Using PDF Report Section Types

Purpose

The Assessment Detail section type allows you to include details defined for the assessment, such as the assessment ID, name of the assessment, approver(s), respondent(s), and more.

For example, you could use this section to reference background information about the assessment directly in the report, which can help provide important context while you are evaluating other aspects of the assessment, such as understanding which questions were asked in the assessment during editorial review.

Object Type

Assessment

Data Sources Available In

This section type can be added in Assessment type PDF reports created using the following data sources:

• PIA & DPIA Automation

• Third-Party Risk Management

• Third-Party Risk Exchange

Purpose

The Assessment Notes section type allows you to include notes that were added in the assessment within the report, along with the user who added the note, visibility, and date and time when it was added.

For example, you could use this section to capture any notes that respondents may have added in the assessment to provide additional details or context related to their responses or justifications.

Object Type

Assessment

Data Sources Available In

This section type can be added in Assessment type PDF reports created using the following data sources:

• PIA & DPIA Automation

• Third-Party Risk Management

• Third-Party Risk Exchange

Purpose

The Assessment Question section type allows you to select which assessment questions you want to include or exclude from your report depending on the audit requirements and target audience.

For example, you could use this section type to include assessment questions and comments for internal requests, such as an executive approval process, to discern if a given assessment meets your organization's reporting obligations. This configuration can help satisfy the segregation of duties and related technical control measures mandated by information security and privacy frameworks. Likewise, for external requests such as privacy compliance audits, you can include responses and justifications but exclude comment threads to remove your team's internal deliberations from the final report.

Object Type

Assessment

Data Sources Available In

This section type can be added in Assessment type PDF reports created using the following data sources:

• PIA & DPIA Automation

• Third-Party Risk Management

• Third-Party Risk Exchange

Purpose

The Categorical Risk Summary section type allows you to include all related inherent and residual risk scores and levels in the report.

For example, you could use this section to review aggregate categorical risk scores for an individual inventory, organized by risk category. This section type displays categorical risk scores as attributes of the inventory.

Object Type

Inventory

Data Sources Available In

This section type can be added in Inventory type PDF reports created using the following data sources:

• Data Mapping Automation

• Third-Party Risk Management

• Third-Party Risk Exchange

• IT & Security Risk Management

Purpose

The Controls section type allows you to include relevant control attributes within your report.

For example, you could use this section to output a report detailing key information for each control in your organization.

Object Type

Controls

Data Sources Available In

This section type can be added in Control type PDF reports created using the following data sources:

• Policy Management

• Privacy Notice Management

Purpose

The Inventory Attribute section type allows you to include attributes associated with the selected inventory.

For example, you could use this section to include metadata on any inventory for which you want to report additional details, such as a description, type, purpose of processing, etc.

Object Type

Inventory

Data Sources Available In

This section type can be added in Inventory type PDF reports created using the following data sources:

• Data Mapping Automation

• Third-Party Risk Management

• Third-Party Risk Exchange

• IT & Security Risk Management

Purpose

The Master Controls section type allows you to include master control attributes, control implementations attributes, and related policies attributes in the report.

For example, you could use this section to output a report detailing key information for each control in your control library along with information on where it has been implemented against risks, asset, vendors, processes, entities and what policies the control is associated to.

Object Type

Controls

Data Sources Available In

This section type can be added in Control type PDF reports created using the following data sources:

• IT & Security Risk Management

Purpose

The Objective Statement section type allows users to outline the objective statement for the report when their organization is aligning to ISO 27001.

For example, you could use this section to outline the objective statement of the report being exported.

Object Type

Controls

Data Sources Available In

This section type can be added in Control type PDF reports created using the following data sources:

• IT & Security Risk Management

Purpose

The Policy Content section type allows you to include the content of a policy or privacy notice you created in the report.

For example, if you wanted to provide a PDF version of your company's privacy policy, you could create a Privacy Policy Report and add the Policy Content section to include the contents of the policy that you created. You can also define other custom branding elements to display on the report, and then export to PDF.

Object Type

Policy

Data Sources Available In

This section type can be added in Policy type PDF reports created using the following data sources:

• Policy

• Privacy Policy

Purpose

The Policy Details section type allows you to capture important details relevant to your policy, standard, procedure, or privacy notice.

For example, you could use this section to capture important attributes of a document.

Object Type

Policy, Standard, Procedure, or Privacy Notice

Data Sources Available In

This section type can be added in default policy, standard, and procedure PDF reports created using the following data sources:

• Policy Management

• Privacy Notice Management

Purpose

The Related Contract section type allows you to include contract records linked to the selected inventory in the report.

For example, you could use this section to capture contracts of a vendor. You could then build out subsections to help you group contract attributes into different tables based on what you want to highlight.

Object Type

Inventory

Data Sources Available In

This section type can be added in Inventory type PDF reports created using the following data sources:

• Data Mapping Automation

• Third-Party Risk Management

• IT & Security Risk Management

• Third-Party Risk Exchange

Purpose

The Related Data Subject Elements section type allows you to include data elements linked to the selected inventory in the report.

For example, you could use this section to include the data categories and data elements being captured for each data subject category to help you identify the data elements stored against your asset in accordance with CCPA or other applicable laws and regulations.

Object Type

Inventory

Data Sources Available In

This section type can be added in Inventory type PDF reports created using the following data sources:

• Data Mapping Automation

• Third-Party Risk Management

• Third-Party Risk Exchange

• IT & Security Risk Management

Purpose

The Related Engagement section type allows you to include engagement records linked to the selected inventory in the report.

For example, you could use this section to capture engagements of a vendor. You could then build out subsections to help you group engagement attributes into different tables based on what you want to highlight.

Object Type

Inventory

Data Sources Available In

This section type can be added in Inventory type PDF reports created using the following data sources:

• Data Mapping Automation

• Third-Party Risk Management

• Third-Party Risk Exchange

• IT & Security Risk Management

Purpose

The Related Inventory section type allows you to include assets, processing activities, vendors, and legal entities linked to the selected inventory in the report.

For example, you could use this section to capture supported processing activities of a vendor. You could then build out subsections to help you group the attributes into different tables based on what you want to highlight.

Object Type

Inventory

Data Sources Available In

This section type can be added in Inventory type PDF reports created using the following data sources:

• Data Mapping Automation

• Third-Party Risk Management

• Third-Party Risk Exchange

• IT & Security Risk Management

• Policy Management

• Privacy Notice Management

Purpose

The Request Details section type allows you to include details on the data subject request, such as the request ID, request types, and subject types.

For example, you could use this section to include additional background information about the data subject request directly in the report, which can help provide important context, such as understanding when the request was submitted and when it was last modified.

Object Type

Result Summary

Data Sources Available In

This section type can be added in Result Summary type PDF reports created using the following data sources:

• Privacy Rights Automation

Purpose

The Results Summary - Data Groups section type allows you to include data groups that were created to associate related Personally Identifiable Information (PII) collected by Targeted Data Discovery (TDD).

For example, you could use this section to include the data groups you created to organize the data subject's data collected from the data subject request into three separate categories.

Object Type

Result Summary

Data Sources Available In

This section type can be added in Result Summary type PDF reports created using the following data sources:

• Privacy Rights Automation

Purpose

The Result Summary - Unstructured Data section type allows you to include results summary data that contains basic information of unstructured results.

For example, you could use this section to view a high-level summary that includes the name, file type, and system that the unstructured result came from to provide context when reviewing the text redaction.

Object Type

Result Summary

Data Sources Available In

This section type can be added in Result Summary type PDF reports created using the following data sources:

• Privacy Rights Automation

Purpose

The Risks Grouped by Attribute section type allows you to add and group risk details by an attribute and include control attributes associated with these risks on the report.

For example, you could use this section to see a summary view of all the risks associated with a particular inventory. You can select to group risk details by different attributes to help you accomplish a variety of business use cases aligned with your organization's reporting needs.

Object Type

Assessment and Inventory

Data Sources Available In

This section type can be added in Assessment or Inventory type PDF reports created using the following data sources:

• PIA & DPIA Automation

• Data Mapping Automation

• Third-Party Risk Management

• Third-Party Risk Exchange

• IT & Security Risk Management

Purpose

The Text Editor section type allows you to manually enter and format sections of text or add images as needed.

For example, you could use this section to add an introduction or executive overview to help explain the purpose of your report.

Object Type

Assessment, Inventory, Policy, and Result Summary

Data Sources Available In

This section type can be added in any PDF reports created using the following data sources:

• PIA & DPIA Automation

• Data Mapping Automation

• Policy

• Privacy Policy

• Third-Party Risk Management

• Third-Party Risk Exchange

• IT & Security Risk Management

Purpose

The Widget section type allows you to add and configure a widget to include visual representations of data on the report.

For example, you could use this section to include graphics to help answer specific questions, such as how many assessments are in progress by respondent or what is the number of risks in each workflow stage by reviewer.

Object Type

Assessment, Inventory, Policy, and Result Summary

Data Sources Available In

This section type can be added in any PDF report created using the following data sources:

• PIA & DPIA Automation

• Data Mapping Automation

• Policy

• Privacy Policy

• Third-Party Risk Management

• Third-Party Risk Exchange

• IT & Security Risk Management