Create New Assessment of the ICT service

  • Release version: Australia
  • Updated March 12, 2026
  • 3 minutes to read

    • On the Create New Assessment of the ICT service form, fill in the fields.

    Table 1. Create New Assessment of the ICT service form
    Field Description
    SysID Unique 32-character GUID (Globally Unique ID) that identifies each assessment record in an instance. Provide this value if you want to update an existing record. Provide a value of -1 if you want to create a new record in the system.
    Name Name of the assessment in the <first-name.last-name> format.
    Description Description for the assessment.
    Number Unique identification number for the assessment that will be generated by the application. For example, TPA0001001. This field is auto-filled.
    Owner Name of the owner for the assessment.
    Department Department that the assessment belongs to.
    Business unit Name of the business unit that is associated with the assessment.
    Digital resilience information
    Contract number Auto-assigned number of the contract.
    Is the ICT third party audited? Option to specify if the ICT third party has been audited. Available options are:
    • Yes
    • No
    Contractual arrangement reference number Reference number used for the contractual arrangement.
    Date of the last audit on the ICT third-party service provider Date of the last audit for the ICT third-party service provider.
    Service provider type Option to select if the supplier is a third-party or third-party engagement. Available options are:
    • Third party
    • Third-party engagement
    • Legal entity

    If you select Third party, the Third party providing the service field is displayed.

    If you select Third-party engagement, the Third-party engagement providing the service field is displayed.
    Existence of an exit plan Choice to specify the availability of an exit plan. Available options are:
    • Yes
    • No
    Identification code of the ICT third-party service provider Unique identifier code for the ICT third-party service provider. This field is auto-filled.
    Possibility of reintegration of the contracted ICT service Choice to verify the feasibility of reincorporating the contracted ICT service. Available options are:
    • Easy
    • Difficult
    • Highly complex
    Type of code to identify the ICT third-party service provider Type of code intended to identify the ICT third-party service provider. This field is auto-filled.
    Impact of discontinuing the ICT services Choice to specify the impact of discontinuing the ICT services. Available options are:
    • Low
    • Medium
    • High
    • Assessment not performed
    Type of ICT services Category of the ICT services. Available options are:
    • ICT project management
    • ICT Development
    • ICT help desk and first level support
    • ICT security management services
    • Provision of data
    • Data analysis
    • ICT, facilities and hosting services (excluding Cloud services)
    • Computation
    • Non-Cloud Data storage
    • Telecom carrier
    • Network infrastructure
    • Hardware and physical devices
    • Software licensing (excluding SaaS)
    • ICT operation management (including maintenance)
    • ICT Consulting
    • ICT Risk management
    • Cloud services: IaaS
    • Cloud services: PaaS
    • Cloud services: SaaS
    Are there alternative ICT third-party service providers identified? Choice to indicate if any other ICT third-party service providers have been identified. Available options are:
    • Yes
    • No
    • Assessment not performed

    If you select the check box, then specify the following field value: Identification of alternative ICT TPP.
    Identification of alternative ICT TPP Supplementary details on the identification of alternative ICT third-party providers (TPP).
    Substitutability of the ICT third-party service provider Capability to interchange the ICT third-party service provider. Available options are:
    • Not substitutable
    • Easily substitutable
    • Medium complexity in terms of substitutability
    • Highly complex substitutability
    Reason if the ICT third-party service provider is considered not substitutable or difficult to be substitutable

    Factors that might make the ICT third-party service provider irreplaceable or challenging to replace. This option is displayed when you select Not substitutable in the Substitutability of the ICT third-party service provider field.

    Available options are:
    • None
    • Lack of real alternatives
    • Difficulties in migrating or reintegrating
    • Lack of real alternatives and difficulties in migrating or reintegrating