QRA and Vendor Portal Terminology Guide

Access Type

The level of access granted to users within the Vendor Portal to view or modify data.

Alternative Question

An additional question that is added to an answer library that uses an existing response.

Answer

The response provided by the vendor to a question in the questionnaire.

Answer Library

A repository of pre-approved answers that can be used to respond to questions in questionnaires.

Assessment

The process of evaluating a vendor’s compliance with certain standards or requirements.

Attribute

A characteristic or property of a vendor that can be used for sorting, filtering, or analysis within the Vendor Portal.

Audit Trail

A detailed record of all activities, decisions, and changes made during the QRA and vendor management processes, ensuring transparency and accountability.

Auto-Complete Questionnaire

A feature that allows for automatic completion of a questionnaire based on pre-defined answers.

Auto-Select Cell

Refers to the identification of cell types that is used when a user imports a questionnaire

AutoComplete Questionnaire Template

A template that provides the structure and content for an auto-complete questionnaire.

Certifications & Attestations

Official documents that verify a vendor’s compliance with specific standards or regulations.

Confidence Score

A metric that indicates the level of certainty in the accuracy of a questionnaire’s responses.

Customer

The customer using OneTrust’s services to manage vendor relationships and risk assessments.

External Questionnaire

A questionnaire received from an external party, not generated within the OneTrust system.

Internal Note

Notes made by the assessing team in Answer Library entries that are for internal use and not visible to vendors.

Products & Services

The various offerings provided by a vendor, which may be evaluated during the assessment process.

Question

An item on a questionnaire that seeks information or clarification from the vendor.

Questionnaire

A set of questions designed to gather information from vendors for assessment purposes.

Questionnaire Response Automation (QRA)

Automating the process of responding to security and compliance questionnaires, improving efficiency and accuracy.

Request

An incoming inquiry or questionnaire related to security, privacy, or due diligence.

Section

A distinct part of a questionnaire that groups related questions together.

SIG Lite

A simplified version of the Standard Information Gathering (SIG) questionnaire used for vendor assessments that is developed by Shared Assessments.

Sub-Section

A division within a section that further categorizes questions.

Supporting Answer

Additional information provided by a vendor to support their answer to a questionnaire item.

Supporting Document

Documentation provided by a vendor to substantiate responses in a questionnaire.

Tags

Labels used to categorize or identify entities in Answer Libraries.

Train Library

A feature that allows users to train the system to recognize and categorize responses more effectively.

Trust Profile

A comprehensive view of a vendor’s trustworthiness based on their responses and supporting documentation.

Vendor Portal

An online platform where vendors can interact with the organization, and access relevant trust and compliance information.

Vendor Scores

Numerical values and grades provided by data providers that are assigned to vendors based on their questionnaire responses, indicating their level of risk or compliance.