Adding, Editing, and Removing Vendor Controls

You can add controls from your library to describe the security measures against which you evaluate the vendor. For more information on controls in the Third-Party Risk Management module, see OneTrust Security and Privacy Controls for VRM.

The controls available are determined by the contents of your organization's Controls Library. For more information, see Managing the Controls Library.

To add vendor controls

  1. On the Third-Party Risk Management menu, select Vendors.
    The Vendors screen appears.
  2. Click the name of the vendor to which you want to add controls.
    The Inventory Details screen appears.
  3. Go to the Controls tab.
  4. Click the Add Controls button.
    The Add Controls modal appears.

  5. Select the framework from which the controls you want to add originate.
  6. Select the check boxes for the applicable controls.
  7. Click the Add button.

To edit a vendor control

  1. Go to the Controls tab of the Inventory Details screen.
  2. Click the Context Menu icon of the control you want to edit, select Edit.
    The Control Details screen appears.

  3. In the Maturity field, select the applicable maturity status of the control.
    Note:

    The Control ID, Standard / Framework, Description, Name, and Category fields are managed by the Controls Library. For more information, see Managing the Controls Library.

  4. In the Status field, select the implementation status of the control.
  5. Click the Save button.

To remove vendor controls

  1. Go to the Controls tab of the Inventory Details screen.
  2. Click the Context Menu icon of the control you want to remove.
  3. Click Remove. A confirmation modal appears.
  4. Click the Remove button.