Data Glossary for Risk and IT & Security Risk Management Reports

OneTrust Risk and IT & Security Risk Management helps organizations identify, measure, and respond to threats throughout their organization. Risk and IT & Security Risk Management reports built from the data captured by these modules can be used to view risks associated with assets, risks associated with processing activities, risks associated with vendors, and related control details.

Available Risk and IT & Security Risk Management Report Templates

The following report templates are available in the Reports Gallery when you select the Risk or IT & Security Risk Management data sources. You can view the available Reports Gallery templates by clicking the Create New button on the Reports screen. All templates will display by default, but can be narrowed down based on your selected data source or report type.


Report Name	Description	Data Source	Report Type	Data Type
Asset Overview and Risk Summary	Used to view information on assets and the risks associated with those assets.	Data Mapping Automation	PDF	Asset
Basic Asset Review	Used to view details on all assets and the related information on each asset.	Data Mapping Automation	Column	Asset
Basic Processing Activity Review	Used to view details on all processing activities recorded and the related information on each activity.	Data Mapping Automation	Column	Processing Activity
Basic Vendor Review	Used to view information on every vendor along with the related attribute information.	Data Mapping Automation	Column	Vendor
Processing Activity and Risk Summary	Used to view information on processing activities and the risks associated with those processing activities.	Data Mapping Automation	PDF	Processing Activity
Vendor Overview and Risk Summary	Used to view information on vendors, such as the risks and controls associated with each vendor.	Data Mapping Automation	PDF	Vendor

Available Data on Risk and IT & Security Risk Management Reports

The following fields are available to be included on Risk and IT & Security Risk Management reports. The fields that display in a report will automatically populate depending on the report template you selected when creating the report.


Field	Data Type	Classification	Description	Applicable Report Templates
ID	Hyperlink	Default	The risk ID.	Asset Overview and Risk Summary Basic Asset Review Basic Processing Activity Review Basic Vendor Review Processing Activity and Risk Summary Vendor Overview and Risk Summary
Description	Text	Default	The description of the risk.	Asset Overview and Risk Summary Basic Asset Review Basic Processing Activity Review Basic Vendor Review Processing Activity and Risk Summary Vendor Overview and Risk Summary
Date Created	Date/Time	Default	The date the risk record was created.	Asset Overview and Risk Summary Basic Asset Review Basic Processing Activity Review Basic Vendor Review Processing Activity and Risk Summary Vendor Overview and Risk Summary
Date Closed	Date	Default	The date in which the risk treatment status was approved, and the risk record closed.	Asset Overview and Risk Summary Basic Asset Review Basic Processing Activity Review Basic Vendor Review Processing Activity and Risk Summary Vendor Overview and Risk Summary
Deadline	Date/Time	Default	The date in which the risk treatment status was approved, and the risk record closed.	Asset Overview and Risk Summary Basic Asset Review Basic Processing Activity Review Basic Vendor Review Processing Activity and Risk Summary Vendor Overview and Risk Summary
Inherent Risk Level	Multi	Attribute	The inherent risk level determined by the risk matrix.	Asset Overview and Risk Summary Basic Asset Review Basic Processing Activity Review Basic Vendor Review Processing Activity and Risk Summary Vendor Overview and Risk Summary
Inherent Risk Impact Level	Multi	Attribute	The impact that a risk would have on an organization if it occurred without controls to mitigate.	Asset Overview and Risk Summary Basic Asset Review Basic Processing Activity Review Basic Vendor Review Processing Activity and Risk Summary Vendor Overview and Risk Summary
Inherent Risk Probability Level	Multi	Attribute	The probability of the risk occurring if there were no controls in place.	Asset Overview and Risk Summary Basic Asset Review Basic Processing Activity Review Basic Vendor Review Processing Activity and Risk Summary Vendor Overview and Risk Summary
Inherent Risk Score	Text	Default	The overall risk score without considering existing controls.	Asset Overview and Risk Summary Basic Asset Review Basic Processing Activity Review Basic Vendor Review Processing Activity and Risk Summary Vendor Overview and Risk Summary
Organization	Multi	Attribute	The organization group that this risk is related to.	Asset Overview and Risk Summary Basic Asset Review Basic Processing Activity Review Basic Vendor Review Processing Activity and Risk Summary Vendor Overview and Risk Summary
Reminder Days	Text	Default	The number of days before a deadline that a reminder is sent.	Asset Overview and Risk Summary Basic Asset Review Basic Processing Activity Review Basic Vendor Review Processing Activity and Risk Summary Vendor Overview and Risk Summary
Residual Risk Level	Multi	Attribute	The risk level if it occurred with the current controls that are implemented.	Asset Overview and Risk Summary Basic Asset Review Basic Processing Activity Review Basic Vendor Review Processing Activity and Risk Summary Vendor Overview and Risk Summary
Residual Risk Impact Level	Multi	Attribute	The impact a risk would have on an organization if it occurred with the current controls that are implemented.	Asset Overview and Risk Summary Basic Asset Review Basic Processing Activity Review Basic Vendor Review Processing Activity and Risk Summary Vendor Overview and Risk Summary
Residual Risk Probability Level	Multi	Attribute	The probability of the risk occurring with the current controls that are implemented.	Asset Overview and Risk Summary Basic Asset Review Basic Processing Activity Review Basic Vendor Review Processing Activity and Risk Summary Vendor Overview and Risk Summary
Residual Risk Score	Text	Default	The overall risk score after considering existing controls.	Asset Overview and Risk Summary Basic Asset Review Basic Processing Activity Review Basic Vendor Review Processing Activity and Risk Summary Vendor Overview and Risk Summary
Result	Multi	Attribute	The action taken on the risk. Actions include: accepted, avoided, ignored, reduced, rejected, transferred	Asset Overview and Risk Summary Basic Asset Review Basic Processing Activity Review Basic Vendor Review Processing Activity and Risk Summary Vendor Overview and Risk Summary
Risk Approver	User	Attribute Array	The name of the person responsible for approving the risk.	Asset Overview and Risk Summary Basic Asset Review Basic Processing Activity Review Basic Vendor Review Processing Activity and Risk Summary Vendor Overview and Risk Summary
Risk Owners	User	Attribute Array	The name(s) of the individual(s) responsible for remedying the risk.	Asset Overview and Risk Summary Basic Asset Review Basic Processing Activity Review Basic Vendor Review Processing Activity and Risk Summary Vendor Overview and Risk Summary
Source	Hyperlink	Attribute	The source or collection point of the data.	Asset Overview and Risk Summary Basic Asset Review Basic Processing Activity Review Basic Vendor Review Processing Activity and Risk Summary Vendor Overview and Risk Summary
Stage	Multi	Attribute	The current risk stage.	Asset Overview and Risk Summary Basic Asset Review Basic Processing Activity Review Basic Vendor Review Processing Activity and Risk Summary Vendor Overview and Risk Summary
Target Risk Level	Multi	Attribute	The desired risk level.	Asset Overview and Risk Summary Basic Asset Review Basic Processing Activity Review Basic Vendor Review Processing Activity and Risk Summary Vendor Overview and Risk Summary
Target Risk Impact Level	Multi	Attribute	The desired impact that a risk would have on an organization if it occurred.	Asset Overview and Risk Summary Basic Asset Review Basic Processing Activity Review Basic Vendor Review Processing Activity and Risk Summary Vendor Overview and Risk Summary
Target Risk Probability Level	Multi	Attribute	The desired probability of the risk occurring.	Asset Overview and Risk Summary Basic Asset Review Basic Processing Activity Review Basic Vendor Review Processing Activity and Risk Summary Vendor Overview and Risk Summary
Target Risk Score	Text	Default	The desired risk score.	Asset Overview and Risk Summary Basic Asset Review Basic Processing Activity Review Basic Vendor Review Processing Activity and Risk Summary Vendor Overview and Risk Summary
Treatment	Text	Default	The process by which the risk owner actively mitigates the risk.	Asset Overview and Risk Summary Basic Asset Review Basic Processing Activity Review Basic Vendor Review Processing Activity and Risk Summary Vendor Overview and Risk Summary
Treatment Plan	Text	Default	The plan that includes completing specific tasks, assigning a risk owner, and adding controls to mitigate the risk.	Asset Overview and Risk Summary Basic Asset Review Basic Processing Activity Review Basic Vendor Review Processing Activity and Risk Summary Vendor Overview and Risk Summary
Treatment Status	Multi	Attribute	The current status of the treatment plan. Status options include: in progress, under review, exception requested, exception granted.	Asset Overview and Risk Summary Basic Asset Review Basic Processing Activity Review Basic Vendor Review Processing Activity and Risk Summary Vendor Overview and Risk Summary
Type	Multi	Default	The type of risk and select the specific asset, entity, processing activity, or vendor.	Asset Overview and Risk Summary Basic Asset Review Basic Processing Activity Review Basic Vendor Review Processing Activity and Risk Summary Vendor Overview and Risk Summary
Controls	Hyperlink	Default	The related controls added to the risk.	Asset Overview and Risk Summary Basic Asset Review Basic Processing Activity Review Basic Vendor Review Processing Activity and Risk Summary Vendor Overview and Risk Summary
Source Type	Multi	Default	The location in which the data was collected. Examples include: inventory, incident, etc.	Asset Overview and Risk Summary Basic Asset Review Basic Processing Activity Review Basic Vendor Review Processing Activity and Risk Summary Vendor Overview and Risk Summary
Category	Multi	Attribute Array	The associated category that the risk is assigned to. Example categories include: financial, geographic, operational, regulatory/compliance, security	Asset Overview and Risk Summary Basic Asset Review Basic Processing Activity Review Basic Vendor Review Processing Activity and Risk Summary Vendor Overview and Risk Summary
Threat	Multi	Attribute	The incident that has the potential to cause harm or expose vulnerabilities.	Asset Overview and Risk Summary Basic Asset Review Basic Processing Activity Review Basic Vendor Review Processing Activity and Risk Summary Vendor Overview and Risk Summary
Vulnerability	Multi	Attribute Array	The known weakness that would allow attacks if not contained.	Asset Overview and Risk Summary Basic Asset Review Basic Processing Activity Review Basic Vendor Review Processing Activity and Risk Summary Vendor Overview and Risk Summary
Risk Owner	User	Attribute	The name(s) of the individual(s) responsible for remedying the risk.	Asset Overview and Risk Summary Basic Asset Review Basic Processing Activity Review Basic Vendor Review Processing Activity and Risk Summary Vendor Overview and Risk Summary
Control ID	Hyperlink	Default	The unique identifier to support integration across applications.	Asset Overview and Risk Summary Basic Asset Review Basic Processing Activity Review Basic Vendor Review Processing Activity and Risk Summary Vendor Overview and Risk Summary
Control Name	Text	Attribute	The name of the control.	Asset Overview and Risk Summary Basic Asset Review Basic Processing Activity Review Basic Vendor Review Processing Activity and Risk Summary Vendor Overview and Risk Summary
Standard/Framework	Multi	Attribute	The frameworks in which you can add controls.	Asset Overview and Risk Summary Basic Asset Review Basic Processing Activity Review Basic Vendor Review Processing Activity and Risk Summary Vendor Overview and Risk Summary
Status	Multi	Attribute	The current status of the control. Status options include: pending, implemented, not doing	Asset Overview and Risk Summary Basic Asset Review Basic Processing Activity Review Basic Vendor Review Processing Activity and Risk Summary Vendor Overview and Risk Summary
Effectiveness	Multi	Attribute	The effectiveness of an implemented control. Options include: effective, ineffective, planned	Asset Overview and Risk Summary Basic Asset Review Basic Processing Activity Review Basic Vendor Review Processing Activity and Risk Summary Vendor Overview and Risk Summary
Maturity	Multi	Attribute	The maturity of an implemented control.	Asset Overview and Risk Summary Basic Asset Review Basic Processing Activity Review Basic Vendor Review Processing Activity and Risk Summary Vendor Overview and Risk Summary
Description	Text	Default	A brief description of the control.	Asset Overview and Risk Summary Basic Asset Review Basic Processing Activity Review Basic Vendor Review Processing Activity and Risk Summary Vendor Overview and Risk Summary
Control Owner	User	Attribute	The user who is responsible for the control.	Asset Overview and Risk Summary Basic Asset Review Basic Processing Activity Review Basic Vendor Review Processing Activity and Risk Summary Vendor Overview and Risk Summary
Category	Multi	Attribute	The associated category that the control is assigned to.	Asset Overview and Risk Summary Basic Asset Review Basic Processing Activity Review Basic Vendor Review Processing Activity and Risk Summary Vendor Overview and Risk Summary
Deadline	Date	Default	The date by when the control must be implemented.	Asset Overview and Risk Summary Basic Asset Review Basic Processing Activity Review Basic Vendor Review Processing Activity and Risk Summary Vendor Overview and Risk Summary

Platform Capabilities

Data Glossary for Risk and IT & Security Risk Management Reports

Available Risk and IT & Security Risk Management Report Templates

Available Data on Risk and IT & Security Risk Management Reports

In this Topic