Create New Contractual arrangement form
On the Create New Contractual arrangement form, fill in the fields. For each contract, a separate form would be required.
Create New Contractual arrangement form
| Field | Description |
|---|---|
| Contractual arrangement | |
| Contract number | Unique identifier number for the contractual arrangement, for example, CNTR0009002. This field is auto-filled. |
| Contractual arrangement reference number | Internal reference number of the contractual arrangement assigned by the financial entity. It is used to identify the contractual arrangement between the financial entity and the direct ICT third-party service provider. |
| Name | Name and short description of the contract. |
| Type of contractual arrangement | Type of contractual arrangement that is identified by using one of the options in the corresponding drop-down list:- Standalone arrangement - Overarching arrangement - Subsequent or associated arrangement |
| State | State of the contract. For example, Draft state. |
| Contract model | Type of contract being created such as a Service or a Purchase Agreement. |
| Currency | Code of the currency that is used to report the amount. |
| Annual expense or estimated cost for the past year | Annual expense or estimated cost \(or intragroup transfer\) of the ICT service arrangement for the past year. |
| Description | Detailed description of the contract. |
| Entities signing contract to use service | |
| LEI of the entity signing the contractual arrangement | Legal Entity Identifier \(LEI\) code to identify the entity that would be signing the contractual arrangement, for example, LEI0000000000000000B. |
| Name of the entity | Name of the entity that would be signing the contractual arrangement, for example, ACME NA. |
| Entities making use of services | |
| LEI of the entity making use of the ICT services | LEI of the entity making use of services, for example, LEI0000000000000000C. |
| Name of the entity | Name of the entity making use of services, for example, ACME SA. |
| Nature of the entity making use of the ICT services | Nature of the entity making use of services, for example, branch of a financial entity. |
| Identification code of the branch | Identification code of the branch making use of services, for example, ACMESAbranch2LEI. |
| Entities providing services | |
| LEI of the entity making use of the ICT services | LEI of the entity making use of services, for example, LEI0000000000000000C. |
| Name of the entity | Name of the entity providing services, for example, ACME AMERICAS. |
| Third parties signing contract to provide info | |
| Identification code of the ICT third-party service provider | Identification code of the ICT third-party service provider, for example, LEI0000000000EXTTPP2. |
| Type of code to identify the ICT third-party service provider | Type of code to identify the ICT third-party service provider, for example, LEI. |
| Name of the ICT third-party service provider | Name of the ICT third-party service provider, for example, Adobe. |
| Third-party engagements signing contract | |
| Identification code of the ICT third-party service provider | Identification code of the ICT third-party service provider, for example, LEI0000000000EXTTPE1. |
| Type of code to identify the ICT third-party service provider | Type of code to identify the ICT third-party service provider, for example, LEI. |
| Name of the ICT third-party service provider | Name of the ICT third-party engagement service provider, for example, Acer engagement 1. |
| Specific information | |
| Contractual arrangement reference number | Contractual arrangement reference number for the contract, for example, CNTR0009002. |
| LEI of the entity making use of the ICT service\(s\) | LEI of the entity making use of the ICT service\(s\), for example, LEI0000000000000000C. |
| Function identifier | Function as defined by the financial entity, for example, F3,F1. |
| Type of ICT services | Type of the ICT service used by the entity, for example, Computation, Data analysis. |
| Service provider type |
|
| Identification code of ICT third-party service provider | Code to identify the ICT third-party service provider, for example, LEI0000000000000000D. |
| Identification code of ICT third-party engagement service provider | Identification code of ICT third-party engagement service provider. |
| LEI of the entity providing ICT services | Entity providing ICT services using LEI, 20-character, alpha-numeric code based on the ISO 17442 standard, for example, LEI0000000000000000D. |
| Type of code to identify the ICT third-party service provider | Type of code that is to identify the ICT third-party service provider, for example, LEI. |
| Start date of the contractual arrangement | Date of entry into force of the contractual arrangement, for example, 2025-07-01. |
| End date of the contractual arrangement | End date as stipulated in the contractual arrangement, for example, 2028-07-01. |
| Reason of the termination or ending of the contractual arrangement | Reason for the termination or ending of the contractual arrangement. Available options are:- Termination not for cause: Expired and not renewed - Termination for cause: Provider in breach of applicable law, regulations or contractual provisions - Termination for cause: Identified impediments of the provider capable of altering the supported function - Termination for cause: Provider's weaknesses regarding the management and security of sensitive data or information - Termination: As requested by the competent authority - Other reasons for termination |
| Notice period for the financial entity making use of the ICT service\(s\) | Notice period for terminating the contractual arrangement by the financial entity making use of the ICT service\(s\) in a business-as-usual case. |
| Notice period for the ICT third-party service provider | Notice period for terminating the contractual arrangement by the direct ICT third-party service provider in a business-as-usual case. |
| Country of the governing law of the contractual arrangement | Country whose legal system oversees the contract. |
| Country of provision of the ICT services | Country where the ICT services are provided. |
| Storage of data | Option to specify if the ICT service is related to storage of data. Available options are:- Yes - No |
| Sensitiveness of the data stored by the ICT service provider | Option to identify the level of sensitiveness of the data stored or processed by the ICT service provider. Available options are:- Low - Medium - High |
| Level of reliance on the ICT service | Option to specify the level of reliance on the ICT service. Available options are:- Not significant - Low reliance - Material reliance - Full reliance |
| Intra-group contractual arrangements | |
| Contractual arrangement linked to this contractual arrangement | Contract number linked to this contractual arrangement, for example, CNTR0009004. |
| Name | Name of the intra-group contractual arrangements, for example, Staffing agency. |
| ICT service supply chains | |
| Number | ICT service supply chain number associated with the contract, for example, SCHAIN0001002. |
| Recipient of sub-contracted ICT services | Recipient of sub-contracted ICT services of the supply chain. It is the parent supplier. |
| Identification code of the recipient of sub-contracted ICT services | Identification code of the recipient of sub-contracted ICT services of the supply chain. This field is auto-filled. |
| Type of code to identify the recipient of sub-contracted ICT services | Type of code to identify the recipient of sub-contracted ICT services of the supply chain. This field is auto-filled. |
| Type of ICT services | Type of ICT service associated with the supply chain, for example, Data storage. |
| Contractual arrangement reference number | Contract number associated with the supply chain, for example, CNTR0009002. |
| Service provider type |
|
| LEI of the entity providing ICT services | Entity providing ICT services using LEI, 20-character, alpha-numeric code based on the ISO 17442 standard, for example, LEI0000000000000000D. |
| Identification code of ICT third-party service provider | Identification code of ICT third-party service provider, for example, LEI0000000000EXTTPP1. |
| Identification code of ICT third-party engagement service provider | Identification code of ICT third-party engagement service provider. |
| Type of code to identify the ICT third-party service provider | Type of code to identify ICT third-party service provider, for example, LEI. Starting with version 21.1.x, the field Type of code to identify the ICT third-party service provider is now updated to be a choice field in the Digital resilience third-party registers in the contract record. This update aligns the field with regulator-defined options for selecting identification systems when creating new providers. |
| Rank | Rank of the supply chain, for example, 1 or 2. |
| Assessment of the ICT service | |
| Name | Name of the assessment in the <first-name.last-name> format. |
| Description | Description for the assessment. |
| Number | Unique identification number for the assessment that will be generated by the application. For example, TPA0001001. This field is auto-filled. |
| Department | Department that the assessment belongs to. |
| Owner | Name of the owner for the assessment. |
| Business unit | Name of the business unit that is associated with the assessment. |
| Contract number | Unique identifier number for the contractual arrangement, for example, CNTR0009002. This field is auto-filled. |
| Contractual arrangement reference number | Contract number associated with the assessment, for example, CNTR0009002. |
| Service provider type |
|
| Identification code of ICT third-party service provider | Identification code of ICT third-party service provider, for example, LEI0000000000EXTTPP1. |
| Identification code of ICT third-party engagement service provider | Identification code of ICT third-party engagement service provider. |
| LEI of the entity providing ICT services | Entity providing ICT services using LEI, 20-character, alpha-numeric code based on the ISO 17442 standard, for example, LEI0000000000000000D. |
| Type of code to identify the ICT third-party service provider | Type of code to identify ICT third-party service provider, for example, LEI. |
| Type of ICT services | Type of ICT services, for example, Data analysis. |
| Substitutability of the ICT third-party service provider | Substitutability of the ICT third-party service provider. The following options are available:- Not substitutable - Easily substitutable - Medium complexity in terms of substitutability - Highly complex substitutability |
| Reason for the substitutability classification | Reason for the classification. |
| Is the ICT third party audited? | Option to specify if the ICT third party has been audited. Available options are:- Yes - No |
| Date of the last audit on the ICT third-party service provider | Date when the last audit was performed. |
| Existence of an exit plan | Availability of an exit plan. The following options are available:- Yes - No |
| Possibility of reintegration of the contracted ICT service | Choice to verify the feasibility of reincorporating the contracted ICT service. Available options are:- Easy - Difficult - Highly complex |
| Impact of discontinuing the ICT services | Choice to specify the impact of discontinuing the ICT services. Available options are:- Low - Medium - High - Assessment not performed |
| Are there alternative ICT third-party service providers identified? | Choice to indicate if any other ICT third-party service providers have been identified. Available options are:- Yes - No - Assessment not performed If you select the check box, then specify the following field value: Identification of alternative ICT TPP. |
| Identification of alternative ICT TPP | Supplementary details on the identification of alternative ICT third-party providers \(TPP\). |
Parent Topic:Create a contract and enhance digital resilience data