ICT-as-a-service risk assessment annexe Template | February 2014–current CurrentNon-mandated This document provides supporting detail for the ICT-as-a-services risk assessment guideline.