Division II.10.2 Z 10.01 — Critical Information systems (General information) (CIS 1): Instructions concerning specific positions

The system identification code is an acronym set by the institution that identifies unequivocally the critical information system.

This is a row identifier and shall be unique for each row in the template.

Commercial or internal name of the system.

Report one of the following values:

• ‘Custom-Built Software For Business Support’

  Applications that have been developed according to detailed business specifications. It may have been developed internally or using external contractors, but always with the purpose of business support.

• ‘Software Purchased As-Is’

  Applications purchased in the market, typically sold or licensed by a vendor, that were not modified in terms of specific customizations to the organisation's business. Applications that were subjected to normal configuration mechanisms are included in this category.

• ‘Software Purchased With Custom Modifications’

  Applications purchased in the market but where the vendor (or his representative) has created a specific version for the context of that installation. This particular version is characterized by changes in the application behaviour, new features or by inclusion of non-standard plug-ins developed according to the organisation's business.

• ‘Application/External Portal’

  External portals or applications provided by third parties, typically partners, to access the services they offered. Normally they are outside the scope of the information systems management of the organisation, and are installed, maintained and managed by the partner itself. Such applications often take the form of portals (accessible via the internet or private networks), and despite being outside the scope of the information systems management services of the organisation, they are important (or critical) to some business functions.

Description of the main purpose of the information system in the business context.

Name of the legal entity responsible for the system within the group.

This is the entity responsible for the overall procurement, development, integration, modification, operation, maintenance and retirement of an information system and is a key contributor in developing system design specifications to ensure the security and user operational needs are documented, tested, and implemented.

Code of the legal entity responsible for the system within the group, as reported in Z 01.00 — Organisational structure (ORG).