Guided Onboarding Workshop: Third-Party Risk Management and Third-Party Risk Exchange
Getting Started
Step-by-Step Onboarding Guide: Third-Party Risk Management
The below workshop outlines are for our Guided Onboarding services. If you have purchased Self-Service Onboarding, the order of configuration is still applicable. However, it will be self-service and we encourage you to utilize the above step-by-step guide to help with your own implementation. If you have purchased a Custom Program, the order of configuration depends on your agreed scope.
Click here to see the current list of available guided onboarding documents and step-by-step guides for self-service!
Workshop Outline
Implementation Outcome Summary
At the end of the set of workshops, Customer should be able to:
-
Configure custom attributes
-
Populate vendor inventories manually, via assessment, and via bulk import
-
Create a new template and edit existing templates
-
Launch and review assessments
-
Flag and review risks on inventory item
-
Configure column and PDF reports and dashboards
-
Connect Vendor Profiles through the Exchange gallery
-
Launch exchange assessment requests
Kick Off
|
Prerequisites |
Responsibility |
|---|---|
|
Identify project stakeholders and requirement holders |
Customer |
|
Provide access to myOneTrust and "Getting Started" materials |
OneTrust |
|
Issue meeting invites |
OneTrust |
|
Workshop |
Responsibility |
|---|---|
|
Present kick-off deck - validate scope and set expectations for delivery timeline |
OneTrust |
|
Review key success criteria for implementation |
Joint |
|
Organize schedule for implementation workshops |
Joint |
|
Review platform, organizational hierarchy, and user roles |
OneTrust |
|
Discuss User Provisioning flow and SSO requirements, if applicable |
Joint |
|
Summarize key next steps |
OneTrust |
|
Follow-Up |
Responsibility |
|---|---|
|
Send meeting notes, action items, and delivery checklist |
OneTrust |
SSO Configuration Review (If Applicable)
|
Prerequisites |
Responsibility |
|---|---|
|
Identify and inform consultant of Identity Provider |
Customer |
|
Provide SSO overview guide and SAML metadata |
OneTrust |
|
Provide Identity Provider specific setup manual (if relevant) |
OneTrust |
|
Send meeting invites (if necessary) |
OneTrust |
|
Workshop |
Responsibility |
|---|---|
|
Training on SSO configuration functionality |
OneTrust |
|
Assist with SSO configuration |
Joint |
|
Follow-Up |
Responsibility |
|---|---|
|
Test and publish SSO configuration |
Customer |
|
Provision of updated deployment delivery checklist documentation |
OneTrust |
Workshop 1: Platform Foundation Training
|
Prerequisites |
Responsibility |
|---|---|
|
Share relevant myOneTrust articles |
OneTrust |
|
Review myOneTrust knowledge base and lessons |
Customer |
|
Workshop |
Responsibility |
|---|---|
|
Organization Hierarchy Best Practices |
OneTrust |
|
Training on standard user account creation and user account privileges |
OneTrust |
|
Review platform and email branding (i.e. color schemes, logo) |
OneTrust |
|
Confirm OneTrust emails pass through customer firewalls |
Customer |
|
High-level overview of Third-Party Risk Management and Exchange modules |
OneTrust |
|
Follow-Up |
Responsibility |
|---|---|
|
Send meeting notes, action items, and updated delivery checklist |
OneTrust |
|
Finalize and validate Organization Hierarchy configuration |
Customer |
Workshop 2: Inventory & Exchange Training
|
Prerequisites |
Responsibility |
|---|---|
|
Provide any existing customer data inventory documentation for review |
Customer |
|
Share relevant myOneTrust articles |
OneTrust |
|
Review myOneTrust knowledge base and lessons |
Customer |
|
Workshop |
Responsibility |
|---|---|
|
Training session on module navigation |
OneTrust |
|
Review different inventory types - vendor, asset, engagement, contracts |
OneTrust |
|
Training on attribute manager - review existing attributes and how to customize |
OneTrust |
|
Review Exchange data available and how to add/connect vendors via exchange profiles |
OneTrust |
|
Training on bulk import functionality - create items, update items |
OneTrust |
|
Follow-Up |
Responsibility |
|---|---|
|
Send meeting notes, action items, and updated delivery checklist |
OneTrust |
|
Finalize attribute manager configuration |
Customer |
|
Import vendors, assets, engagements, contracts if applicable |
Customer |
|
Connect vendor records to the exchange |
Customer |
Workshop 3: Template Training & Configuration
|
Prerequisites |
Responsibility |
|---|---|
|
Provide any existing vendor templates (optional) |
Customer |
|
Share relevant myOneTrust articles |
OneTrust |
|
Review myOneTrust knowledge base and lessons |
Customer |
|
Workshop |
Responsibility |
|---|---|
|
Training on OneTrust template assessment gallery |
OneTrust |
|
Training on template builder (inventory and attribute questions) |
OneTrust |
|
Training on score profiles, risk, and logic engine |
OneTrust |
|
Update or create Vendor template(s) including configured attributes |
Joint |
|
Follow-Up |
Responsibility |
|---|---|
|
Send meeting notes, action items, and updated delivery checklist |
OneTrust |
|
Finalize questionnaire template(s) and logic condition configuration |
Customer |
|
Testing and validation of vendor template questionnaires |
Customer |
Workshop 4: Risk Register Training
|
Prerequisites |
Responsibility |
|---|---|
|
Share relevant myOneTrust articles |
OneTrust |
|
Review myOneTrust knowledge base and lessons |
Customer |
|
Workshop |
Responsibility |
|---|---|
|
Training on Risk Scoring Methodology and Aggregation |
OneTrust |
|
Training on Risk Library |
OneTrust |
|
Training on reviewing and remediating risks |
OneTrust |
|
Training on risk settings |
OneTrust |
|
Follow-Up |
Responsibility |
|---|---|
|
Send meeting notes, action items, and updated delivery checklist |
OneTrust |
|
Finalize risk matrix settings |
Customer |
|
Import risks, if applicable |
Customer |
|
Apply risks rules to vendor template questionnaires, if applicable |
Customer |
Workshop 5: Workflow Training & Configuration
|
Prerequisites |
Responsibility |
|---|---|
|
Share relevant myOneTrust articles |
OneTrust |
|
Review myOneTrust knowledge base and lessons |
Customer |
|
Workshop |
Responsibility |
|---|---|
|
Training on vendor, engagement workflows, if applicable |
OneTrust |
|
Training on assessment process workflow |
OneTrust |
|
Training on risk, comment and more information workflows |
OneTrust |
|
Training on OneTrust self-service portal |
OneTrust |
|
Follow-Up |
Responsibility |
|---|---|
|
Send meeting notes, action items, and updated delivery checklist |
OneTrust |
|
Finalize workflow requirements and configuration |
Customer |
Workshop 6: Reporting & Dashboard Training *Includes OneTrust native Report & Dashboarding capabilities only
|
Prerequisites |
Responsibility |
|---|---|
|
Share relevant myOneTrust articles |
OneTrust |
|
Review myOneTrust knowledge base and lessons |
Customer |
|
Workshop |
Responsibility |
|---|---|
|
Training on reports engines - PDF and column reports |
OneTrust |
|
Training on report scheduler |
OneTrust |
|
Training on dashboards - out of the box and custom |
OneTrust |
|
Follow-Up |
Responsibility |
|---|---|
|
Send meeting notes, action items, and updated delivery checklist |
OneTrust |
|
Finalize reporting requirements and configuration |
Customer |
Workshop 7: Automation Rules & Workflow Refining
|
Prerequisites |
Responsibility |
|---|---|
|
Share relevant MyOneTrust articles |
OneTrust |
|
Review MyOneTrust Knowledge Base and Lessons |
Customer |
|
Refine TPRM configurations |
Customer |
|
Workshop |
Responsibility |
|---|---|
|
Training on automation rules |
OneTrust |
|
Review configured templates and workflow |
Customer |
|
Address customer questions and suggest best practices |
OneTrust |
|
Follow-Up |
Responsibility |
|---|---|
|
Send meeting notes, action items, and updated delivery checklist |
OneTrust |
|
Finalize TPRM configuration |
Customer |
Workshop 8: Best Practices & Implementation Close
|
Prerequisites |
Responsibility |
|---|---|
|
Complete all workshops |
Customer |
|
Workshop |
Responsibility |
|---|---|
|
Final walk through of product end to end |
OneTrust |
|
Discuss best practices for use and maintenance of platform |
OneTrust |
|
Close out final questions and open items |
Joint |
|
Disable any OneTrust user accounts tied to this specific module implementation project immediately (includes prod and non-prod environments) |
Customer |
|
Follow-Up |
Responsibility |
|---|---|
|
Send meeting notes, action items, and updated delivery checklist |
OneTrust |
|
Provide OneTrust Support team information |
OneTrust |