Skip to main content
Assessment Type Asset Type being assessed Covered asset of this Assessment Status Conducted By Assessment Score Date this assessment was carried out Review By
TCO Application Advanced ERP Pending Joachim Zaisberger 981,500 GBP
TCO edit
ID Control Priority Form field: Cost Control owner Evidence location Compliance notes
Infrastructure Cost

What are the yearly infrastructure cost associated to this application


Guidance:

Review he cost allocation of infrastructure for this application

Must Have
Annual License Cost

Annual License Costs across al contracts for this application


Guidance:

Review all linked contracts to this application

Must Have
Development Cost

What has been the cost to carry out development on this application this year. This will mainly relate to the cost associated to approved projects that have been executed this year


Guidance:

Identify all relevant projects that have run this year and that have impacted in one way or another this application

Must Have
Supplier Support

What are the Supplier support costs required for this application.


Guidance:

Consider only dedicated support costs. This is not relating to license costs

Must Have
Internal Support FTE

What are the internal costs associated to running this application


Guidance:

Consider all the work that is required to run this application. How busy are people kept to run the application. This will particularly be relevant for applications with problems and with many escalations, etc. Consider all stakeholders, business analysts, architects, engineers, service-desk, management attention, etc

Must Have
Security Cost

What are the costs associated to this application in order to ensure it is running securely


Guidance:

Consider any middleware or security services this application consumes and consider the share of costs, like IAM, SIEM.

Also consider services provided by InfoSec like Penetration testing, Vulnerability scanning, Security monitoring, SOC.

Consider any costs relating to 3rd party Certificates or Compliance audits

Must Have
Integration Cost

What costs are associated to integrations for this application


Guidance:

If the application is running any middleware, consider the share of the cost of that. Also consider any manual work required to maintain the application running. Manual integrations like moving a data file from one application to another, adapting the data in that file, etc, all of that consumes a lot of time of colleagues

Must Have
Risk Exposure

Expected annual risk can be estimated as: Risk Cost=∑(Probability×Impact)

Must Have
End-of-Life Cost

If decommissioning this application, what are the expected costs


Guidance:

Consider any potential costs to carry out any of these activities: Data migration, Archiving, Contract termination, Knowledge transfer

Must Have