Create Contractual arrangement form
On the Create Contractual arrangement form, fill in the fields. For each contract, a separate form would be required.
Create Contractual arrangement form
|
Field |
Description |
|---|---|
|
Contractual arrangement | |
|
Contract |
Reference to the Contractual arrangement record that this Digital resilience information record belongs to. This field is auto-filled. |
|
Contract number |
Unique identifier number for the contractual arrangement, for example, CNTR0009002. This field is auto-filled. |
|
Contractual arrangement reference number |
Internal reference number of the contractual arrangement assigned by the financial entity. It is used to identify the contractual arrangement between the financial entity and the direct ICT third-party service provider. |
|
Name |
Name and short description of the contract. |
|
Type of contractual arrangement |
Type of contractual arrangement that is identified by using one of the options in the corresponding drop-down list:- Standalone arrangement
Note: If you set this field to Overarching arrangement, link at least one subsequent contract to it. Otherwise, the system displays a warning. |
|
State |
State of the contract. For example, Draft state. |
|
Contract model |
Type of contract being created such as a Service or a Purchase Agreement. |
|
Currency |
Code of the currency that is used to report the amount. |
|
Annual expense or estimated cost for the past year |
Annual expense or estimated cost (or intragroup transfer) of the ICT service arrangement for the past year. A value of 0 is accepted for this field. |
|
Description |
Detailed description of the contract. |
|
Entities signing contract to use service | |
|
LEI of the entity signing the contractual arrangement |
Legal Entity Identifier (LEI) code to identify the entity that would be signing the contractual arrangement, for example, LEI0000000000000000B. |
|
Name of the entity |
Name of the entity that would be signing the contractual arrangement, for example, ACME NA. |
|
Entities making use of services | |
|
LEI of the entity making use of the ICT services |
LEI of the entity making use of services, for example, LEI0000000000000000C. |
|
Name of the entity |
Name of the entity making use of services, for example, ACME SA. |
|
Nature of the entity making use of the ICT services |
Nature of the entity making use of services, for example, branch of a financial entity. |
|
Identification code of the branch |
Identification code of the branch making use of services, for example, ACMESAbranch2LEI. |
|
Entities providing services | |
|
LEI of the entity making use of the ICT services |
LEI of the entity making use of services, for example, LEI0000000000000000C. |
|
Name of the entity |
Name of the entity providing services, for example, ACME AMERICAS. |
|
Third parties signing contract to provide info | |
|
Identification code of the ICT third-party service provider |
Identification code of the ICT third-party service provider, for example, LEI0000000000EXTTPP2. |
|
Type of code to identify the ICT third-party service provider |
Type of code to identify the ICT third-party service provider, for example, LEI. If the code type is not LEI or EUID, the system displays a warning instead of blocking the record. |
|
Name of the ICT third-party service provider |
Name of the ICT third-party service provider, for example, Adobe. |
|
Third-party engagements signing contract | |
|
Identification code of the ICT third-party service provider |
Identification code of the ICT third-party service provider, for example, LEI0000000000EXTTPE1. |
|
Type of code to identify the ICT third-party service provider |
Type of code to identify the ICT third-party service provider, for example, LEI. |
|
Name of the ICT third-party service provider |
Name of the ICT third-party engagement service provider, for example, Acer engagement 1. |
|
Specific information | |
|
Contractual arrangement reference number |
Contractual arrangement reference number for the contract, for example, CNTR0009002. |
|
LEI of the entity making use of the ICT service(s) |
LEI of the entity making use of the ICT service(s), for example, LEI0000000000000000C. |
|
Function identifier |
Function as defined by the financial entity, for example, F3,F1. |
|
Type of ICT services |
Type of the ICT service used by the entity, for example, Computation, Data analysis. |
|
Service provider type |
|
|
Identification code of ICT third-party service provider |
Code to identify the ICT third-party service provider, for example, LEI0000000000000000D. |
|
Identification code of ICT third-party engagement service provider |
Identification code of ICT third-party engagement service provider. |
|
LEI of the entity providing ICT services |
Entity providing ICT services using LEI, 20-character, alpha-numeric code based on the ISO 17442 standard, for example, LEI0000000000000000D. |
|
Type of code to identify the ICT third-party service provider |
Type of code that is to identify the ICT third-party service provider, for example, LEI. |
|
Start date of the contractual arrangement |
Date of entry into force of the contractual arrangement, for example, 2025-07-01. |
|
End date of the contractual arrangement |
End date as stipulated in the contractual arrangement, for example, 2028-07-01. |
|
Reason of the termination or ending of the contractual arrangement |
Reason for the termination or ending of the contractual arrangement. Available options are:- Termination not for cause: Expired and not renewed
|
|
Notice period for the financial entity making use of the ICT service(s) |
Notice period for terminating the contractual arrangement by the financial entity making use of the ICT service(s) in a business-as-usual case. When the related function's Criticality or importance assessment field is set to Yes, this field becomes mandatory. |
|
Notice period for the ICT third-party service provider |
Notice period for terminating the contractual arrangement by the direct ICT third-party service provider in a business-as-usual case. When the related function's Criticality or importance assessment field is set to Yes, this field becomes mandatory. |
|
Country of the governing law of the contractual arrangement |
Country whose legal system oversees the contract. When the related function's Criticality or importance assessment field is set to Yes, this field becomes mandatory. |
|
Country of provision of the ICT services |
Country where the ICT services are provided. |
|
Storage of data |
Option to specify if the ICT service is related to storage of data. Available options are:- Yes
|
|
Sensitiveness of the data stored by the ICT service provider |
Option to identify the level of sensitiveness of the data stored or processed by the ICT service provider. Available options are:- Low
Note: When the related function's Criticality or importance assessment field is set to Yes and Storage of data is set to Yes, this field becomes mandatory. Select Medium or High. The system displays a warning if you select Low instead. |
|
Level of reliance on the ICT service |
Option to specify the level of reliance on the ICT service. Available options are:- Not significant
Note: When the related function's Criticality or importance assessment field is set to Yes, this field becomes mandatory. Select Material reliance or Full reliance. The system displays a warning if you select Not significant instead. |
|
Intra-group contractual arrangements | |
|
Contractual arrangement linked to this contractual arrangement |
Contract number linked to this contractual arrangement, for example, CNTR0009004. |
|
Name |
Name of the intra-group contractual arrangements, for example, Staffing agency. |
|
ICT service supply chains | |
|
Number |
ICT service supply chain number associated with the contract, for example, SCHAIN0001002. |
|
Recipient of sub-contracted ICT services |
Recipient of sub-contracted ICT services of the supply chain. It is the parent supplier. |
|
Identification code of the recipient of sub-contracted ICT services |
Identification code of the recipient of sub-contracted ICT services of the supply chain. This field is auto-filled. |
|
Type of code to identify the recipient of sub-contracted ICT services |
Type of code to identify the recipient of sub-contracted ICT services of the supply chain. This field is auto-filled. |
|
Type of ICT services |
Type of ICT service associated with the supply chain, for example, Data storage. |
|
Contractual arrangement reference number |
Contract number associated with the supply chain, for example, CNTR0009002. |
|
Service provider type |
|
|
LEI of the entity providing ICT services |
Entity providing ICT services using LEI, 20-character, alpha-numeric code based on the ISO 17442 standard, for example, LEI0000000000000000D. |
|
Identification code of ICT third-party service provider |
Identification code of ICT third-party service provider, for example, LEI0000000000EXTTPP1. |
|
Identification code of ICT third-party engagement service provider |
Identification code of ICT third-party engagement service provider. |
|
Type of code to identify the ICT third-party service provider |
Type of code to identify ICT third-party service provider, for example, LEI. Starting with version 21.1.x, the field Type of code to identify the ICT third-party service provider is a choice field in the Digital resilience third-party registers in the contract record. The field aligns with regulator-defined options for selecting identification systems when creating new providers. |
|
Rank |
Rank of the supply chain, for example, 1 or 2. |
|
Assessment of the ICT service | |
|
Name |
Name of the assessment in the <first-name.last-name> format. |
|
Description |
Description for the assessment. |
|
Number |
Unique identification number for the assessment that will be generated by the application. For example, TPA0001001. This field is auto-filled. |
|
Department |
Department that the assessment belongs to. |
|
Owner |
Name of the owner for the assessment. |
|
Business unit |
Name of the business unit that is associated with the assessment. |
|
Contract number |
Unique identifier number for the contractual arrangement, for example, CNTR0009002. This field is auto-filled. |
|
Contractual arrangement reference number |
Contract number associated with the assessment, for example, CNTR0009002. |
|
Service provider type |
|
|
Identification code of ICT third-party service provider |
Identification code of ICT third-party service provider, for example, LEI0000000000EXTTPP1. |
|
Identification code of ICT third-party engagement service provider |
Identification code of ICT third-party engagement service provider. |
|
LEI of the entity providing ICT services |
Entity providing ICT services using LEI, 20-character, alpha-numeric code based on the ISO 17442 standard, for example, LEI0000000000000000D. |
|
Type of code to identify the ICT third-party service provider |
Type of code to identify ICT third-party service provider, for example, LEI. |
|
Type of ICT services |
Type of ICT services, for example, Data analysis. |
|
Substitutability of the ICT third-party service provider |
Substitutability of the ICT third-party service provider. The following options are available:- Not substitutable
|
|
Reason for the substitutability classification |
Reason for the classification. |
|
Is the ICT third party audited? |
Option to specify if the ICT third party has been audited. Available options are:- Yes
|
|
Date of the last audit on the ICT third-party service provider |
Date when the last audit was performed. |
|
Existence of an exit plan |
Availability of an exit plan. The following options are available:- Yes
Note: When the related function's Criticality or importance assessment field is set to Yes, select Yes. The system displays a warning during CSV download if you select No instead. |
|
Possibility of reintegration of the contracted ICT service |
Choice to verify the feasibility of reincorporating the contracted ICT service. Available options are:- Easy
|
|
Impact of discontinuing the ICT services |
Choice to specify the impact of discontinuing the ICT services. Available options are:- Low
|
|
Are there alternative ICT third-party service providers identified? |
Choice to indicate if any other ICT third-party service providers have been identified. Available options are:- Yes
If you select the check box, then specify the following field value: Identification of alternative ICT TPP. |
|
Identification of alternative ICT TPP |
Supplementary details on the identification of alternative ICT third-party providers (TPP). |
---
title: Create Contractual arrangement form
description: On the Create Contractual arrangement form, fill in the fields. For each contract, a separate form would be required.
locale: en-US
canonical_url: https://www.servicenow.com/docs/r/australia/governance-risk-compliance/create-new-cont-arrange-form.html
release: australia
topic_type: reference
last_updated: "2026-09-10"
reading_time_minutes: 10
breadcrumb: [Create a contract and enhance digital resilience data, Use, Maintaining Digital resilience third-party registers, Manage, Operational Resilience, Governance, Risk, and Compliance]
---
# Create Contractual arrangement form
On the Create Contractual arrangement form, fill in the fields. For each contract, a separate form would be required.
## Create Contractual arrangement form
<table id="table_dxf_lyp_zfc"><thead><tr><th>
Field
</th><th>
Description
</th></tr></thead><tbody><tr><td class="sub-head" colspan="2">
Contractual arrangement
</td></tr><tr><td>
Contract
</td><td>
Reference to the Contractual arrangement record that this Digital resilience information record belongs to. This field is auto-filled.
</td></tr><tr><td>
Contract number
</td><td>
Unique identifier number for the contractual arrangement, for example, CNTR0009002. This field is auto-filled.
</td></tr><tr><td>
Contractual arrangement reference number
</td><td>
Internal reference number of the contractual arrangement assigned by the financial entity. It is used to identify the contractual arrangement between the financial entity and the direct ICT third-party service provider.
</td></tr><tr><td>
Name
</td><td>
Name and short description of the contract.
</td></tr><tr><td>
Type of contractual arrangement
</td><td>
Type of contractual arrangement that is identified by using one of the options in the corresponding drop-down list:- **Standalone arrangement**
- **Overarching arrangement**
- **Subsequent or associated arrangement**
**Note:** If you set this field to **Overarching arrangement**, link at least one subsequent contract to it. Otherwise, the system displays a warning.
</td></tr><tr><td>
State
</td><td>
State of the contract. For example, Draft state.
</td></tr><tr><td>
Contract model
</td><td>
Type of contract being created such as a Service or a Purchase Agreement.
</td></tr><tr><td>
Currency
</td><td>
Code of the currency that is used to report the amount.
</td></tr><tr><td>
Annual expense or estimated cost for the past year
</td><td>
Annual expense or estimated cost \(or intragroup transfer\) of the ICT service arrangement for the past year.
A value of 0 is accepted for this field.
</td></tr><tr><td>
Description
</td><td>
Detailed description of the contract.
</td></tr><tr><td class="sub-head" colspan="2">
Entities signing contract to use service
</td></tr><tr><td>
LEI of the entity signing the contractual arrangement
</td><td>
Legal Entity Identifier \(LEI\) code to identify the entity that would be signing the contractual arrangement, for example, LEI0000000000000000B.
</td></tr><tr><td>
Name of the entity
</td><td>
Name of the entity that would be signing the contractual arrangement, for example, ACME NA.
</td></tr><tr><td class="sub-head" colspan="2">
Entities making use of services
</td></tr><tr><td>
LEI of the entity making use of the ICT services
</td><td>
LEI of the entity making use of services, for example, LEI0000000000000000C.
</td></tr><tr><td>
Name of the entity
</td><td>
Name of the entity making use of services, for example, ACME SA.
</td></tr><tr><td>
Nature of the entity making use of the ICT services
</td><td>
Nature of the entity making use of services, for example, branch of a financial entity.
</td></tr><tr><td>
Identification code of the branch
</td><td>
Identification code of the branch making use of services, for example, ACMESAbranch2LEI.
</td></tr><tr><td class="sub-head" colspan="2">
Entities providing services
</td></tr><tr><td>
LEI of the entity making use of the ICT services
</td><td>
LEI of the entity making use of services, for example, LEI0000000000000000C.
</td></tr><tr><td>
Name of the entity
</td><td>
Name of the entity providing services, for example, ACME AMERICAS.
</td></tr><tr><td class="sub-head" colspan="2">
Third parties signing contract to provide info
</td></tr><tr><td>
Identification code of the ICT third-party service provider
</td><td>
Identification code of the ICT third-party service provider, for example, LEI0000000000EXTTPP2.
</td></tr><tr><td>
Type of code to identify the ICT third-party service provider
</td><td>
Type of code to identify the ICT third-party service provider, for example, LEI.
If the code type is not LEI or EUID, the system displays a warning instead of blocking the record.
</td></tr><tr><td>
Name of the ICT third-party service provider
</td><td>
Name of the ICT third-party service provider, for example, Adobe.
</td></tr><tr><td class="sub-head" colspan="2">
Third-party engagements signing contract
</td></tr><tr><td>
Identification code of the ICT third-party service provider
</td><td>
Identification code of the ICT third-party service provider, for example, LEI0000000000EXTTPE1.
</td></tr><tr><td>
Type of code to identify the ICT third-party service provider
</td><td>
Type of code to identify the ICT third-party service provider, for example, LEI.
</td></tr><tr><td>
Name of the ICT third-party service provider
</td><td>
Name of the ICT third-party engagement service provider, for example, Acer engagement 1.
</td></tr><tr><td class="sub-head" colspan="2">
Specific information
</td></tr><tr><td>
Contractual arrangement reference number
</td><td>
Contractual arrangement reference number for the contract, for example, CNTR0009002.
</td></tr><tr><td>
LEI of the entity making use of the ICT service\(s\)
</td><td>
LEI of the entity making use of the ICT service\(s\), for example, LEI0000000000000000C.
</td></tr><tr><td>
Function identifier
</td><td>
Function as defined by the financial entity, for example, F3,F1.
</td></tr><tr><td>
Type of ICT services
</td><td>
Type of the ICT service used by the entity, for example, Computation, Data analysis.
</td></tr><tr><td>
Service provider type
</td><td>
- **Third party**: Selecting this option displays the following fields:
- Identification code of ICT third-party service provider
- Type of code to identify the ICT third-party service provider
- **Third-party engagement**: Selecting this option displays the following fields:
- Identification code of ICT third-party engagement service provider
- Type of code to identify the ICT third-party engagement service provider
- **Legal entity**: Selecting this option displays the LEI of the entity providing ICT services field.
</td></tr><tr><td>
Identification code of ICT third-party service provider
</td><td>
Code to identify the ICT third-party service provider, for example, LEI0000000000000000D.
</td></tr><tr><td>
Identification code of ICT third-party engagement service provider
</td><td>
Identification code of ICT third-party engagement service provider.
</td></tr><tr><td>
LEI of the entity providing ICT services
</td><td>
Entity providing ICT services using LEI, 20-character, alpha-numeric code based on the ISO 17442 standard, for example, LEI0000000000000000D.
</td></tr><tr><td>
Type of code to identify the ICT third-party service provider
</td><td>
Type of code that is to identify the ICT third-party service provider, for example, LEI.
</td></tr><tr><td>
Start date of the contractual arrangement
</td><td>
Date of entry into force of the contractual arrangement, for example, 2025-07-01.
</td></tr><tr><td>
End date of the contractual arrangement
</td><td>
End date as stipulated in the contractual arrangement, for example, 2028-07-01.
</td></tr><tr><td>
Reason of the termination or ending of the contractual arrangement
</td><td>
Reason for the termination or ending of the contractual arrangement. Available options are:- **Termination not for cause: Expired and not renewed**
- **Termination for cause: Provider in breach of applicable law, regulations or contractual provisions**
- **Termination for cause: Identified impediments of the provider capable of altering the supported function**
- **Termination for cause: Provider's weaknesses regarding the management and security of sensitive data or information**
- **Termination: As requested by the competent authority**
- **Other reasons for termination**
</td></tr><tr><td>
Notice period for the financial entity making use of the ICT service\(s\)
</td><td>
Notice period for terminating the contractual arrangement by the financial entity making use of the ICT service\(s\) in a business-as-usual case.
When the related function's **Criticality or importance assessment** field is set to **Yes**, this field becomes mandatory.
</td></tr><tr><td>
Notice period for the ICT third-party service provider
</td><td>
Notice period for terminating the contractual arrangement by the direct ICT third-party service provider in a business-as-usual case.
When the related function's **Criticality or importance assessment** field is set to **Yes**, this field becomes mandatory.
</td></tr><tr><td>
Country of the governing law of the contractual arrangement
</td><td>
Country whose legal system oversees the contract.
When the related function's **Criticality or importance assessment** field is set to **Yes**, this field becomes mandatory.
</td></tr><tr><td>
Country of provision of the ICT services
</td><td>
Country where the ICT services are provided.
</td></tr><tr><td>
Storage of data
</td><td>
Option to specify if the ICT service is related to storage of data. Available options are:- **Yes**
- **No**
</td></tr><tr><td>
Sensitiveness of the data stored by the ICT service provider
</td><td>
Option to identify the level of sensitiveness of the data stored or processed by the ICT service provider. Available options are:- **Low**
- **Medium**
- **High**
**Note:** When the related function's **Criticality or importance assessment** field is set to **Yes** and **Storage of data** is set to **Yes**, this field becomes mandatory. Select **Medium** or **High**. The system displays a warning if you select **Low** instead.
</td></tr><tr><td>
Level of reliance on the ICT service
</td><td>
Option to specify the level of reliance on the ICT service. Available options are:- **Not significant**
- **Low reliance**
- **Material reliance**
- **Full reliance**
**Note:** When the related function's **Criticality or importance assessment** field is set to **Yes**, this field becomes mandatory. Select **Material reliance** or **Full reliance**. The system displays a warning if you select **Not significant** instead.
</td></tr><tr><td class="sub-head" colspan="2">
Intra-group contractual arrangements
</td></tr><tr><td>
Contractual arrangement linked to this contractual arrangement
</td><td>
Contract number linked to this contractual arrangement, for example, CNTR0009004.
</td></tr><tr><td>
Name
</td><td>
Name of the intra-group contractual arrangements, for example, Staffing agency.
</td></tr><tr><td class="sub-head" colspan="2">
ICT service supply chains
</td></tr><tr><td>
Number
</td><td>
ICT service supply chain number associated with the contract, for example, SCHAIN0001002.
</td></tr><tr><td>
Recipient of sub-contracted ICT services
</td><td>
Recipient of sub-contracted ICT services of the supply chain. It is the parent supplier.
</td></tr><tr><td>
Identification code of the recipient of sub-contracted ICT services
</td><td>
Identification code of the recipient of sub-contracted ICT services of the supply chain. This field is auto-filled.
</td></tr><tr><td>
Type of code to identify the recipient of sub-contracted ICT services
</td><td>
Type of code to identify the recipient of sub-contracted ICT services of the supply chain. This field is auto-filled.
</td></tr><tr><td>
Type of ICT services
</td><td>
Type of ICT service associated with the supply chain, for example, Data storage.
</td></tr><tr><td>
Contractual arrangement reference number
</td><td>
Contract number associated with the supply chain, for example, CNTR0009002.
</td></tr><tr><td>
Service provider type
</td><td>
- **Third party**: Selecting this option displays the following fields:
- Identification code of ICT third-party service provider
- Type of code to identify the ICT third-party service provider
- **Third-party engagement**: Selecting this option displays the following fields:
- Identification code of ICT third-party engagement service provider
- Type of code to identify the ICT third-party engagement service provider
- **Legal entity**: Selecting this option displays the LEI of the entity providing ICT services field.
</td></tr><tr><td>
LEI of the entity providing ICT services
</td><td>
Entity providing ICT services using LEI, 20-character, alpha-numeric code based on the ISO 17442 standard, for example, LEI0000000000000000D.
</td></tr><tr><td>
Identification code of ICT third-party service provider
</td><td>
Identification code of ICT third-party service provider, for example, LEI0000000000EXTTPP1.
</td></tr><tr><td>
Identification code of ICT third-party engagement service provider
</td><td>
Identification code of ICT third-party engagement service provider.
</td></tr><tr><td>
Type of code to identify the ICT third-party service provider
</td><td>
Type of code to identify ICT third-party service provider, for example, LEI.
Starting with version 21.1.x, the field Type of code to identify the ICT third-party service provider is a choice field in the Digital resilience third-party registers in the contract record. The field aligns with regulator-defined options for selecting identification systems when creating new providers.
</td></tr><tr><td>
Rank
</td><td>
Rank of the supply chain, for example, 1 or 2.
</td></tr><tr><td class="sub-head" colspan="2">
Assessment of the ICT service
</td></tr><tr><td>
Name
</td><td>
Name of the assessment in the <first-name.last-name> format.
</td></tr><tr><td>
Description
</td><td>
Description for the assessment.
</td></tr><tr><td>
Number
</td><td>
Unique identification number for the assessment that will be generated by the application. For example, TPA0001001. This field is auto-filled.
</td></tr><tr><td>
Department
</td><td>
Department that the assessment belongs to.
</td></tr><tr><td>
Owner
</td><td>
Name of the owner for the assessment.
</td></tr><tr><td>
Business unit
</td><td>
Name of the business unit that is associated with the assessment.
</td></tr><tr><td>
Contract number
</td><td>
Unique identifier number for the contractual arrangement, for example, CNTR0009002. This field is auto-filled.
</td></tr><tr><td>
Contractual arrangement reference number
</td><td>
Contract number associated with the assessment, for example, CNTR0009002.
</td></tr><tr><td>
Service provider type
</td><td>
- **Third party**: Selecting this option displays the following fields:
- Identification code of ICT third-party service provider
- Type of code to identify the ICT third-party service provider
- **Third-party engagement**: Selecting this option displays the following fields:
- Identification code of ICT third-party engagement service provider
- Type of code to identify the ICT third-party engagement service provider
- **Legal entity**: Selecting this option displays the LEI of the entity providing ICT services field.
</td></tr><tr><td>
Identification code of ICT third-party service provider
</td><td>
Identification code of ICT third-party service provider, for example, LEI0000000000EXTTPP1.
</td></tr><tr><td>
Identification code of ICT third-party engagement service provider
</td><td>
Identification code of ICT third-party engagement service provider.
</td></tr><tr><td>
LEI of the entity providing ICT services
</td><td>
Entity providing ICT services using LEI, 20-character, alpha-numeric code based on the ISO 17442 standard, for example, LEI0000000000000000D.
</td></tr><tr><td>
Type of code to identify the ICT third-party service provider
</td><td>
Type of code to identify ICT third-party service provider, for example, LEI.
</td></tr><tr><td>
Type of ICT services
</td><td>
Type of ICT services, for example, Data analysis.
</td></tr><tr><td>
Substitutability of the ICT third-party service provider
</td><td>
Substitutability of the ICT third-party service provider. The following options are available:- Not substitutable
- Easily substitutable
- Medium complexity in terms of substitutability
- Highly complex substitutability
</td></tr><tr><td>
Reason for the substitutability classification
</td><td>
Reason for the classification.
</td></tr><tr><td>
Is the ICT third party audited?
</td><td>
Option to specify if the ICT third party has been audited. Available options are:- **Yes**
- **No**
</td></tr><tr><td>
Date of the last audit on the ICT third-party service provider
</td><td>
Date when the last audit was performed.
</td></tr><tr><td>
Existence of an exit plan
</td><td>
Availability of an exit plan. The following options are available:- Yes
- No
**Note:** When the related function's **Criticality or importance assessment** field is set to **Yes**, select **Yes**. The system displays a warning during CSV download if you select **No** instead.
</td></tr><tr><td>
Possibility of reintegration of the contracted ICT service
</td><td>
Choice to verify the feasibility of reincorporating the contracted ICT service. Available options are:- **Easy**
- **Difficult**
- **Highly complex**
</td></tr><tr><td>
Impact of discontinuing the ICT services
</td><td>
Choice to specify the impact of discontinuing the ICT services. Available options are:- **Low**
- **Medium**
- **High**
- **Assessment not performed**
</td></tr><tr><td>
Are there alternative ICT third-party service providers identified?
</td><td>
Choice to indicate if any other ICT third-party service providers have been identified. Available options are:- **Yes**
- **No**
- **Assessment not performed**
If you select the check box, then specify the following field value: **Identification of alternative ICT TPP**.
</td></tr><tr><td>
Identification of alternative ICT TPP
</td><td>
Supplementary details on the identification of alternative ICT third-party providers \(TPP\).
</td></tr></tbody>
</table>**Parent Topic:**[Create a contract and enhance digital resilience data](https://raw.githubusercontent.com/ServiceNow/ServiceNowDocs/australia/markdown/australia/governance-risk-compliance/create-drtp-reg-contract.md)
| title | Create Contractual arrangement form |
| description | On the Create Contractual arrangement form, fill in the fields. For each contract, a separate form would be required. |
| locale | en-US |
| canonical_url | https://www.servicenow.com/docs/r/australia/governance-risk-compliance/create-new-cont-arrange-form.html |
| release | australia |
| topic_type | reference |
| last_updated | 2026-09-10 |
| reading_time_minutes | 10 |
| breadcrumb | Create a contract and enhance digital resilience dataUseMaintaining Digital resilience third-party registersManageOperational ResilienceGovernanceRiskand Compliance |