About Compliance Automation

Overview

The OneTrust Compliance Automation module provides a centralized location for your organization to create and track compliance initiatives for the standards and frameworks applicable to the organization. You can review a consolidated list of controls to evaluate your organization’s overall compliance. With Compliance Automation, organizations can establish a plan with key actions to improve their compliance score and track their compliance over time. Our solution gives you a prepopulated list of controls that can be validated. You can establish a plan and share evidence tasks to help reduce duplicate action on frameworks and controls.

Key capabilities of compliance automation include:

  • Manage standards and frameworks directly from the Compliance Automation module.

  • Create initiatives to help achieve compliance with the associated standards and frameworks relevant to your organization.

  • Track evidence collection to achieve or maintain compliance to standards and frameworks.

Business Use Cases

The Compliance Automation module allows users to fulfill the following use cases.

Test Once, Comply Many

Fulfill obligations to comply with different requirements across standard and framework regulations. TheCompliance Automationmodule helps you to manage multiple initiatives across frameworks and regulations. You can also share evidence tasks across initiatives.

Certification of Your Program

Get certified by creating initiatives to help prepare for certifications. For example, many companies are required to get certified with ISO 27001. If your organization has previously completed a compliance initiative to prepare for a certification, you can easily evaluate readiness for a re-certification to keep your organization’s certification up to date.

Creating a Compliance Initiative

You can centrally manage different compliance projects, and establish a plan to improve your company's overall compliance. To drive your plan of action, you will create compliance initiatives based on the applicable standards and frameworks identified by your company profile.

Compliance initiatives consist of a list of controls that must be implemented to achieve compliance towards the associated standard or framework. When creating compliance initiatives, you'll associate the initiative with a legal entity, asset, vendor, and processing activity and provide basic details to help identify and observe the initiative.



You'll then select the standard or framework with which the initiative will be associated. You can select from your standards and frameworks or all available standards and frameworks. Your standards and frameworks display the items imported into your tenant either out of the box or custom. All available standards and frameworks include the items available out of the box that are currently in your tenant. The controls within these standards or frameworks will be added to your initiative and to the Controls Library.





Note:

Standards or frameworks that are no longer supported by OneTrust can be identified by the icon. If these standards or frameworks are selected, you must update the controls manually.

This icon will also appear in blue when a standard or framework has been updated. For example, the icon will appear if another control has been added to the framework.

Managing Standards and Frameworks

The Compliance Automation module can be used to add standards and frameworks relevant to your organization as well as create custom standards and frameworks. You can add available standards and frameworks to a list of your preferred standards and frameworks which is viewable on the My Standards and Frameworks tab. Available standards and frameworks are a complete list of all of the out of the box control frameworks maintained by OneTrust. Users can then preview and add individual standards and frameworks to their tenant by making the appropriate selection.

The controls within these standards or frameworks will be added to your initiative and to the Controls Library.



Note:

Standards or frameworks that are no longer supported by OneTrust can be identified by the icon. If these standards or frameworks are selected, you must update the controls manually.

This icon will also appear when a standard or framework has been updated. For example, the icon will appear if another control has been added to the framework.