Create an assessment and enhance digital resilience data
Create an assessment of the Information and Communication Technology (ICT) service in Digital resilience third-party registers. Add details such as the contractual arrangement reference number, identification code, and type of code for the ICT third-party service provider. You can then enhance its digital resilience information for compliance with DORA regulation.
Before you begin
Role required: sn_oper_res.manager
About this task
If you have the TPRM application, you can have third-party risk management assessments. If you don't have the TPRM application, you can still comply with the regulatory requirements by using the assessments table.
It's required that you review your contracts and third parties annually. You can provide the following assessment details on the assessment form:
- Contractual reference number, which helps identify the following details:
- Users of the contract
- Providers of the contract
- Other relevant details that are automatically pulled in
- Audit information:
- Has the third-party provider been audited?
- When was the audit last conducted?
- Exit strategy details:
- Existence of an exit plan
- Possibility of integrating with the ICT service provider if terminated
- Impact assessment of discontinuing the ICT service
- Identification of any alternatives
Procedure
-
Navigate to Workspaces > Operational Resilience Workspace > Digital resilience third-party registers > Contracts and select the desired contract.
-
In the Assessments of the ICT services tab on the Contract form, select New.
The Create New Assessment of the ICT service form is displayed.
-
On the form, fill in the fields.
-
Set up the digital resilience information for the assessments on the form.
For more information, see Create Assessment of the ICT service.
-
Select Save.
Every contract with specific information should have at least one assessment. If none exists, the system displays a warning instead of blocking the save.
-
To edit the assessment record, select it from the list and select Edit.
Step Description Update the fields Edit the fields as desired. Select Update. Update the record. -
To export the record, select Export.
|
Step |
Description |
|---|---|
|
Select File Type. |
File type selected for the export. Available choices are:- Excel
|
|
Select Delivery Type. |
Delivery type selected for the export. Available choices are:- Download |
|
Select Export. |
Action to export the record. |
What to do next
Once all details are captured, you can perform the following tasks:
-
Download the information using the Microsoft Excel download feature
-
Upload requests as needed
-
Create Assessment of the ICT service
On the Create Assessment of the ICT service form, fill in the fields.
Parent Topic:Using Digital resilience third-party registers
---
title: Create an assessment and enhance digital resilience data
description: Create an assessment of the Information and Communication Technology \(ICT\) service in Digital resilience third-party registers. Add details such as the contractual arrangement reference number, identification code, and type of code for the ICT third-party service provider. You can then enhance its digital resilience information for compliance with DORA regulation.
locale: en-US
canonical_url: https://www.servicenow.com/docs/r/governance-risk-compliance/create-drtp-reg-assmt.html
release: brazil
topic_type: task
last_updated: "2026-09-10"
reading_time_minutes: 2
breadcrumb: [Use, Maintaining Digital resilience third-party registers, Manage, Operational Resilience, Governance, Risk, and Compliance]
---
# Create an assessment and enhance digital resilience data
Create an assessment of the Information and Communication Technology \(ICT\) service in Digital resilience third-party registers. Add details such as the contractual arrangement reference number, identification code, and type of code for the ICT third-party service provider. You can then enhance its digital resilience information for compliance with DORA regulation.
## Before you begin
Role required: sn\_oper\_res.manager
## About this task
If you have the TPRM application, you can have third-party risk management assessments. If you don't have the TPRM application, you can still comply with the regulatory requirements by using the assessments table.
It's required that you review your contracts and third parties annually. You can provide the following assessment details on the assessment form:
- Contractual reference number, which helps identify the following details:
- Users of the contract
- Providers of the contract
- Other relevant details that are automatically pulled in
- Audit information:
- Has the third-party provider been audited?
- When was the audit last conducted?
- Exit strategy details:
- Existence of an exit plan
- Possibility of integrating with the ICT service provider if terminated
- Impact assessment of discontinuing the ICT service
- Identification of any alternatives
## Procedure
1. Navigate to **Workspaces** > **Operational Resilience Workspace** > **Digital resilience third-party registers** > **Contracts** and select the desired contract.
2. In the **Assessments of the ICT services** tab on the Contract form, select **New**.
The Create New Assessment of the ICT service form is displayed.
3. On the form, fill in the fields.
4. Set up the digital resilience information for the assessments on the form.
For more information, see [Create Assessment of the ICT service](https://raw.githubusercontent.com/ServiceNow/ServiceNowDocs/brazil/markdown/governance-risk-compliance/create-new-asmt-ict-service.md).
5. Select **Save**.
Every contract with specific information should have at least one assessment. If none exists, the system displays a warning instead of blocking the save.
6. To edit the assessment record, select it from the list and select **Edit**.
|Step|Description|
|----|-----------|
|**Update the fields**|Edit the fields as desired.|
|**Select __Update__.**|Update the record.|
7. To export the record, select **Export**.
<table id="choicetable_zpm_dmr_xcc"><thead><tr><th align="left" id="d208389e247">
Step
</th><th align="left" id="d208389e250">
Description
</th></tr></thead><tbody><tr><td id="d208389e256">
**Select __File Type__.**
</td><td>
File type selected for the export. Available choices are:- **Excel**
- **CSV**
- **JSON**
- **PDF**
</td></tr><tr><td id="d208389e286">
**Select __Delivery Type__.**
</td><td>
Delivery type selected for the export. Available choices are:- **Download**
- **Email**
</td></tr><tr><td id="d208389e308">
**Select __Export.__**
</td><td>
Action to export the record.
</td></tr></tbody>
</table>8. To delete the assessment record, select it from the list and select **Delete**.
## What to do next
Once all details are captured, you can perform the following tasks:
- Download the information using the Microsoft Excel download feature
- Upload requests as needed
- **[Create Assessment of the ICT service](https://raw.githubusercontent.com/ServiceNow/ServiceNowDocs/brazil/markdown/governance-risk-compliance/create-new-asmt-ict-service.md)**
On the Create Assessment of the ICT service form, fill in the fields.
**Parent Topic:**[Using Digital resilience third-party registers](https://raw.githubusercontent.com/ServiceNow/ServiceNowDocs/brazil/markdown/governance-risk-compliance/using-dg-registers.md)
| title | Create an assessment and enhance digital resilience data |
| description | Create an assessment of the Information and Communication Technology \(ICT\) service in Digital resilience third-party registers. Add details such as the contractual arrangement reference number, identification code, and type of code for the ICT third-party service provider. You can then enhance its digital resilience information for compliance with DORA regulation. |
| locale | en-US |
| canonical_url | https://www.servicenow.com/docs/r/governance-risk-compliance/create-drtp-reg-assmt.html |
| release | brazil |
| topic_type | task |
| last_updated | 2026-09-10 |
| reading_time_minutes | 2 |
| breadcrumb | UseMaintaining Digital resilience third-party registersManageOperational ResilienceGovernanceRiskand Compliance |