Managing Projects in IT Risk Management

Important:

The Project Risk Assessments feature is under Public Preview. Please contact OneTrust Support to request early access.

Managing risk effectively across projects is critical to ensuring successful delivery and alignment with business objectives. With projects, organizations can create and track IT and technology initiatives directly from the Inventory menu, while gaining centralized visibility into both direct and indirect risks associated with each project.

By aggregating risks from linked inventories into a single project view, this feature provides a comprehensive understanding of risk exposure. The Risks tab surfaces an aggregated risk score that reflects the full project risk profile, enabling risk managers, project managers, and business owners to make more informed decisions and proactively plan mitigation activities.

Note:

Projects can be managed across multiple products, not just IT Risk Management. For more information, see Managing Projects in AI Governance.

To create a project

  1. On the IT & Security Risk Management menu, select Inventory > Projects.

    The Projects screen appears.

  2. Click the Add new button.
    The Create new modal appears.

    Field
    Description
    Name

    Enter a unique name for the project.

    Organization

    Select the organization responsible for the project.

    Show more details

    Expand the this section to enter additional details and context for the project using the provided system attributes.

  3. Click the Save button.
    The Inventory details screen appears.
    Note:

    The record will be created using the assigned default workflow. To change the default option, see Creating & Managing AI Governance Workflows.

To manage project details

  1. On the IT & Security Risk Management menu, select Inventory > Projects.

    The Projects screen appears.

  2. Click on the name of a project.

    The Inventory details screen appears with the Details tab open by default.

  3. Click the Edit icon that appears next to editable fields and update project details as necessary.

  4. Click the Save button.

To view and manage associated risks

  1. On the Inventory details screen, select the Risks tab.
  2. Click the Add risk button.
  3. Create a new custom risk or select an existing risk from the Risk library. For more information, see Creating and Managing Risks.
    Note:

    You can flag multiple risks to the project. These will be direct risks. All other related risks will be indirect risks on the project.

  4. Click the Add button. The Risks tab will display all risks associated with the project, including both direct risks and indirect risks inherited from linked inventories. This provides a complete view of project risk exposure in a single location.

Important:

Projects behave similarly to other inventory types in the OneTrust Platform and can be configured and managed using the same approach. For more information, see Configuring IT Risk Inventories.