Questionnaire support in Exception Management via Smart Assessment

---
title: Questionnaire support in Exception Management via Smart Assessment
description: Configure advanced questionnaires as part of the exception management process using Smart Assessment. This enables Remediation Owners to provide more detailed context for Exception Requests and enables Approvers to configure conditional questions to gather information for informed decision making.
locale: en-US
canonical_url: https://www.servicenow.com/docs/r/australia/security-management/sem-smart-assessment-exp-management.html
release: australia
topic_type: concept
last_updated: "2026-09-10"
reading_time_minutes: 1
breadcrumb: [Exception Management Overview, Use, Unified Security Exposure Management, Security Operations]
---

# Questionnaire support in Exception Management via Smart Assessment

Configure advanced questionnaires as part of the exception management process using Smart Assessment. This enables Remediation Owners to provide more detailed context for Exception Requests and enables Approvers to configure conditional questions to gather information for informed decision making.

## Roles Required

**Smart Assessment Template Reader**: **sn\_vul\_cmn.smart\_assessment\_template\_manager** \(Vulnerability admin and Template reader\) enables admins to create and edit templates.

**Smart Assessment actor**: **sn\_vul\_cmn.smart\_assessment\_actor** enables you \(Remediation Owners and Admins\) to fill out the questionnaires/assessments.

**Smart Assessment reader**: **sn\_vul\_cmn.smart\_assessment\_reader** enables you \(Approver\) to read the submitted questionnaire responses.

Pre-requisite: The smart assessment plug-ins must be installed as the Smart Assessment is a dependency.

You can configure questionnaires as part of the Exception Management process using Smart Assessment. It enables Vulnerability Admins/Manager to configure conditional questions to gather the right information needed for informed decision-making, while enabling Remediation Owners to provide more detailed context for exception requests. This enhances collaboration between the Vulnerability Management and Remediation teams by streamlining the approval process and ensuring clarity and completeness of exception justifications.

In the **Exception Management Configuration** screen from any of the four options- **Vulnerability Response**, **Application Vulnerability Response**, **Container Vulnerability Response**, and **Configuration Compliance** you can select the Assessment for Compensating Control, request exception and false positive records.

You can use the **Smart Assessment** to manage the Questionnaires in Security Exposure Management Workspace.

Templates can be accessed/edited by the Smart Assessment Template Reader: **sn\_vul\_cmn.smart\_assessment\_template\_manager**.

You can also define conditional questionnaire configurations using the **Questionnaire Configuration** table \(sn\_sec\_exception\_questionnaire\_config\). This enables administrators to associate distinct questionnaires with specific approval rule types \(deferral requests, compensating control management, or false positive\) and define conditions to control which questionnaire appears for a given finding or remediation task. When multiple configurations exist, the one with the lowest order value is selected for matching records. See [Questionnaire Configuration form fields](https://raw.githubusercontent.com/ServiceNow/ServiceNowDocs/australia/markdown/australia/security-management/sem-compensating-controls-approval-rule.md).