Create an assessment and enhance digital resilience data

  • Release version: Washingtondc
  • Updated January 30, 2025
  • 1 minute to read

    • Create an assessment of the Information and Communication Technology (ICT) service in Digital resilience third-party registers using Third-party Risk Management. Add details such as the contractual arrangement reference number, identification code, and type of code for the ICT third-party service provider. You can then enhance its digital resilience information for compliance with DORA regulation.

    Before you begin

    Role required: sn_vdr_risk_asmt.vendor_assessor

    About this task

    It's required that you review your contracts and third parties annually. You can provide the following assessment details on the assessment form:
    • Contractual reference number, which helps identify the following details:
      • Users of the contract
      • Providers of the contract
      • Other relevant details that are automatically pulled in
    • Audit information:
      • Has the third-party provider been audited?
      • When was the audit last conducted?
    • Exit strategy details:
      • Existence of an exit plan
      • Possibility of integrating with the ICT service provider if terminated
      • Impact assessment of discontinuing the ICT service
      • Identification of any alternatives

    Procedure

    1. Navigate to Workspaces > Vendor Management Workspace, select the list icon (List icon.) and then navigate to Digital resilience third-party registers.
    2. Select Assessments and then create an assessment by selecting New.
    3. On the form, fill in the fields.
      For descriptions of all these fields, see Create New Assessment of the ICT service.
    4. Select Save.
    5. To edit the assessment record, select it from the list and select Edit.
      StepDescription
      Update the fields Edit the fields as desired.
      Select Update. Update the record.
    6. To export the assessment record, select Export.
      StepDescription
      Select File Type. File type selected for the export. Available choices are:
      • Excel
      • CSV
      • JSON
      • PDF
      Select Delivery Type. Delivery type selected for the export. Available choices are:
      • Download
      • Email
      Select Export. Action to export the record.

    What to do next

    Once all details are captured, you can perform the following tasks: