What is Smart Assessment Engine, how it is different from Classic Assessment ?

[Vinod54]

Overview

The Smart Assessment Engine (SAE) is ServiceNow’s next-gen framework for conducting intelligent, scalable, and automated assessments across modules like GRC, IRM, TPRM, and more. It replaces the classic assessment model with a more flexible, template-driven, and workflow-integrated approach 

---

Functional Comparison: Smart vs Classic Assessment

Template Design	Basic, limited logic	Rich UI with drag-and-drop, conditional visibility
Scoring	Manual or basic	Multi-level, normalized, automated scoring
Triggering	Manual or scripted	Flow Designer, API, UI Actions
Reusability	Low	High (template copy, modular design)
Integration	Limited	Seamless with workflows, sub flows and automation

---

Technical & Architectural Comparison

• Smart Assessment Engine uses:

  • sn_smart_asmt_template for templates
  • sn_smart_asmt_instance for assessment instances

  • sn_vdr_risk_asmt_m2m_tiering_sae_template for mapping template and assessment

  • Flow Designer actions for triggering
  • Domain separation and ACLs for secure multi-tenancy 

• Classic Assessment relies on:

  • asmt_metric_type, asmt_question, and asmt_instance
  • sn_vdr_risk_asmt_m2m_tiering_asmt_questionnaire for mapping 
  • Limited automation and integration capabilities

---

Smart Assessment for Controls & TPRM

• Controls: Used in Control Attestation workflows to validate control effectiveness.
• TPRM: Enables automated third-party risk assessments with scoring, issue generation, and event-driven rules

Once SAE is enabled for TPRM, it replaces the legacy engine and cannot be reverted 

---

Modules Utilizing Smart Assessment

• Integrated Risk Management (IRM)
• Policy and Compliance
• Third-Party Risk Management (TPRM)
• Field Service Management (FSM)
• Business Impact Analysis (BIA)
• Cyber Risk Institute (CRI) Assessments

---

Roadmap Highlights

• SAE is evolving into a core capability across all risk modules.
• Future releases will expand support for ESG, BCM, and AI-powered assessments 

---

Prerequisites

• ServiceNow version: Washington DC or later
• Install Smart Assessment Core from the ServiceNow Store 
• Assign roles: sn_smart_asmt.admin, vendor_risk_admin, etc.
• For TPRM, instance should be Yokohama Patch 6 or above
• Enable SAE via system properties (e.g., sn_vdr_risk_asmt.sae_enabled for TPRM) 

---

Implementation Steps

1. Install Smart Assessment Engine Core application from the Application Manager.
2. Configure templates using the Template Builder.
3. Define scoring models and visibility rules.
4. Integrate with workflows using Flow Designer.
5. Set up roles and access controls.
6. Test and publish templates.

Note: There are numerous plugins related to Smart Assessment engine for every feature. 

Example for Automation Enablement there is specific plugins to be installed. You can start with SAE core and as per your requirement you can install the other plugins. The full list is provided in the ServiceNow SAE implementation page. 

For TPRM, instance should be Yokohama Patch 6 or above. Also you should enable the system property to true for SAE TPRM enablement. 

---

Triggering Smart Assessments

• Use Flow Designer → Action: Trigger Smart Assessment
• Inputs include:
  • Template ID
  • Assessor(s)
  • Scope (record/table)
  • Due date, duration, etc.
• Can be triggered via:
  • Script
  • UI Action (custom)
  • Workflow Studio 

---

FAQs

Q: Can I migrate classic templates to SAE?
Yes, migration tools are available for metric types and templates.

Q: Is scripting required?
No, SAE is designed to be low-code, but scripting is optional for advanced use cases.

Q: Can I use SAE outside GRC?
Yes, SAE is modular and can be embedded in any workflow or app.

Q: What happens after enabling SAE in TPRM?
It becomes the default engine and cannot be reverted 

[Rafael Cardoso]

Great post but you left out the why. Why is it so important to adopt the new Smart Assessment?
They are consolidating all assessments under a single, unified engine and that’s where the Smart Assessment Engine (SAE) comes in. SAE offers a modern design (welcome to workspace), improved manageability, and greater flexibility compared to the classic attestation process, which relied on the legacy assessment engine. Adopting SAE means aligning with ServiceNow’s long-term platform vision, ensuring consistency across all assessment types, and benefiting from a superior user experience with stronger reporting and analytics

[Vinod54 · Accepted solution]

@Rafael Cardoso Focused more on what is SAE and its difference when comparing Classic Assessments. 
Good that you covered the why part. 

Will post more content on GRC. 

[LucL]

Hello Vinod54,

I appreciate your post this a great resume.

I have a question we would like to use SAE for BIA.

I create the SAE template  assign to a BIA template, but I cannot transfert or associate the scoring from the BIA template to the BIA RTO and RPO.

If you have any idea how we could transfert the scoring from the tamplate to the BIA RTO & RPO, we appreciate your help.

In the Legacy Assessment we use the Impact Categories to associate the scoring from the BIA template to the RTO or RPO, but I did not find how we could assign this transferet when we use Smart Assessment in a BIA template.

Regard