---
sourceDocument: Australia Governance, Risk, and Compliance
sourceDocumentLink: https://servicenow-prod.fluidtopics.net/r/governance-risk-compliance

 Release :

    - australia

ft:locale :

    - en-US

ft:publication_title :

    - Australia Governance, Risk, and Compliance

ft:clusterId :

    - grc

bundleId :

    - grc

workflow :

    - Technology


---

# Create an assessment and enhance digital resilience data

# Create an assessment and enhance digital resilience data {#ariaid-title1}

* Release version: Australia
* 
* Updated March 12, 2026
* 
* ![](https://www.servicenow.com/docs/portal-asset/ico-clock) 1 minute to read

Create an assessment of the Information and Communication Technology (ICT) service in Digital resilience third-party registers using Third-party Risk Management. Add details such as the contractual arrangement reference number, identification code, and type of code for the ICT third-party service provider. You can then enhance its digital resilience information for compliance with DORA regulation.

## Before you begin

Role required: sn_vdr_risk_asmt.vendor_assessor

## About this task

It's required that you review your contracts and third parties annually. You can provide the following assessment details on the assessment form:

* Contractual reference number, which helps identify the following details:
  * Users of the contract
  * Providers of the contract
  * Other relevant details that are automatically pulled in
  {#tprm-drtp-reg-assmt__ul_svt_gdm_ddc}
* Audit information:
  * Has the third-party provider been audited?
  * When was the audit last conducted?
  {#tprm-drtp-reg-assmt__ul_ujq_kdm_ddc}
* Exit strategy details:
  * Existence of an exit plan
  * Possibility of integrating with the ICT service provider if terminated
  * Impact assessment of discontinuing the ICT service
  * Identification of any alternatives
  {#tprm-drtp-reg-assmt__ul_zsl_mdm_ddc}
{#tprm-drtp-reg-assmt__ul_ecp_fdm_ddc}

## Procedure

1. Navigate to WorkspacesVendor Management Workspace, select the list icon ![]() and then navigate to Digital resilience third-party registers.
2. Select Contracts and then select the contract record you want to associate an assessment record with.
3. Navigate to the Assessments of the ICT services related list and select New.
4. On the form, fill in the fields.  
   For descriptions of all these fields, see [Create New Contractual arrangement form](https://servicenow-prod.fluidtopics.net/KKPBnA2HEx2yovKd6eJMBw "On the Create New Contractual arrangement form, fill in the fields.").
5. Select Save.
6. To edit the assessment record, complete the following.
   1. Navigate to Assessments and select the check box of the record you want from the list.
   2. Select Edit and update the fields as required.
   3. Select Update.
   {#tprm-drtp-reg-assmt__substeps_j3v_ztr_zfc}
7. To export assessment records, complete the following.
   1. Navigate to Assessments and select the check box of the record you want from the list.
   2. Select Export.
   3. Select the File Type.  
      Available choices are:
      * Excel
      * CSV
      * JSON
      * PDF
      {#tprm-drtp-reg-assmt__ul_kxk_q5r_zfc}
   4. Select the Delivery Type.  
      Available choices are:
      * Download
      * Email
      {#tprm-drtp-reg-assmt__ul_olp_s5r_zfc}
   {#tprm-drtp-reg-assmt__substeps_zcc_qsr_zfc}
{#tprm-drtp-reg-assmt__steps_jky_zbn_ycc}

## What to do next

Once all details are captured, you can perform the following tasks:

* Download the information using the Microsoft Excel download feature. For more information, see [Create a Microsoft Excel download request](https://servicenow-prod.fluidtopics.net/mSgZh3NSKhCO0W33CsxeMA "Create a Microsoft Excel download request to download the records from the Digital resilience third-party registers using Third-party Risk Management for auditing purposes.").
* Upload updated records as needed. For more information, see [Update existing records in bulk](https://servicenow-prod.fluidtopics.net/ckd1BgvuG6e11c1Nw2QPaQ "Update existing records in bulk from the Digital resilience third-party registers using Third-party Risk Management.").
{#tprm-drtp-reg-assmt__ul_onh_qdm_ddc}

*[\>]: and then