--- title: Create Contractual arrangement form description: On the Create Contractual arrangement form, fill in the fields. For each contract, a separate form would be required. locale: en-US canonical_url: https://www.servicenow.com/docs/r/australia/governance-risk-compliance/create-new-cont-arrange-form.html release: australia topic_type: reference last_updated: "2026-03-12" reading_time_minutes: 10 breadcrumb: [Create a contract and enhance digital resilience data, Using Digital resilience third-party registers, Maintaining Digital resilience third-party registers, Manage, Operational Resilience, Governance, Risk, and Compliance] --- # Create Contractual arrangement form On the Create Contractual arrangement form, fill in the fields. For each contract, a separate form would be required. ## Create Contractual arrangement form
| Field | Description |
|---|---|
| Contractual arrangement | |
| Contract number | Unique identifier number for the contractual arrangement, for example, CNTR0009002. This field is auto-filled. |
| Contractual arrangement reference number | Internal reference number of the contractual arrangement assigned by the financial entity. It is used to identify the contractual arrangement between the financial entity and the direct ICT third-party service provider. |
| Name | Name and short description of the contract. |
| Type of contractual arrangement | Type of contractual arrangement that is identified by using one of the options in the corresponding drop-down list:- **Standalone arrangement** - **Overarching arrangement** - **Subsequent or associated arrangement** **Note:** If you set this field to **Overarching arrangement**, link at least one subsequent contract to it. Otherwise, the system displays a warning. |
| State | State of the contract. For example, Draft state. |
| Contract model | Type of contract being created such as a Service or a Purchase Agreement. |
| Currency | Code of the currency that is used to report the amount. |
| Annual expense or estimated cost for the past year | Annual expense or estimated cost \(or intragroup transfer\) of the ICT service arrangement for the past year. A value of 0 is accepted for this field. |
| Description | Detailed description of the contract. |
| Entities signing contract to use service | |
| LEI of the entity signing the contractual arrangement | Legal Entity Identifier \(LEI\) code to identify the entity that would be signing the contractual arrangement, for example, LEI0000000000000000B. |
| Name of the entity | Name of the entity that would be signing the contractual arrangement, for example, ACME NA. |
| Entities making use of services | |
| LEI of the entity making use of the ICT services | LEI of the entity making use of services, for example, LEI0000000000000000C. |
| Name of the entity | Name of the entity making use of services, for example, ACME SA. |
| Nature of the entity making use of the ICT services | Nature of the entity making use of services, for example, branch of a financial entity. |
| Identification code of the branch | Identification code of the branch making use of services, for example, ACMESAbranch2LEI. |
| Entities providing services | |
| LEI of the entity making use of the ICT services | LEI of the entity making use of services, for example, LEI0000000000000000C. |
| Name of the entity | Name of the entity providing services, for example, ACME AMERICAS. |
| Third parties signing contract to provide info | |
| Identification code of the ICT third-party service provider | Identification code of the ICT third-party service provider, for example, LEI0000000000EXTTPP2. |
| Type of code to identify the ICT third-party service provider | Type of code to identify the ICT third-party service provider, for example, LEI. If the code type is not LEI or EUID, the system displays a warning instead of blocking the record. |
| Name of the ICT third-party service provider | Name of the ICT third-party service provider, for example, Adobe. |
| Third-party engagements signing contract | |
| Identification code of the ICT third-party service provider | Identification code of the ICT third-party service provider, for example, LEI0000000000EXTTPE1. |
| Type of code to identify the ICT third-party service provider | Type of code to identify the ICT third-party service provider, for example, LEI. |
| Name of the ICT third-party service provider | Name of the ICT third-party engagement service provider, for example, Acer engagement 1. |
| Specific information | |
| Contractual arrangement reference number | Contractual arrangement reference number for the contract, for example, CNTR0009002. |
| LEI of the entity making use of the ICT service\(s\) | LEI of the entity making use of the ICT service\(s\), for example, LEI0000000000000000C. |
| Function identifier | Function as defined by the financial entity, for example, F3,F1. |
| Type of ICT services | Type of the ICT service used by the entity, for example, Computation, Data analysis. |
| Service provider type | - **Third party**: Selecting this option displays the following fields: - Identification code of ICT third-party service provider - Type of code to identify the ICT third-party service provider - **Third-party engagement**: Selecting this option displays the following fields: - Identification code of ICT third-party engagement service provider - Type of code to identify the ICT third-party engagement service provider - **Legal entity**: Selecting this option displays the LEI of the entity providing ICT services field. |
| Identification code of ICT third-party service provider | Code to identify the ICT third-party service provider, for example, LEI0000000000000000D. |
| Identification code of ICT third-party engagement service provider | Identification code of ICT third-party engagement service provider. |
| LEI of the entity providing ICT services | Entity providing ICT services using LEI, 20-character, alpha-numeric code based on the ISO 17442 standard, for example, LEI0000000000000000D. |
| Type of code to identify the ICT third-party service provider | Type of code that is to identify the ICT third-party service provider, for example, LEI. |
| Start date of the contractual arrangement | Date of entry into force of the contractual arrangement, for example, 2025-07-01. |
| End date of the contractual arrangement | End date as stipulated in the contractual arrangement, for example, 2028-07-01. |
| Reason of the termination or ending of the contractual arrangement | Reason for the termination or ending of the contractual arrangement. Available options are:- **Termination not for cause: Expired and not renewed** - **Termination for cause: Provider in breach of applicable law, regulations or contractual provisions** - **Termination for cause: Identified impediments of the provider capable of altering the supported function** - **Termination for cause: Provider's weaknesses regarding the management and security of sensitive data or information** - **Termination: As requested by the competent authority** - **Other reasons for termination** |
| Notice period for the financial entity making use of the ICT service\(s\) | Notice period for terminating the contractual arrangement by the financial entity making use of the ICT service\(s\) in a business-as-usual case. When the related function's **Criticality or importance assessment** field is set to **Yes**, this field becomes mandatory. |
| Notice period for the ICT third-party service provider | Notice period for terminating the contractual arrangement by the direct ICT third-party service provider in a business-as-usual case. When the related function's **Criticality or importance assessment** field is set to **Yes**, this field becomes mandatory. |
| Country of the governing law of the contractual arrangement | Country whose legal system oversees the contract. When the related function's **Criticality or importance assessment** field is set to **Yes**, this field becomes mandatory. |
| Country of provision of the ICT services | Country where the ICT services are provided. |
| Storage of data | Option to specify if the ICT service is related to storage of data. Available options are:- **Yes** - **No** |
| Sensitiveness of the data stored by the ICT service provider | Option to identify the level of sensitiveness of the data stored or processed by the ICT service provider. Available options are:- **Low** - **Medium** - **High** **Note:** When the related function's **Criticality or importance assessment** field is set to **Yes** and **Storage of data** is set to **Yes**, this field becomes mandatory. Select **Medium** or **High**. The system displays a warning if you select **Low** instead. |
| Level of reliance on the ICT service | Option to specify the level of reliance on the ICT service. Available options are:- **Not significant** - **Low reliance** - **Material reliance** - **Full reliance** **Note:** When the related function's **Criticality or importance assessment** field is set to **Yes**, this field becomes mandatory. Select **Material reliance** or **Full reliance**. The system displays a warning if you select **Not significant** instead. |
| Intra-group contractual arrangements | |
| Contractual arrangement linked to this contractual arrangement | Contract number linked to this contractual arrangement, for example, CNTR0009004. |
| Name | Name of the intra-group contractual arrangements, for example, Staffing agency. |
| ICT service supply chains | |
| Number | ICT service supply chain number associated with the contract, for example, SCHAIN0001002. |
| Recipient of sub-contracted ICT services | Recipient of sub-contracted ICT services of the supply chain. It is the parent supplier. |
| Identification code of the recipient of sub-contracted ICT services | Identification code of the recipient of sub-contracted ICT services of the supply chain. This field is auto-filled. |
| Type of code to identify the recipient of sub-contracted ICT services | Type of code to identify the recipient of sub-contracted ICT services of the supply chain. This field is auto-filled. |
| Type of ICT services | Type of ICT service associated with the supply chain, for example, Data storage. |
| Contractual arrangement reference number | Contract number associated with the supply chain, for example, CNTR0009002. |
| Service provider type | - **Third party**: Selecting this option displays the following fields: - Identification code of ICT third-party service provider - Type of code to identify the ICT third-party service provider - **Third-party engagement**: Selecting this option displays the following fields: - Identification code of ICT third-party engagement service provider - Type of code to identify the ICT third-party engagement service provider - **Legal entity**: Selecting this option displays the LEI of the entity providing ICT services field. |
| LEI of the entity providing ICT services | Entity providing ICT services using LEI, 20-character, alpha-numeric code based on the ISO 17442 standard, for example, LEI0000000000000000D. |
| Identification code of ICT third-party service provider | Identification code of ICT third-party service provider, for example, LEI0000000000EXTTPP1. |
| Identification code of ICT third-party engagement service provider | Identification code of ICT third-party engagement service provider. |
| Type of code to identify the ICT third-party service provider | Type of code to identify ICT third-party service provider, for example, LEI. Starting with version 21.1.x, the field Type of code to identify the ICT third-party service provider is now a choice field in the Digital resilience third-party registers in the contract record. The field aligns with regulator-defined options for selecting identification systems when creating new providers. |
| Rank | Rank of the supply chain, for example, 1 or 2. |
| Assessment of the ICT service | |
| Name | Name of the assessment in the <first-name.last-name> format. |
| Description | Description for the assessment. |
| Number | Unique identification number for the assessment that will be generated by the application. For example, TPA0001001. This field is auto-filled. |
| Department | Department that the assessment belongs to. |
| Owner | Name of the owner for the assessment. |
| Business unit | Name of the business unit that is associated with the assessment. |
| Contract number | Unique identifier number for the contractual arrangement, for example, CNTR0009002. This field is auto-filled. |
| Contractual arrangement reference number | Contract number associated with the assessment, for example, CNTR0009002. |
| Service provider type | - **Third party**: Selecting this option displays the following fields: - Identification code of ICT third-party service provider - Type of code to identify the ICT third-party service provider - **Third-party engagement**: Selecting this option displays the following fields: - Identification code of ICT third-party engagement service provider - Type of code to identify the ICT third-party engagement service provider - **Legal entity**: Selecting this option displays the LEI of the entity providing ICT services field. |
| Identification code of ICT third-party service provider | Identification code of ICT third-party service provider, for example, LEI0000000000EXTTPP1. |
| Identification code of ICT third-party engagement service provider | Identification code of ICT third-party engagement service provider. |
| LEI of the entity providing ICT services | Entity providing ICT services using LEI, 20-character, alpha-numeric code based on the ISO 17442 standard, for example, LEI0000000000000000D. |
| Type of code to identify the ICT third-party service provider | Type of code to identify ICT third-party service provider, for example, LEI. |
| Type of ICT services | Type of ICT services, for example, Data analysis. |
| Substitutability of the ICT third-party service provider | Substitutability of the ICT third-party service provider. The following options are available:- Not substitutable - Easily substitutable - Medium complexity in terms of substitutability - Highly complex substitutability |
| Reason for the substitutability classification | Reason for the classification. |
| Is the ICT third party audited? | Option to specify if the ICT third party has been audited. Available options are:- **Yes** - **No** |
| Date of the last audit on the ICT third-party service provider | Date when the last audit was performed. |
| Existence of an exit plan | Availability of an exit plan. The following options are available:- Yes - No **Note:** When the related function's **Criticality or importance assessment** field is set to **Yes**, select **Yes**. The system displays a warning during CSV download if you select **No** instead. |
| Possibility of reintegration of the contracted ICT service | Choice to verify the feasibility of reincorporating the contracted ICT service. Available options are:- **Easy** - **Difficult** - **Highly complex** |
| Impact of discontinuing the ICT services | Choice to specify the impact of discontinuing the ICT services. Available options are:- **Low** - **Medium** - **High** - **Assessment not performed** |
| Are there alternative ICT third-party service providers identified? | Choice to indicate if any other ICT third-party service providers have been identified. Available options are:- **Yes** - **No** - **Assessment not performed** If you select the check box, then specify the following field value: **Identification of alternative ICT TPP**. |
| Identification of alternative ICT TPP | Supplementary details on the identification of alternative ICT third-party providers \(TPP\). |