Guided Onboarding Workshop: Third-Party Due Diligence
Workshop Outline
Implementation Outcome Summary
At the end of the set of workshops, Customer should be able to:
-
Populate third-party inventories, via ad-hoc, and bulk import
-
Create custom templates and update existing templates
-
Launch and review assessments
-
Flag and review risk on inventory items
-
Adjust and create workflows
Kick Off
|
Prerequisites |
Responsibility |
|---|---|
|
Identify project stakeholders |
Customer |
|
Provide customer access to dedicated OneTrust production tenant and "Getting Started" user documentation |
OneTrust |
|
Issue meeting invites |
OneTrust |
|
Request Dow Jones integration credentials |
OneTrust |
|
Workshop |
Responsibility |
|---|---|
|
Present kick-off deck - validate scope and set expectations for delivery |
OneTrust |
|
Review key success criteria for deployment |
Joint |
|
Summarize key next steps and requirements for workshops |
OneTrust |
|
Organize schedule for implementation workshops |
Joint |
|
Confirm access to myOneTrust knowledge base |
Joint |
|
Follow-Up |
Responsibility |
|---|---|
|
Provision consultant access to OneTrust tenant |
Customer |
|
Send meeting notes, action items, delivery checklist, and workshop outline document |
OneTrust |
Workshop 1: Third-Party Due Diligence Module Demo
|
Prerequisites |
Responsibility |
|---|---|
|
Add implementation consultant as external user to tenant |
Customer |
|
Plan demo based on customer design requirements |
OneTrust |
|
Workshop |
Responsibility |
|---|---|
|
Discovery of current due diligence process |
OneTrust |
|
Overview or organization hierarchy |
OneTrust |
|
Demonstration of the Third-Party Due Diligence module |
OneTrust |
|
Global settings and branding overview |
OneTrust |
|
Follow-Up |
Responsibility |
|---|---|
|
Send meeting notes, action items, and relevant myOneTrust articles |
OneTrust |
|
Finalize and validate Organization Hierarchy configuration |
Customer |
|
Provide existing third-party inventory data for review |
Customer |
Workshop 2: Inventory and Attribute Manager
|
Prerequisites |
Responsibility |
|---|---|
|
Provide any existing vendor data |
Customer |
|
Configure Dow Jones integration |
OneTrust |
|
Enable TPDD default attributes |
OneTrust |
|
Create default inventory view and re-label TPDD dashboard |
OneTrust |
|
Review customer export of third-party data (if provided) |
OneTrust |
|
Workshop |
Responsibility |
|---|---|
|
Review system attributes and grouping |
OneTrust |
|
Training on attribute manager and how to customize |
OneTrust |
|
Mapping exercise |
Joint |
|
Demonstrate ad-hox/bulk import of third-party data |
OneTrust |
|
Follow-Up |
Responsibility |
|---|---|
|
Send meeting notes, action items, and relevant myOneTrust articles |
OneTrust |
|
Finalize attribute manager configuration |
Customer |
|
Finalize inventory view and settings |
Customer |
Workshop 3: Dow Jones and Risk Settings Overview
|
Prerequisites |
Responsibility |
|---|---|
|
Define third-party risk scoring methodology and set aggregation default |
Customer |
|
Review customers risk settings |
OneTrust |
|
Workshop |
Responsibility |
|---|---|
|
Training on Dow Jones and screening results overview |
OneTrust |
|
Training on risk module, including: risk library, and register |
OneTrust |
|
Review risk settings |
OneTrust |
|
Follow-Up |
Responsibility |
|---|---|
|
Send meeting notes, action items, and relevant myOneTrust articles |
OneTrust |
|
Send PDF copies of existing assessment templates |
OneTrust |
|
Begin building of risk library |
Customer |
|
Finalize risk settings |
Customer |
Workshop 4: Assessment and Template Review
|
Prerequisites |
Responsibility |
|---|---|
|
Share PDF copies of existing assessment templates |
OneTrust |
|
Review standard assessment PDF’s |
Customer |
|
Create users who will be assigned as assessment reviewers, risk owners, approvers, etc. |
Customer |
|
Send examples of existing assessment documentation (if applicable) |
Customer |
|
Review customer provided assessment documentation |
OneTrust |
|
Workshop |
Responsibility |
|---|---|
|
Training on OneTrust template assessment gallery |
OneTrust |
|
Training on template builder (inventory and attribute questions) |
OneTrust |
|
Training on assessment rule settings |
OneTrust |
|
Update or create third-party templates |
Joint |
|
Follow-Up |
Responsibility |
|---|---|
|
Send meeting notes, action items, and relevant myOneTrust articles |
OneTrust |
|
Finalize questionnaire template(s) and assessment rules |
Customer |
|
Testing and validation of vendor template questionnaires |
Customer |
Workshop 5: Workflow and Automation Rules
|
Prerequisites |
Responsibility |
|---|---|
|
Share existing workflow documentation (if applicable) |
Customer |
|
Review myOneTrust knowledge base articles |
Customer |
|
Review any workflow documentation shared by customer |
OneTrust |
|
Workshop |
Responsibility |
|---|---|
|
Training on workflow functionality, including: stage, and workflow rules |
OneTrust |
|
Training on automation rule functionality |
OneTrust |
|
Build third-party workflows |
Joint |
|
Build automation rules |
Joint |
|
Follow-Up |
Responsibility |
|---|---|
|
Send meeting notes, action items, and relevant myOneTrust articles |
OneTrust |
|
Finalize workflow requirements and configuration |
Customer |
|
Finalize automation rule requirements and configuration |
Customer |
|
Testing and validation of workflow rules and stages |
Customer |
Workshop 6: Reporting Overview and Admin Training
|
Prerequisites |
Responsibility |
|---|---|
|
Share any existing reporting documentation |
Customer |
|
Provide email branding, if applicable |
Customer |
|
Review customer instance to tailor training to tenant |
OneTrust |
|
Workshop |
Responsibility |
|---|---|
|
Training on reporting, including: dashboard, report builder, and scheduled reports |
OneTrust |
|
TPDD module training |
OneTrust |
|
Follow-Up |
Responsibility |
|---|---|
|
Send meeting notes, action items, and relevant myOneTrust articles |
OneTrust |
|
Finalize default dashboard and schedule reports |
Customer |
|
Finalize branding if not completed |
Customer |
Workshop 7: Implementation Closure
|
Prerequisites |
Responsibility |
|---|---|
|
Complete all workshops |
Customer |
|
Import third-parties if not completed |
Customer |
|
Workshop |
Responsibility |
|---|---|
|
Present project closure deck |
Joint |
|
Discuss best practices for use and maintenance of platform |
OneTrust |
|
Close out final questions and open items |
Joint |
|
Disable any OneTrust user accounts tied to this module |
Customer |
|
Follow-Up |
Responsibility |
|---|---|
|
Send meeting notes, action items, and relevant myOneTrust articles |
OneTrust |
|
Provide OneTrust support team information |
OneTrust |