Create New Contractual arrangement form

  • Release version: Australia
  • Updated May 15, 2026
  • 9 minutes to read

    • On the Create New Contractual arrangement form, fill in the fields.

    Create New Contractual arrangement form

    Table 1. Create New Contractual arrangement form
    Field Description
    Contractual arrangement
    Contract number Unique identifier number for the contractual arrangement, for example, CNTR0009002. This field is auto-filled.
    Contractual arrangement reference number Internal reference number of the contractual arrangement assigned by the financial entity. It is used to identify the contractual arrangement between the financial entity and the direct ICT third-party service provider.
    Name Name and short description of the contract.
    Type of contractual arrangement Type of contractual arrangement that is identified by using one of the options in the corresponding drop-down list:
    • Standalone arrangement
    • Overarching arrangement
    • Subsequent or associated arrangement
    State State of the contract. For example, Draft state.
    Contract model Type of contract being created such as a Service or a Purchase Agreement.
    Currency Code of the currency that is used to report the amount.
    Note:
    The annual expense may be converted during report generation if currency conversion is enabled. If aggregation is enabled and all criteria are met, contract expenses may also be combined into a provider‑level total.
    Annual expense or estimated cost for the past year Annual expense or estimated cost (or intragroup transfer) of the ICT service arrangement for the past year.
    Note:
    The annual expense may be converted during report generation if currency conversion is enabled. If aggregation is enabled and all criteria are met, contract expenses may also be combined into a provider‑level total.
    Description Detailed description of the contract.
    Entities signing contract to use service
    LEI of the entity signing the contractual arrangement Legal Entity Identifier (LEI) code to identify the entity that would be signing the contractual arrangement, for example, LEI0000000000000000B.
    Name of the entity Name of the entity that would be signing the contractual arrangement, for example, ACME NA.
    Entities making use of services
    LEI of the entity making use of the ICT services LEI of the entity making use of services, for example, LEI0000000000000000C.
    Name of the entity Name of the entity making use of services, for example, ACME SA.
    Nature of the entity making use of the ICT services Nature of the entity making use of services, for example, branch of a financial entity.
    Identification code of the branch Identification code of the branch making use of services, for example, ACMESAbranch2LEI.
    Entities providing services
    LEI of the entity making use of the ICT services LEI of the entity making use of services, for example, LEI0000000000000000C.
    Name of the entity Name of the entity providing services, for example, ACME AMERICAS.
    Third parties signing contract to provide info
    Identification code of the ICT third-party service provider Identification code of the ICT third-party service provider, for example, LEI0000000000EXTTPP2.
    Type of code to identify the ICT third-party service provider Type of code to identify the ICT third-party service provider, for example, LEI.
    Name of the ICT third-party service provider Name of the ICT third-party service provider, for example, Adobe.
    Third-party engagements signing contract
    Identification code of the ICT third-party service provider Identification code of the ICT third-party service provider, for example, LEI0000000000EXTTPE1.
    Type of code to identify the ICT third-party service provider Type of code to identify the ICT third-party service provider, for example, LEI.
    Name of the ICT third-party service provider Name of the ICT third-party engagement service provider, for example, Acer engagement 1.
    Specific information
    Contractual arrangement reference number Contractual arrangement reference number for the contract, for example, CNTR0009002.
    LEI of the entity making use of the ICT service(s) LEI of the entity making use of the ICT service(s), for example, LEI0000000000000000C.
    Function identifier Function as defined by the financial entity, for example, F3,F1.
    Type of ICT services Type of the ICT service used by the entity, for example, Computation, Data analysis.
    Note:
    This field is part of the eight-field composite key used to detect duplicate Specific Information records. The combination of contract reference, entity using service, service provider, country of provision, function identifier, Type of ICT services, storage location, and processing location must be unique. When you save a Specific Information record, Rank 1 supply chain records are generated automatically from this value. If you update or remove the value, supply chain records are updated or deleted automatically.
    Service provider type
    • Third party: Selecting this option displays the following fields:
      • Identification code of ICT third-party service provider
      • Type of code to identify the ICT third-party service provider
    • Third-party engagement: Selecting this option displays the following fields:
      • Identification code of ICT third-party engagement service provider
      • Type of code to identify the ICT third-party engagement service provider
    • Legal entity: Selecting this option displays the LEI of the entity providing ICT services field.
    Identification code of ICT third-party service provider Code to identify the ICT third-party service provider, for example, LEI0000000000000000D.
    Identification code of ICT third-party engagement service provider Identification code of ICT third-party engagement service provider.
    LEI of the entity providing ICT services Entity providing ICT services using LEI, 20-character, alpha-numeric code based on the ISO 17442 standard, for example, LEI0000000000000000D.
    Type of code to identify the ICT third-party service provider Type of code that is to identify the ICT third-party service provider, for example, LEI.
    Start date of the contractual arrangement Date of entry into force of the contractual arrangement, for example, 2025-07-01.
    End date of the contractual arrangement End date as stipulated in the contractual arrangement, for example, 2028-07-01.
    Reason of the termination or ending of the contractual arrangement Reason for the termination or ending of the contractual arrangement. Available options are:
    • Termination not for cause: Expired and not renewed
    • Termination for cause: Provider in breach of applicable law, regulations or contractual provisions
    • Termination for cause: Identified impediments of the provider capable of altering the supported function
    • Termination for cause: Provider's weaknesses regarding the management and security of sensitive data or information
    • Termination: As requested by the competent authority
    • Other reasons for termination
    Notice period for the financial entity making use of the ICT service(s) Notice period for terminating the contractual arrangement by the financial entity making use of the ICT service(s) in a business-as-usual case.
    Notice period for the ICT third-party service provider Notice period for terminating the contractual arrangement by the direct ICT third-party service provider in a business-as-usual case.
    Country of the governing law of the contractual arrangement Country whose legal system oversees the contract.
    Country of provision of the ICT services Country where the ICT services are provided.
    Storage of data Option to specify if the ICT service is related to storage of data. Available options are:
    • Yes
    • No
    Note:
    If you select No, the Location of the data at rest (storage) and Location of management of the data (processing) field values are automatically cleared.
    Sensitiveness of the data stored by the ICT service provider Option to identify the level of sensitiveness of the data stored or processed by the ICT service provider. Available options are:
    • Low
    • Medium
    • High
    Level of reliance on the ICT service Option to specify the level of reliance on the ICT service. Available options are:
    • Not significant
    • Low reliance
    • Material reliance
    • Full reliance
    Intra-group contractual arrangements
    Contractual arrangement linked to this contractual arrangement Contract number linked to this contractual arrangement, for example, CNTR0009004.
    Name Name of the intra-group contractual arrangements, for example, Staffing agency.
    ICT service supply chains
    Number ICT service supply chain number associated with the contract, for example, SCHAIN0001002.
    Recipient of sub-contracted ICT services Recipient of sub-contracted ICT services of the supply chain. It is the parent supplier.
    Identification code of the recipient of sub-contracted ICT services Identification code of the recipient of sub-contracted ICT services of the supply chain. This field is auto-filled.
    Type of code to identify the recipient of sub-contracted ICT services Type of code to identify the recipient of sub-contracted ICT services of the supply chain. This field is auto-filled.
    Type of ICT services Type of ICT service associated with the supply chain, for example, Data storage.
    Contractual arrangement reference number Contract number associated with the supply chain, for example, CNTR0009002.
    Service provider type
    • Third party: Selecting this option displays the following fields:
      • Identification code of ICT third-party service provider
      • Type of code to identify the ICT third-party service provider
    • Third-party engagement: Selecting this option displays the following fields:
      • Identification code of ICT third-party engagement service provider
      • Type of code to identify the ICT third-party engagement service provider
    • Legal entity: Selecting this option displays the LEI of the entity providing ICT services field.
    LEI of the entity providing ICT services Entity providing ICT services using LEI, 20-character, alpha-numeric code based on the ISO 17442 standard, for example, LEI0000000000000000D.
    Identification code of ICT third-party service provider Identification code of ICT third-party service provider, for example, LEI0000000000EXTTPP1.
    Identification code of ICT third-party engagement service provider Identification code of ICT third-party engagement service provider.
    Type of code to identify the ICT third-party service provider Type of code to identify ICT third-party service provider, for example, LEI.
    Rank Rank of the supply chain, for example, 1 or 2.
    Assessment of the ICT service
    Name Name of the assessment in the <first-name.last-name> format.
    Description Description for the assessment.
    Number Unique identification number for the assessment that will be generated by the application. For example, TPA0001001. This field is auto-filled.
    Department Department that the assessment belongs to.
    Owner Name of the owner for the assessment.
    Business unit Name of the business unit that is associated with the assessment.
    Contract number Unique identifier number for the contractual arrangement, for example, CNTR0009002. This field is auto-filled.
    Contractual arrangement reference number Contract number associated with the assessment, for example, CNTR0009002.
    Service provider type
    • Third party: Selecting this option displays the following fields:
      • Identification code of ICT third-party service provider
      • Type of code to identify the ICT third-party service provider
    • Third-party engagement: Selecting this option displays the following fields:
      • Identification code of ICT third-party engagement service provider
      • Type of code to identify the ICT third-party engagement service provider
    • Legal entity: Selecting this option displays the LEI of the entity providing ICT services field.
    Identification code of ICT third-party service provider Identification code of ICT third-party service provider, for example, LEI0000000000EXTTPP1.
    Identification code of ICT third-party engagement service provider Identification code of ICT third-party engagement service provider.
    LEI of the entity providing ICT services Entity providing ICT services using LEI, 20-character, alpha-numeric code based on the ISO 17442 standard, for example, LEI0000000000000000D.
    Type of code to identify the ICT third-party service provider Type of code to identify ICT third-party service provider, for example, LEI.
    Type of ICT services Type of ICT services, for example, Data analysis.
    Substitutability of the ICT third-party service provider Substitutability of the ICT third-party service provider. The following options are available:
    • Not substitutable
    • Easily substitutable
    • Medium complexity in terms of substitutability
    • Highly complex substitutability
    Reason for the substitutability classification Reason for the classification.
    Is the ICT third party audited? Option to specify if the ICT third party has been audited. Available options are:
    • Yes
    • No
    Date of the last audit on the ICT third-party service provider Date when the last audit was performed.
    Existence of an exit plan Availability of an exit plan. The following options are available:
    • Yes
    • No
    Possibility of reintegration of the contracted ICT service Choice to verify the feasibility of reincorporating the contracted ICT service. Available options are:
    • Easy
    • Difficult
    • Highly complex
    Impact of discontinuing the ICT services Choice to specify the impact of discontinuing the ICT services. Available options are:
    • Low
    • Medium
    • High
    • Assessment not performed
    Are there alternative ICT third-party service providers identified? Choice to indicate if any other ICT third-party service providers have been identified. Available options are:
    • Yes
    • No
    • Assessment not performed

    If you select the check box, then specify the following field value: Identification of alternative ICT TPP.
    Identification of alternative ICT TPP Supplementary details on the identification of alternative ICT third-party providers (TPP).