Data Glossary for Data Mapping Automation Reports
OneTrust Data Mapping Automation helps your organization map the movement of personal data throughout various systems and business functions. Data Mapping Automation reports built from the data captured by the Data Mapping Automation module can be used to view details on assets, processing activities, third-party vendors, and legal entities.
Available Data Mapping Automation Report Templates
The following report templates are available in the Reports Gallery when you select the Data Mapping Automation data source. You can view the available Reports Gallery templates by clicking the Create New button on the Reports screen. All templates will display by default, but can be narrowed down based on your selected data source or report type.
|
Report Name |
Description |
Data Source |
Report Type |
Data Type |
|---|---|---|---|---|
|
Article 30 Full List |
Used to create an Article 30 Report in column format to address requirements for GDPR of maintaining processing activity records. |
Data Mapping Automation |
Column |
Processing Activity |
|
Article 30 Full List (Legacy) |
Used to create an Article 30 Report in column format to address requirements for GDPR of maintaining processing activity records. Note: The Legacy template does not use legal entities. |
Data Mapping Automation |
Column |
Processing Activity |
|
Article 30 PDF |
Used to create an Article 30 Report in PDF format to address requirements for GDPR of maintaining processing activity records. |
Data Mapping Automation |
|
Processing Activity |
|
Article 30 PDF (Legacy) |
Used to create an Article 30 Report in PDF format to address requirements for GDPR of maintaining processing activity records. Note: The Legacy template does not use legal entities. |
Data Mapping Automation |
|
Processing Activity |
|
Assessment Default PDF |
Used to view details on a single assessment, address responses provided by respondents, and evaluate the related risks associated with those responses. |
PIA & DPIA Automation |
|
Any Template |
|
Asset Overview and Risk Summary |
Used to view information on assets and the risks associated with those assets. |
Data Mapping Automation |
|
Asset |
|
Basic Asset Review |
Used to view details on all assets and the related information on each asset. |
Data Mapping Automation |
Column |
Asset |
|
Basic Processing Activity Review |
Used to view details on all processing activities recorded and the related information on each activity. |
Data Mapping Automation |
Column |
Processing Activity |
|
Basic Vendor Review |
Used to view information on every vendor along with the related attribute information. |
Data Mapping Automation |
Column |
Vendor |
|
CNIL Report |
Used to create a PDF report to address requirements for Commission nationale de l'informatique et des libertés (CNIL). |
Data Mapping Automation |
|
Processing Activity |
|
LGPD New Data Model Report |
Used to create a column report to address requirements for Brazil’s Lei Geral de Proteção de Dados (or LGPD). |
Data Mapping Automation |
Column |
Processing Activity |
|
Processing Activity and Risk Summary |
Used to view information on processing activities and the risks associated with those processing activities. |
Data Mapping Automation |
|
Processing Activity |
|
Processing Activity Default PDF |
Used to capture all information related to a processing activity in PDF format. |
Data Mapping Automation |
|
Processing Activity |
|
Vendor Overview and Risk Summary |
Used to view information on vendors, such as the risks and controls associated with each vendor. |
Data Mapping Automation |
|
Vendor |
Available Data on Data Mapping Automation Reports
The following fields are available to be included on Data Mapping Automation column reports. The fields that display in a column report will automatically populate depending on the report template you selected when creating the report. However, you can use the column selector to customize the fields visible on the report.
Certain inventory may also be linked to show an all encompassing view of the data flow. For more information on inventory relationship types, see About Inventory Linking and Relationships.
|
Field |
Data Format |
Classification |
Description |
Related Objects |
Applicable Report Templates |
|---|---|---|---|---|---|
|
ID |
Text |
Dynamic Attributes |
The unique identifier for the record of a particular inventory type. |
Inventory / Related Inventory |
|
|
Inventory ID |
Text |
Attribute |
The inventory ID of the asset, processing activity, entity, or vendor. |
Inventory / Related Inventory |
|
|
Name |
Hyperlink |
Dynamic Attributes |
The name of the inventory. |
Inventory / Related Inventory |
|
|
Managing Organization |
Multi |
Dynamic Attributes |
The OneTrust organization group to which the inventory is related. |
Inventory / Related Inventory |
|
|
Description |
Text |
Dynamic Attributes |
The description of the inventory. |
Inventory / Related Inventory |
|
|
Aggregate / Inherent / Target Risk Level |
Multi |
Dynamic Attributes |
The likelihood that the vendor could expose personal information if controls are not in place, if current controls are implemented, and the target desired level of exposure. |
Inventory / Related Inventory |
|
|
Aggregate / Inherent / Target Risk Score |
Text |
Dynamic Attributes |
The overall risk score associated with the vendor without considering existing controls, with existing controls, and the desired target score. |
Inventory / Related Inventory |
|
|
IT Owner / Business Process Owner |
User |
Dynamic Attributes |
The individual responsible for the business process. |
Inventory / Related Inventory |
|
|
Created By |
User |
Dynamic Attributes |
The name of the user who created the record. |
Inventory / Related Inventory |
|
|
Created Date |
Date |
Default |
The date when the record was created. |
Inventory / Related Inventory |
|
|
Is Master |
Multi |
Dynamic Attributes |
This indicates if an inventory is a parent/master record. |
Inventory / Related Inventory |
|
|
Last Updated Date |
Date |
Default |
The date when the record was last updated. |
Inventory / Related Inventory |
|
|
Last Updated By |
User |
Dynamic Attributes |
The name of the user who last updated the record. |
Inventory / Related Inventory |
|
|
Master Record |
Text |
Dynamic Attributes |
The master inventory record to which the inventory record belongs (if a local version). |
Inventory / Related Inventory |
|
|
Status |
Multi |
Attribute |
The status of the inventory. |
Inventory / Related Inventory |
|
|
Type |
Multi |
Dynamic Attributes |
The inventory record's type. |
Inventory / Related Inventory |
|
|
System / Custom Attribute - Date |
Date |
Custom |
System or custom attribute created with Date format. |
Inventory / Related Inventory |
|
|
System / Custom Attribute - Multi-choice |
Multi |
Custom |
System or custom attribute created with Multi-choice format. |
Inventory / Related Inventory |
|
|
System / Custom Attribute - Text |
Text |
Custom |
System or custom attribute created with Text Type format. |
Inventory / Related Inventory |
|
|
Control ID - Controls |
Hyperlink |
Default |
The unique identifier to support integration across applications. |
Controls |
|
|
Control Name - Controls |
Text |
Attribute |
The name of the control. |
Controls |
|
|
Standard / Framework - Controls |
Multi |
Attribute |
The frameworks in which you can add controls. |
Controls |
|
|
Status - Controls |
Multi |
Attribute |
The current status of the control. Status options include: pending, implemented, not doing |
Controls |
|
|
Effectiveness - Controls |
Multi |
Attribute |
The effectiveness of an implemented control. Options include: effective, ineffective, planned |
Controls |
|
|
Maturity - Controls |
Multi |
Attribute |
The maturity of an implemented control. |
Controls |
|
|
Description - Controls |
Text |
Default |
A brief description of the control. |
Controls |
|
|
Control Owner - Controls |
User |
Attribute |
The user who is responsible for the control. |
Controls |
|
|
Category - Controls |
Multi |
Attribute |
The associated category that the control is assigned to. |
Controls |
|
|
Deadline - Controls |
Date |
Default |
The date by when the control must be implemented. |
Controls |
|
|
Created Date - Risk |
Date |
Default |
The date the risk record was created. |
Risks |
|
|
Risk ID - Risk |
Text |
Default |
The risk ID. |
Risks |
|
|
Inherent / Residual / Target Risk Impact Level - Risk |
Text |
Default |
The impact a risk would have on an organization if it occurred without controls to mitigate, with current implemented controls, and the target desired impact of a risk. |
Risks |
|
|
Inherent / Residual / Target Risk Level - Risk |
Text |
Default |
The risk level if it occurred without controls to mitigate, with current implemented controls, and the target risk level. |
Risks |
|
|
Inherent / Residual / Target Risk Probability Level - Risk |
Text |
Default |
The probability of a risk occurring if there are no controls in place, if current controls are implemented, and the target desired probability of the risk occurring. |
Risks |
|
|
Inherent / Residual / Target Risk Score - Risk |
Text |
Default |
The risk score without considering existing controls, with existing controls, and the desired risk score. |
Risks |
|
|
Risk Level - Risk |
Multi |
Attribute |
The likelihood that the vendor could be breached. |
Risks |
|
|
Organization - Risk |
Text |
Default |
The organization responsible for the risk. |
Risks |
|
|
Result - Risk |
Text |
Default |
The action taken on the risk. Actions include: accepted, avoided, ignored, reduced, rejected, transferred |
Risks |
|
|
Risk Approver - Risk |
Text |
Default |
The name of the person responsible for approving the risk. |
Risks |
|
|
Risk Categories - Risk |
Multi |
Attribute Array |
The associated category that the risk is assigned to. Example categories include: financial, geographic, operational, regulatory/compliance, security |
Risks |
|
|
Risk Description - Risk |
Text |
Default |
A brief description of the risk. |
Risks |
|
|
Risk Owners - Risk |
Text |
Default |
The name(s) of the individual(s) responsible for remedying the risk. |
Risks |
|
|
Risk Score - Risk |
Text |
Default |
The current risk score. |
Risks |
|
|
Risk Source - Risk |
Text |
Attribute |
The source or collection point of the data. |
Risks |
|
|
Threat - Risk |
Text |
Default |
The threat(s) the risk poses to your company. |
Risks |
|
|
Treatment - Risk |
Text |
Default |
The process by which the risk owner actively mitigates the risk. |
Risks |
|
|
Treatment Plan - Risk |
Text |
Default |
A plan that includes completing specific tasks, assigning a risk owner, and adding controls to mitigate the risk. |
Risks |
|
|
Treatment Status - Risk |
Text |
Default |
The current status of the treatment plan. Status levels include: in progress, under review, exception requested, exception granted |
Risks |
|
|
Classification: Inherent / Residual / Target Risk Level - Categorical Risks |
Multi |
Dynamic Attributes Map |
The inherent, residual, and target risk level defined by risk category. |
Risks |
|
|
Classification: Inherent / Residual / Target Risk Score - Categorical Risks |
Number |
Dynamic Attributes Map |
The overall inherent, residual, and target risk score defined by risk category. |
Risks |
|
|
Risk Type - Risk |
Text |
Default |
The type of risk. Options include: asset, entity, processing activity, or vendor |
Risks |
|
|
Data Subject - Personal Data |
Multi |
Attribute |
The name of the data subject. Examples include: customers, employees, and applicants |
Personal Data |
|
|
Data Category - Personal Data |
Multi |
Attribute |
The data category into which the data element fits. |
Personal Data |
|
|
Classification - Personal Data |
Multi |
Attribute Array |
The data classification into which the data element fits. |
Personal Data |
|
|
Data Classification Description - Personal Data |
Text |
Attribute |
A brief description of the data classification. |
Personal Data |
|
|
Data Category Description - Personal Data |
Text |
Attribute |
A brief description of the data category. |
Personal Data |
|
|
Data Element - Personal Data |
Multi |
Attribute |
The name of the data element. |
Personal Data |
|
|
Data Element Description - Personal Data |
Text |
Attribute |
A brief description of the data element. |
Personal Data |
|
|
Data Subject Type Description - Personal Data |
Text |
Attribute |
A brief description of the data subject type to which the data element is assigned. |
Personal Data |
|
|
Approver - Assessment Summary |
User |
Attribute Array |
The approver of the assessment. |
Related Assessment |
|
|
Creator - Assessment Summary |
User |
Attribute |
The creator of the assessment. |
Related Assessment |
|
|
Date Completed - Assessment Summary |
Date/Time |
Default |
The date the assessment was completed. |
Related Assessment |
|
|
Date Created - Assessment Summary |
Date/Time |
Default |
The date the assessment was created. |
Related Assessment |
|
|
Date Submitted - Assessment Summary |
Date/Time |
Default |
The date the assessment was submitted. |
Related Assessment |
|
|
Deadline - Assessment Summary |
Date/Time |
Default |
A due date for the assessment. |
Related Assessment |
|
|
Description - Assessment Summary |
Text |
Default |
A brief description of the assessment. |
Related Assessment |
|
|
GUID - Assessment Summary |
Text |
Default |
The unique number of the assessment ID field. |
Related Assessment |
|
|
High Risks - Assessment Summary |
Number |
Default |
The total number of risks captured on an assessment with a high risk level. |
Related Assessment |
|
|
ID - Assessment Summary |
Number |
Default |
The assessment ID number. |
Related Assessment |
|
|
Low Risks - Assessment Summary |
Number |
Default |
The total number of risks captured on an assessment with a low risk level. |
Related Assessment |
|
|
Medium Risks - Assessment Summary |
Number |
Default |
The total number of risks captured on an assessment with a medium risk level. |
Related Assessment |
|
|
Name - Assessment Summary |
Hyperlink |
Default |
The name for the assessment. |
Related Assessment |
|
|
Open Info Request - Assessment Summary |
Number |
Default |
A need for more information request that hasn't been addressed. |
Related Assessment |
|
|
Open Risk Count - Assessment Summary |
Number |
Default |
The amount of open risks that have not been addressed. |
Related Assessment |
|
|
Organization - Assessment Summary |
Multi |
Default |
The organizational group which is responsible for the assessment. |
Related Assessment |
|
|
Pending Reviews - Assessment Summary |
User |
Attribute Array |
The assessments that are waiting to be reviewed. |
Related Assessment |
|
|
Primary Record Id - Assessment Summary |
Number |
Default |
The number ID of the primary record. |
Related Assessment |
|
|
Primary Record Name - Assessment Summary |
Text |
Default |
The name of the primary record. |
Related Assessment |
|
|
Respondent - Assessment Summary |
User |
Attribute Array |
The respondent of the assessment. |
Related Assessment |
|
|
Result - Assessment Summary |
Multi |
Attribute |
Whether or not the assessment is approved or rejected. |
Related Assessment |
|
|
Result Comments - Assessment Summary |
Text |
Attribute Array |
The comments that accompany the result of the assessment. |
Related Assessment |
|
|
Inherent / Residual / Target Risk Level - Assessment Summary |
Multi |
Attribute |
The risk level captured on an assessment. |
Related Assessment |
|
|
Inherent / Residual / Target Risk Score - Assessment Summary |
Number |
Default |
The risk score captured on an assessment. |
Related Assessment |
|
|
Stage - Assessment Summary |
Multi |
Attribute |
The current stage of the assessment. |
Related Assessment |
|
|
Tags - Assessment Summary |
Multi |
Default Array |
The tag(s) that best suit the assessment. |
Related Assessment |
|
|
Template - Assessment Summary |
Text |
Attribute |
A questionnaire used to send assessments. |
Related Assessment |
|
|
Template Version - Assessment Summary |
Number |
Default |
The editable version of a published template. |
Related Assessment |
|
|
Total Risks - Assessment Summary |
Number |
Default |
The total number of risks captured on an assessment. |
Related Assessment |
|
|
Very High Risks - Assessment Summary |
Number |
Default |
The total number of risks captured on an assessment with a very high risk level. |
Related Assessment |
|