Tailor and distribute privacy and security assessments, track and mitigate risks, and generate appropriate record keeping reports
CSA Tools
Vendor Risk Management
Automate the Vendor Risk Management Lifecycle for Compliance with Global Privacy Laws
The CSA-OneTrust Vendor Risk Management (VRM) tool automates the entire vendor management lifecycle, including onboarding and offboarding vendors, triaging vendors, populating vendor information and monitoring the vendor risk lifecycle, all while maintaining records for accountability and compliance purposes.
The tool is pre-populated with the CSA CAIQ framework, self-assessment attestation capabilities using the CSA GDPR Code of Conduct and built-in CSA Common Controls Matrix (CCM).
The CSA-OneTrust VRM tool enables organizations to:
- Choose from pre-populated CSA assessment templates
- Modify existing templates or create custom questionnaires
- Distribute assessments internally and to external vendors
- Populate vendor information from Vendorpedia database
- Identify, track and mitigate vendor risks through workflows
- Maintain records for accountability and compliance purposes
Unlimited Vendor Assessments | Up To 50 Vendors
Create Your OneTrust Account
In addition to the CSA-OneTrust VRM tool, you’ll also receive access to the following free tools available in the OneTrust privacy management platform:
Assessment Automation
Data
Mapping
Maintain and update data flows, applications, and processing activities to meet record keeping obligations, including GDPR Article 30
Cookie
Consent
Manage user consent and preferences on your website with adaptable settings for various consent standards
Data Subject Requests
Capture data subject requests, manage fulfillment workflows, securely handle responses securely, and maintain records of request fulfillment
Assessment Automation |
Data
|
Maintain and update data flows, applications, and processing activities to meet record keeping obligations, including GDPR Article 30
Cookie
|
Manage user consent and preferences on your website with adaptable settings for various consent standards
Data Subject Requests |
Capture data subject requests, manage fulfillment workflows, securely handle responses securely, and maintain records of request fulfillment