--- sourceDocument: Australia Governance, Risk, and Compliance sourceDocumentLink: https://www.servicenow.com/docs/r/australia/governance-risk-compliance Release : - australia ft:locale : - en-US ft:publication_title : - Australia Governance, Risk, and Compliance ft:clusterId : - grc bundleId : - grc workflow : - Technology --- # Create New ICT third-party service provider form # Create New ICT third-party service provider form {#ariaid-title1} Release version: Australia Updated September 10, 2026 ![](https://www.servicenow.com/docs/portal-asset/ico-clock) 3 minutes to read Summarize ![AI sparkle icon](https://servicenow.com/docs/portal-asset/ai-sparkle-icon) Summarized using AI This content was generated using new OpenAI-powered functionality. Results are provided on an as is basis and are not guaranteed to be accurate or complete. ## Summary of Create New ICT third-party service provider form The "Create New ICT third-party service provider" form enables ServiceNow customers to accurately capture and manage key identification and descriptive details about ICT third-party service providers. This form supports compliance with regulatory standards by aligning identification fields with regulator-defined systems and automating validation where applicable. Show full answer Show less ## Key Features * **Type of code and Identification code:** Customers select from standardized identification types (e.g., LEI, EUID, CRN, VAT, PNR, NIN) to uniquely identify the ICT third-party service provider. When LEI is selected, the system validates the code against the GLEIF database and auto-populates associated legal name and country fields, ensuring data accuracy. * **Additional Identification:** An optional secondary identification code can be entered using the same standardized options, supporting comprehensive provider identification. * **Type of person:** Specifies whether the provider is a legal entity (excluding individuals acting in a business capacity) or an individual acting in a business capacity, enabling proper categorization. * **Geographic and Naming Information:** Fields for country of headquarters, legal name, and commonly used brand or trading name allow clear identification of the provider's location and identity. * **Financial Details:** Currency and total annual expense or estimated cost fields help track financial exposure related to the ICT third-party service provider. Annual expenses may be aggregated automatically during reporting if contract criteria are met. * **Ultimate Third Party Identification:** Includes confirmation if the provider is the ultimate third party and, if not, fields to capture the identification code and type for the ultimate parent undertaking, facilitating hierarchical risk and compliance management. ## Practical Benefits for ServiceNow Customers * Ensures consistent and regulator-aligned identification of ICT third-party providers, supporting compliance and audit readiness. * Automated LEI validation and auto-population reduce manual errors and improve data integrity. * Capturing financial and hierarchical data enables comprehensive third-party risk and expense analysis. * The form supports both manual entry and automated population from related records, providing flexibility and efficiency in data management. On the Create New ICT third-party service provider form, fill in the fields. {#tprm-create-ICT-thirdparty-serv-prov-form__table_yrz_2qh_ddc__entry__2} | Field | Description | |-|-| | Type of code to identify the ICT third-party service provider | Type of code that is used to identify the ICT third-party service provider. Available options are: * LEI * EUID * Country Code_CRN: Company Registration Number * Country Code_VAT: Value-added Tax Identification number * Country Code_PNR: Passenger Name Record * Country Code_NIN: National Identification Number {#tprm-create-ICT-thirdparty-serv-prov-form__ul_kkl_dpw_ddc} Note: This field is a choice list aligned with regulator-defined identification systems. In some contexts, such as when populated from an associated third party or engagement, the field may be read-only and auto-populated. | | Country code of ICT third-party service provider | Country code associated with the ICT third-party service provider, based on the country where the identification code (such as CRN, VAT, PNR, or NIN) is issued. | | Code (CRN or VAT or PNR or NIN) of ICT third-party provider | Identification number of the ICT third-party service provider, corresponding to the selected country-specific identification type. Types include Company Registration Number (CRN), Value-added Tax Identification Number (VAT), Passenger Name Record (PNR), and National Identification Number (NIN). | | Identification code of ICT third-party service provider | Identification code of the ICT third-party service provider. Note: When Type of code is set to LEI, entering or updating this field triggers validation against the GLEIF database. The Legal name and Country of headquarters fields are then auto-populated. If you edit those fields to values that no longer match GLEIF data, an inline warning appears on the edited field. For more information, see [Validate Legal Entity Identifier codes for DORA reporting](https://www.servicenow.com/docs/PQXkTi5bEbCNKzjDx9WUgg "Review and resolve Legal Entity Identifier (LEI) validation results for DORA Register of Information reporting. LEI validation runs automatically during Plain-CSV Reporting Package generation and Microsoft Excel upload to verify that LEI codes in the digital resilience registers exist in the GLEIF database and have an active and issued status."). If Type of person is set to Legal person, excluding individual acting in a business capacity and Type of code is set to a value other than LEI or EUID, a warning appears when saving the record. This applies in the workspace and during Excel Upload. | | Type of additional identification code to identify the ICT service provider | Type of additional identification code to identify the ICT service provider. Available options are: * LEI : The last two digits of the LEI must be valid MOD 97-10 check digits per ISO 17442. The system rejects submissions with an invalid checksum. * EUID * Country Code_CRN: Company Registration Number * Country Code_VAT: Value-added Tax Identification number * Country Code_PNR: Passenger Name Record * Country Code_NIN: National Identification Number {#tprm-create-ICT-thirdparty-serv-prov-form__ul_ajf_stl_m2c} Note: This field is a choice list aligned with regulator-defined identification systems and may be read-only when auto-populated from related records. | | Additional identification code to identify the ICT third-party service provider | Additional identification code to identify the ICT third-party service provider. | | Type of person of the ICT third-party service provider | Type of person of the ICT third-party service provider. Available options are: * Legal person, excluding individual acting in a business capacity * Individual acting in a business capacity {#tprm-create-ICT-thirdparty-serv-prov-form__ul_vjd_dsh_ddc} | | Country of the ICT third-party service provider's headquarters | Country where the ICT third-party service provider's headquarters is located. | | Legal name of the ICT third-party service provider | Legal name of the ICT third-party service provider. | | Name of the ICT third-party service provider | Name of the ICT third-party service provider. This field can list a commonly used brand name or trading name that the ICT third-party service provider operates under, which might not exactly match the legal name. | | Currency | Currency of the country where the ICT third-party service provider's headquarters is located. | | Total annual expense or estimated cost of the ICT third-party service provider | Total annual expense or estimated cost of the ICT third-party service provider. Note: Provider‑level annual expense totals may be automatically aggregated during report generation when all contracts meet the required criteria. For more information, see [Currency conversion and third-party expense aggregation](https://www.servicenow.com/docs/wCCuA_CfAvFcvS0K4_DNAw "During report generation, the Register of Information (RoI) converts contract annual expenses to a base currency. It then aggregates totals per eligible third-party provider or engagement. The RoI is a regulatory reporting requirement under the Digital Operational Resilience Act (DORA) and is supported by the Digital Resilience Third-party Information Register application in the Vendor Management Workspace application."). | | Is the third party the ultimate third party? | Option to confirm whether the third party is the ultimate third party. Available options are: * Yes * No {#tprm-create-ICT-thirdparty-serv-prov-form__ul_d5f_2rh_ddc} | | Identification code of the ICT service provider's ultimate parent undertaking | Identification code of the ICT service provider's ultimate parent. | | Type of code to identify the ICT service provider's ultimate parent | Type of code that is used to identify the ICT service provider's ultimate parent. Available options are: * LEI * EUID * Country Code_CRN: Company Registration Number * Country Code_VAT: Value-added Tax Identification number * Country Code_PNR: Passenger Name Record * Country Code_NIN: National Identification Number {#tprm-create-ICT-thirdparty-serv-prov-form__ul_sts_grh_ddc} | [Table 1. Create New ICT third-party service provider form] {#tprm-create-ICT-thirdparty-serv-prov-form__table_yrz_2qh_ddc}