Start with the service
Inventory the provider and service, then assign an outsourced service owner.
Specify classification
Document ICT, PSEE and criticality in service context. Classification requires assessment by the entity.
Complete DORA information
ICT classification feeds the DORA workflow. Check required contract, service and provider information and review detected issues.