Pass CIS-DF first while it is still free. Then move to CIS-ITSM. Doing it in the wrong order means you either wait (and risk the free window closing) or you pay $450 for a prerequisite that was available at no cost.

CIS-DF covers CMDB, CSDM, data governance, and the identification and reconciliation engine. It is a different exam from ITSM, but the CMDB knowledge it tests is directly relevant. Every incident, problem, change, and request record in ServiceNow connects to configuration items in the CMDB. Understanding how that data layer works makes you a better ITSM practitioner, not just a certified one.

For a full breakdown of the CIS-DF exam, read the CIS-DF study guide. The CIS-DF practice test has 470 questions covering all five DF domains.

The seven certifications that now require CIS-DF are: ITSM, Discovery, HAM, SAM, Service Mapping, SIR, and VR. If you already hold any of these, you must pass CIS-DF by December 31, 2026 or your existing certification expires.

Exam format and logistics

The CIS-ITSM exam has approximately 60 questions. You get 90 minutes to complete it. ServiceNow uses scaled scoring and does not publicly disclose the passing threshold. The exact cutoff varies by exam form.

Questions are multiple-choice. Some have a single correct answer. Others ask you to select two or three options. The multi-select questions are where most people lose marks, because there is no partial credit. If a question says "select two" and you get one right and one wrong, the entire question scores zero.

That scoring rule changes how you should study. For multi-select questions, you need to eliminate wrong options with confidence. Knowing three options are correct but being unsure about the fourth means you might get the question wrong even though you understood most of it.

The exam runs on the Pearson VUE platform. You can take it at a physical testing center or proctored online through the OnVUE app. Online proctoring requires a webcam, a clear desk, and no second monitor. The proctor will ask you to show your room before the exam begins.

The first attempt costs $450. Retakes cost $225. That retake fee matters more than most people realize. A quarter of CIS-ITSM candidates do not pass on their first attempt. If you are one of them, your total exam cost doubles before you even factor in study materials and time.

All questions target the Zurich release of ServiceNow. If you are studying from Xanadu or Washington documentation, some behaviors and UI elements will be different. Always check the release selector on docs.servicenow.com before trusting any documentation page. A correct answer on Xanadu can be a wrong answer on Zurich.

Domain breakdown and weights

ServiceNow splits CIS-ITSM into five domains. The published weight ranges tell you how much of your exam score each domain controls. Studying all five domains equally is a mistake. The weights are not equal, and your study time should not be either.

Domain What it covers Weight
Incident Management Incident lifecycle, priority matrix, assignment rules, major incidents, child incidents, communications 20-25%
Change Management Change types (standard, normal, emergency), CAB, risk assessment, change schedules, conflict detection 20-25%
Problem Management Problem lifecycle, known errors, workarounds, problem tasks, root cause analysis workflows 15-20%
Request Management Service catalog, record producers, approval workflows, catalog tasks, request item lifecycle 15-20%
IT Service Management Configuration SLA definitions, notifications, assignment rules, inactivity monitors, UI policies, global ITSM settings 15-20%

Incident Management and Change Management are the two heaviest domains. Together they account for 40 to 50% of your exam score. If you are short on time, these two domains should get the most attention.

The three remaining domains (Problem, Request, and ITSM Configuration) each carry 15 to 20%. They are not small enough to ignore. A weak score in any one of them can push you below the passing threshold, even if you ace incidents and changes.

The ITSM Configuration domain is the one candidates most often overlook. It does not map to a single ITSM module. Instead, it covers cross-cutting configuration that affects all four modules: SLA definitions, assignment rules, notifications, inactivity monitors, and UI policies. These are the platform mechanics that make ITSM work, and the exam tests whether you know how to set them up.

5-week study plan

This plan assumes 8 to 10 hours per week. That is roughly 90 minutes per day if you study on weekdays only. If you have more time, compress to 4 weeks. If you have less, stretch to 7 weeks. Do not skip the timed practice exams in week 5 regardless of your schedule.

Week 1: Incident Management fundamentals

Start with the highest-weighted domain. Learn the full incident lifecycle from New through Resolved and Closed. Study how the priority matrix calculates priority from impact and urgency. Understand how assignment rules route incidents to the correct group based on category, configuration item, or location. Set up a Personal Developer Instance (PDI) and create incidents through every state transition. Pay special attention to the major incident process: how major incidents differ from standard ones, how child incidents link to a parent, and how the major incident communications flow works. The exam tests both configuration knowledge and process understanding.

Week 2: Problem Management and root cause analysis

Move to problem management. Study the problem lifecycle from identification through root cause analysis to resolution. Understand the difference between a problem and a known error. A problem is an unknown root cause. A known error is a problem where the root cause has been identified but not yet fixed. Learn how workarounds are documented and linked to incidents so that service desk agents can apply temporary fixes while the underlying issue is being resolved. Study problem tasks and how they break a large investigation into assignable work units. Understand how RCA workflows drive the investigation process. The exam will test whether you know when a problem should be created from recurring incidents and how the problem-incident relationship works bidirectionally.

Week 3: Change Management

Change management shares the top weight with incidents. Study the three change types: standard changes (pre-approved, low-risk, repeatable), normal changes (require CAB review and approval), and emergency changes (bypass normal approval for urgent production fixes). Learn how the Change Advisory Board (CAB) process works in ServiceNow, including CAB workbench, CAB definitions, and how to schedule CAB meetings. Study the risk assessment process: how risk conditions evaluate change attributes to calculate risk scores, and how those scores determine the approval path. Understand change schedules, maintenance windows, and how conflict detection identifies overlapping changes that affect the same configuration items. Practice creating all three change types in your PDI and walking each through its approval workflow.

Week 4: Request Management and ITSM configuration

This week covers two domains. Start with request management: service catalog items, record producers, variable sets, catalog client scripts, and the request-item-task hierarchy. Understand how approval workflows attach to catalog items and how multi-level approvals work. Study catalog task generation rules and how fulfillment groups receive and complete work. Then shift to ITSM configuration topics that span all four modules: SLA definitions (when they attach to a record, what conditions pause them, how breach notifications fire), assignment rules and their evaluation order, inactivity monitors, UI policies that control form behavior, and notification configurations. These cross-cutting topics tie the four modules together.

Week 5: Full-length practice exams under timed conditions

Stop reading documentation. Start testing. Take a full 60-question practice exam with a 90-minute timer. No pausing, no looking things up. When you finish, review every wrong answer and identify which domain it belongs to. If you score below 70% in any single domain, go back to that domain's documentation before taking another test. Take at least two full-length tests before exam day. Your target is 80% on practice exams. Stress, unfamiliar question wording, and exam fatigue will cost you 5 to 10 points on the real exam. The margin from 80% to 70% is your safety net.

The CIS-ITSM practice test has 198 questions covering all five exam domains. Every question includes per-option explanations linked to official ServiceNow Zurich documentation. You see exactly why each option is correct or incorrect, with source references you can verify yourself.

The course costs $9.99 with the referral link below. That is lifetime access to all 198 questions, including any updates when ServiceNow releases new exam blueprints.

Get the 198-question practice test ($9.99)

5 mistakes that fail people

Underestimating change management complexity. Candidates who work primarily with incidents treat change management as "just another ticket type." It is not. Change management in ServiceNow has its own approval engine, risk calculation framework, scheduling system, and conflict detection logic. The CAB process alone involves CAB definitions, CAB workbench, attendee management, and agenda items. The exam asks detailed questions about how risk conditions evaluate, how change windows work, and what happens when two normal changes target the same CI during the same maintenance window. If you have not configured change management from scratch in a PDI, you are guessing on 20 to 25% of the exam.

Ignoring SLA configuration details. SLAs appear across all four ITSM modules, and the exam tests the mechanics of how they work. Candidates often know that SLAs exist but cannot answer questions about the specific conditions that attach an SLA to a record, what triggers a pause (and what does not), how retroactive start works, or how breach notifications are configured. The difference between an SLA definition, an SLA timeline, and a task SLA trips people up. SLA questions show up in the ITSM Configuration domain and also in domain-specific questions about incidents, changes, and requests. You will see them throughout the exam.

Not understanding the relationship between incidents, problems, and changes. The exam does not test these modules in isolation. Questions will describe a scenario where multiple incidents point to the same root cause and ask what should happen next. Other questions describe a problem resolution that requires a production change and ask how the records should be linked. If you study each module as a standalone topic, you will miss the questions that test how data flows between them. In a real ServiceNow environment, an incident creates a problem, the problem identifies a root cause, and the fix requires a change. The exam tests whether you understand that full chain.

Skipping request management catalog configuration. Request management feels simple because everyone has used a service catalog as an end user. But the exam tests the configuration side: how catalog items are built, how variable sets are shared across items, how catalog client scripts control form behavior, how approval workflows attach, and how catalog tasks are generated and routed. Candidates who rely on their experience as catalog users (rather than catalog builders) lose points on questions about record producers, order guides, and multi-row variable sets. Spend time building catalog items in your PDI. Consuming them is not the same as configuring them.

Never practicing under timed conditions. This mistake appears on every CIS study guide for a reason: it keeps failing people. Knowing the material and performing under a 90-minute time limit are two different skills. Multi-select questions require you to evaluate every option carefully, which takes longer than single-answer questions. A 60-question exam with several multi-select items leaves you about 90 seconds per question. If you have never worked under that constraint, your first experience with it should not be on exam day. Take at least two full-length timed tests before you book your Pearson VUE appointment.

The ITSM Plus One trend

Five years ago, holding CIS-ITSM made you stand out. Today, it is becoming table stakes. The ServiceNow ecosystem has grown, and the number of people with ITSM certification has grown with it. Standalone ITSM is getting commoditized.

What hiring managers and project leads look for now is ITSM plus a specialization. ITSM combined with GRC means you can handle both service operations and compliance frameworks. ITSM combined with SPM (Strategic Portfolio Management) means you understand how service delivery connects to project and demand management. ITSM combined with HRSD means you can extend IT service management patterns to HR case management and employee workflows.

The pattern is consistent across job postings: one foundational cert (usually ITSM or CSA) plus one specialized cert that positions you for a specific market. The specialized cert is what determines your rate, your project assignments, and your long-term career trajectory.

Getting CIS-ITSM is the right first move. It proves you understand the core platform. But do not stop there. Your next certification after ITSM should align with the kind of work you want to do for the next three to five years.

If you are not sure which specialization fits your background, the certification path guide breaks down every option by career track and market demand. And if you want to understand the financial return on certification investment, the ROI analysis covers salary data, contract rates, and the cost-benefit math.

The which certification first guide can help if you are deciding between ITSM and another CIS cert as your starting point.

Try free practice questions

The CIS-ITSM course page has free practice questions you can try right now. Each question shows per-option explanations after you answer, so you can see exactly why an option is correct or incorrect. No email required. No paywall. Scroll to the quiz section and start.

These free questions cover the same format as the full 198-question bank: multiple choice, multi-select, scenario-based. They will give you a feel for the difficulty level and the kind of reasoning the exam requires.

If you want to explore other ServiceNow certifications, the certification recommendation quiz asks about your role, experience, and goals, then suggests which cert to pursue first. The certification comparison table shows how CIS-ITSM compares to all 17 other ServiceNow certifications on difficulty, cost, demand, and prerequisites.

Where to go from here

Start with the official ServiceNow documentation at docs.servicenow.com. Filter by the Zurich release. Read the Incident Management, Problem Management, Change Management, and Service Catalog sections in full. These are not short reads, but the exam pulls directly from them.

Now Learning (ServiceNow's training platform) has free courses for ITSM fundamentals. The "ITSM Fundamentals" and "ITSM Implementation" paths cover the same material the exam tests, structured as video lessons with knowledge checks. They are worth completing if you prefer guided learning over raw documentation.

Set up a Personal Developer Instance at developer.servicenow.com. A PDI gives you a full ServiceNow environment where you can create incidents, configure assignment rules, build catalog items, set up SLA definitions, and walk through the change management process. Reading about configuration is useful. Doing it in a live instance is what makes it stick.

For practice questions, the CIS-ITSM practice test on Udemy has 198 questions with per-option explanations and source links to official Zurich documentation. At $9.99, you are spending 2.2% of what a single exam attempt costs, for a resource that covers every domain on the blueprint.

Remember the sequence: pass CIS-DF first (free through June 30, 2026), then sit CIS-ITSM. Doing it in the right order saves you $450 on the prerequisite and ensures you can register for ITSM without delays.

If you are already certified in CSA and looking at the broader certification landscape, the certification path guide maps out every route from CSA through the CIS and CAS certifications.

$450 exam. $225 retake. $9.99 practice test with 198 questions. That is 2.2% of one exam attempt.

Every question includes per-option explanations sourced from official ServiceNow Zurich documentation. You do not just learn the right answer. You learn why every other option is wrong.

Get the 198-question practice test ($9.99)

Get the free certification roadmap

A PDF with all 18 ServiceNow certifications, recommended order, and prerequisite chains. Yours for free.

LX
Written by Lucky X

ServiceNow certification practice tests used by 10,000+ students on Udemy. Every question includes explanations sourced from official ServiceNow documentation. Every practice test is written by a certified professional who passed the exam.

About Lucky X