The CNIL methodology for privacy risk management provides organizations a way to identify risks that arise from their processing in order to identify the adequate measures to reduce them. OneTrust has adopted this approach and developed a fast and easy to implement tool that steps organizations through the review of context, controls, and risks to a decide whether to accept the manner in which the processing is planned to fulfill legal requirements and to treat risks, or to start the process again.