What is Smart Assessment Engine, how it is different from Classic Assessment ?

[Vinod54]

Overview

The Smart Assessment Engine (SAE) is ServiceNow’s next-gen framework for conducting intelligent, scalable, and automated assessments across modules like GRC, IRM, TPRM, and more. It replaces the classic assessment model with a more flexible, template-driven, and workflow-integrated approach 

---

Functional Comparison: Smart vs Classic Assessment

Template Design	Basic, limited logic	Rich UI with drag-and-drop, conditional visibility
Scoring	Manual or basic	Multi-level, normalized, automated scoring
Triggering	Manual or scripted	Flow Designer, API, UI Actions
Reusability	Low	High (template copy, modular design)
Integration	Limited	Seamless with workflows, sub flows and automation

---

Technical & Architectural Comparison

• Smart Assessment Engine uses:

  • sn_smart_asmt_template for templates
  • sn_smart_asmt_instance for assessment instances

  • sn_vdr_risk_asmt_m2m_tiering_sae_template for mapping template and assessment

  • Flow Designer actions for triggering
  • Domain separation and ACLs for secure multi-tenancy 

• Classic Assessment relies on:

  • asmt_metric_type, asmt_question, and asmt_instance
  • sn_vdr_risk_asmt_m2m_tiering_asmt_questionnaire for mapping 
  • Limited automation and integration capabilities

---

Smart Assessment for Controls & TPRM

• Controls: Used in Control Attestation workflows to validate control effectiveness.
• TPRM: Enables automated third-party risk assessments with scoring, issue generation, and event-driven rules

Once SAE is enabled for TPRM, it replaces the legacy engine and cannot be reverted 

---

Modules Utilizing Smart Assessment

• Integrated Risk Management (IRM)
• Policy and Compliance
• Third-Party Risk Management (TPRM)
• Field Service Management (FSM)
• Business Impact Analysis (BIA)
• Cyber Risk Institute (CRI) Assessments

---

Roadmap Highlights

• SAE is evolving into a core capability across all risk modules.
• Future releases will expand support for ESG, BCM, and AI-powered assessments 

---

Prerequisites

• ServiceNow version: Washington DC or later
• Install Smart Assessment Core from the ServiceNow Store 
• Assign roles: sn_smart_asmt.admin, vendor_risk_admin, etc.
• For TPRM, instance should be Yokohama Patch 6 or above
• Enable SAE via system properties (e.g., sn_vdr_risk_asmt.sae_enabled for TPRM) 

---

Implementation Steps

1. Install Smart Assessment Engine Core application from the Application Manager.
2. Configure templates using the Template Builder.
3. Define scoring models and visibility rules.
4. Integrate with workflows using Flow Designer.
5. Set up roles and access controls.
6. Test and publish templates.

Note: There are numerous plugins related to Smart Assessment engine for every feature. 

Example for Automation Enablement there is specific plugins to be installed. You can start with SAE core and as per your requirement you can install the other plugins. The full list is provided in the ServiceNow SAE implementation page. 

For TPRM, instance should be Yokohama Patch 6 or above. Also you should enable the system property to true for SAE TPRM enablement. 

---

Triggering Smart Assessments

• Use Flow Designer → Action: Trigger Smart Assessment
• Inputs include:
  • Template ID
  • Assessor(s)
  • Scope (record/table)
  • Due date, duration, etc.
• Can be triggered via:
  • Script
  • UI Action (custom)
  • Workflow Studio 

---

FAQs

Q: Can I migrate classic templates to SAE?
Yes, migration tools are available for metric types and templates.

Q: Is scripting required?
No, SAE is designed to be low-code, but scripting is optional for advanced use cases.

Q: Can I use SAE outside GRC?
Yes, SAE is modular and can be embedded in any workflow or app.

Q: What happens after enabling SAE in TPRM?
It becomes the default engine and cannot be reverted 

[saileshlank]

Great write-up

I am curious to know if SAE can be utilised across other workflows (ITSM or HR)?

Has any tried configuring them? Or is it a limitation