Create New Assessment of the ICT service
On the Create New Assessment of the ICT service form, fill in the fields.
| Field | Description |
|---|---|
| SysID | Unique 32-character GUID \(Globally Unique ID\) that identifies each assessment record in an instance. Provide this value if you want to update an existing record. Provide a value of -1 if you want to create a new record in the system. |
| Name | Name of the assessment in the <first-name.last-name> format. |
| Description | Description for the assessment. |
| Number | Unique identification number for the assessment that will be generated by the application. For example, TPA0001001. This field is auto-filled. |
| Owner | Name of the owner for the assessment. |
| Department | Department that the assessment belongs to. |
| Business unit | Name of the business unit that is associated with the assessment. |
| Digital resilience information | |
| Contract number | Auto-assigned number of the contract. |
| Is the ICT third party audited? | Option to specify if the ICT third party has been audited. Available options are:- Yes - No |
| Contractual arrangement reference number | Reference number used for the contractual arrangement. |
| Date of the last audit on the ICT third-party service provider | Date of the last audit for the ICT third-party service provider. |
| Service provider type | Option to select if the supplier is a third-party or third-party engagement. Available options are:- Third party - Third-party engagement - Legal entity If you select Third party, the Third party providing the service field is displayed. If you select Third-party engagement, the Third-party engagement providing the service field is displayed. |
| Existence of an exit plan | Choice to specify the availability of an exit plan. Available options are:- Yes - No |
| Identification code of the ICT third-party service provider | Unique identifier code for the ICT third-party service provider. This field is auto-filled. |
| Possibility of reintegration of the contracted ICT service | Choice to verify the feasibility of reincorporating the contracted ICT service. Available options are:- Easy - Difficult - Highly complex |
| Type of code to identify the ICT third-party service provider | Type of code intended to identify the ICT third-party service provider. This field is auto-filled. |
| Impact of discontinuing the ICT services | Choice to specify the impact of discontinuing the ICT services. Available options are:- Low - Medium - High - Assessment not performed |
| Type of ICT services | Category of the ICT services. Available options are:- ICT project management - ICT Development - ICT help desk and first level support - ICT security management services - Provision of data - Data analysis - ICT, facilities and hosting services (excluding Cloud services) - Computation - Non-Cloud Data storage - Telecom carrier - Network infrastructure - Hardware and physical devices - Software licensing (excluding SaaS) - ICT operation management (including maintenance) - ICT Consulting - ICT Risk management - Cloud services: IaaS - Cloud services: PaaS - Cloud services: SaaS |
| Are there alternative ICT third-party service providers identified? | Choice to indicate if any other ICT third-party service providers have been identified. Available options are:- Yes - No - Assessment not performed If you select the check box, then specify the following field value: Identification of alternative ICT TPP. |
| Identification of alternative ICT TPP | Supplementary details on the identification of alternative ICT third-party providers \(TPP\). |
| Substitutability of the ICT third-party service provider | Capability to interchange the ICT third-party service provider. Available options are:- Not substitutable - Easily substitutable - Medium complexity in terms of substitutability - Highly complex substitutability |
| Reason if the ICT third-party service provider is considered not substitutable or difficult to be substitutable | Factors that might make the ICT third-party service provider irreplaceable or challenging to replace. This option is displayed when you select Not substitutable in the Substitutability of the ICT third-party service provider field. Available options are:- None - Lack of real alternatives - Difficulties in migrating or reintegrating - Lack of real alternatives and difficulties in migrating or reintegrating |
Parent Topic:Create an assessment and enhance digital resilience data