ARR Information

This section outlines important ARR (Application Readiness Review) requirements before moving to Entra.

These requirements apply to both application migrations and net new application integrations.

ARR Requirements

Applications can migrate if their App has an Approved ARR, a description which applies to any of the following statuses:

• ☑️ Complete
• ☑️ Completed with Conditions
• ☑️ Completed with Validation

note

Certain applications that require material changes to migrate to Entra ID may require an updated ARR. NIS Application Security will determine if their ARR needs to be updated.

Initiating an ARR

📝 Submit this form to start the ARR process — remember the AppSec Services Waiver for cost savings in 2025

Refer to the NIS Application Security (AppSec) Tear Sheet below for more details related to AppSec services, processes and controls required for all applications:

➡️ Open Separately: NIS Application Security (AppSec) Tear Sheet

AppSec Services Waiver

As part of the IDaaS migration effort, AppSec service requests submitted by the member firm from now through December 2025 will not incur any cost to the member firm. The waiver is applicable for the following services offered by the AppSec team:

• ARR (Application Readiness Review)
• CRS (Code Review Service)
• SRT (Security Readiness Testing)

This waiver is applicable exclusively for the first half of FY26.

important

To make sure the waiver is applied, application teams must comment IDaaS Migration in the relevant AppSec ticket.