Using Digital resilience third-party registers

Use the Digital resilience third-party registers application in the Operational Resilience Workspace to create, update, and track records of ICT third-party service providers.

When you launch the Digital resilience third-party registers application in the Operational Resilience Workspace, you can view the different functionalities that can be accessed from the application menu.

From the menu in the Digital resilience third-party registers, you can access the following items:

• Excel download/upload requests - Generate Plain-CSV reporting packages, Excel primary templates, and per-record-type download or upload requests.
• Legal entities - Register the financial entities that maintain the register of information.
• Branches - Register branches of legal entities.
• Functions - Register the business functions that consume ICT services.
• Third parties - Register ICT third-party service providers.
• Third-party engagements - Register engagements that bundle providers and subcontractors.
• Contracts - Register contractual arrangements and their Specific information, Intra-group, and ICT service supply chain sub-records.
• Supply chains - Register ICT service supply chain rows independently of a contract.
• Assessments - Register assessments of ICT services.

• Setup - Configure Entity types and Pillars used across the registers.

• Create a legal entity and enhance digital resilience data
  Create a legal entity record in Digital resilience third-party registers. You can then enhance its digital resilience information for compliance with DORA regulation.

• Create a branch and enhance digital resilience data
  Create a branch record in Digital resilience third-party registers. You can then enhance its digital resilience information for compliance with DORA regulation.
• Create a function and enhance digital resilience data
  Create a function record in Digital resilience third-party registers where you can configure details of the function such as function identifier, license activity, function name, criticality or importance assessment details, and so on. You can then enhance its digital resilience information for compliance with DORA regulation.
• Create a third party and enhance digital resilience data
  Create a third party record in Digital resilience third-party registers. Add the details of the third party company such as its name, address, phone number, vendor manager, and so on. You can then enhance its digital resilience information for compliance with DORA regulation.
• Create a third-party engagement and enhance digital resilience data
  Create a third-party engagement record in Digital resilience third-party registers. Add details of the third-party engagement such as name of the third party, its type, annual spend, engagement tier, and so on. You can then enhance its digital resilience information for compliance with DORA regulation.
• Create a contract and enhance digital resilience data
  Create a contract record in Digital resilience third-party registers where you add details of the contract such as vendor name, start and end dates, state, substate, and so on. You can then enhance its digital resilience information for compliance with DORA regulation.
• Create a supply chain and enhance digital resilience data
  Create an Information and Communication Technology (ICT) service supply chain record in Digital resilience third-party registers. Add details of the supply chain such as type of the ICT services, Legal Entity Identifier (LEI) of the entity that provides the ICT services, and so on. You can then enhance its digital resilience information for compliance with DORA regulation.
• Create an assessment and enhance digital resilience data
  Create an assessment of the Information and Communication Technology (ICT) service in Digital resilience third-party registers. Add details such as the contractual arrangement reference number, identification code, and type of code for the ICT third-party service provider. You can then enhance its digital resilience information for compliance with DORA regulation.
• Create Microsoft Excel download and upload request
  Create a Microsoft Excel upload and download request to upload and download the records from and into the Digital resilience third-party registers for auditing purposes.
• Currency conversion and third-party aggregation
  Beginning with Digital Operational Resilience Management (sn_dora_accel), version 22.x.x, currency conversion and third-party aggregation capabilities are supported for DORA reporting of third-party expenses. As a DORA application user, you can convert and aggregate contractual expenses from multiple currencies to a regulator-required designated base currency using automated daily exchange rates.
• Create records in bulk
  Create records in bulk from the Digital resilience third-party registers using Third-party Risk Management rather than creating one record at a time for single or multiple entities. You can save time and effort by working on multiple records at a time.
• Update existing records in bulk
  Update existing records in bulk from the Digital resilience third-party registers using Third-party Risk Management.
• Generate a Register of Information package
  Generate a register of information package. Use the CSV report option in the download page to generate regulator-ready Register of Information (RoI) packages.
• Validate Legal Entity Identifier codes for DORA reporting
  Review and resolve Legal Entity Identifier (LEI) validation results for DORA Register of Information reporting. LEI validation runs automatically during Plain-CSV Reporting Package generation and Microsoft Excel upload to verify that LEI codes in the digital resilience registers exist in the GLEIF database and have an active and issued status.

Parent Topic:Maintaining Digital resilience third-party registers