Unifying Privacy, Risk, and Data Governance in One Platform

IT Risk Management

• Configure risk registers, assets, and assessment workflows.
• Define risk scoring methodologies aligned to Client frameworks.
• Configure issue management and remediation workflows.
• Validate configurations for audit readiness.
• Deliver administrator training for TRC.

Timeline: 6-8+ Weeks

Value: $32,000+

Compliance Automation

• Technical assistance, troubleshooting, and best practices for the Compliance Automation product.
• Configure regulatory framework(s) within OneTrust.
• Map controls to applicable frameworks.
• Configure evidence collection and review workflows.
• Define roles, responsibilities, and approval paths.
• Validate control mappings and evidence schedules.
• Deliver administrator training for Compliance Automation.

Timeline: 4-8+ Weeks

Value: $14,000+

Third Party Management

Third Party Risk Management & Risk Exchange

• Configure vendor tiering, onboarding, and due diligence workflows.
• Configure questionnaires, scoring models, and remediation tracking.
• Define approval and escalation workflows.
• Onboard up to an agreed upon number of vendors during implementation.
• Deliver administrator training for TPM.
• Enable Risk Exchange connectivity.
• Configure ingestion of shared assessments and risk signals.
• Align exchanged data with internal vendor profiles.
• Deliver administrator training.

Timeline: 8-12+ Weeks

Value: $40,000+

Third Party Due Diligence

• Configure vendor tiering, onboarding, and assessment including conditional logic.
• Configure attribute grouping, routing, vendor workflow, and automation rules.
• Build out and customize one vendor dashboard.
• Integrate Client’s OneTrust tenant with Dow Jones.
• Deliver administrator training.

Timeline: 4-8 Weeks

Value: $30,000+

Cookie Consent

Government regulation related to customer data privacy—GDPR, CASL and CCPA, among others—has increased in recent years. That coupled with the impending death of the third party cookies means capturing first party data and obtaining consent could mean the difference between successfully engaging your customers or seeing reduced customer interactions.

Our OneTrust cookie consent and preference implementation packages are for businesses of all sizes and maturity. We take the stress out of compliance with a user-friendly experience and customization to match your brand.

• Configure cookie banner and preference center for required geolocation rule combinations.
• Style banners and preference centers in alignment with Client brand guidelines.
• Execute cookie scans for required domains using OneTrust scanning technology.
• Deploy OneTrust scripts across in-scope digital properties.
• Modify or provide guidance on tag configurations to enforce consent requirements.
• Validate cookie categorization, consent enforcement, and banner behavior.
• Deliver administrator training for the Cookie Consent package.

Timeline: 6-8 Weeks

Value: $12,000+

Privacy

Data Mapping & Assessments

• Configure data inventories, assets, and processing activities.
• Populate Records of Processing for in-scope business processes.
• Map relationships between systems, data elements, and processing purposes.
• Validate configurations against documented implementation requirements.
• Deliver administrator training for the Privacy Automation platform.

Timeline: 6-8 Weeks

Value: $32,000+

Data Subject Access Request Automation

Zirous offers tailored OneTrust DSAR implementation packages for businesses of all sizes and maturity, helping organizations to capture, centralize and govern data subject access requests.

• Design the DSAR intake and fulfillment architecture.
• Configure intake forms and X workflows.
• Apply jurisdiction or site-specific processing rules.
• Integrate DSR workflows with downstream systems.
• Configure incident response and exception handling templates.
• Validate end-to-end request processing and audit trail generation.
• Deliver administrator and operational training for the DSR product.

Timeline: 6 Weeks

Value: $16,875+

Iowa Consumer Data Privacy Act

On 28 March 2023, the Governor of Iowa, Kim Reynolds, signed the Act relating to consumer data protection (‘ICDPA’), making Iowa the sixth US State to adopt a comprehensive data privacy law. In line with other US State privacy laws, the ICDPA introduces requirements related to the processing of personal data, establishes definitions including biometric data, the sale of personal data, as well as sensitive data, and provides consumers with rights including the right of access and the right to opt-out of targeted advertising and the sale of personal data, among other things.

The Iowa Consumer Data Privacy Act (ICDPA) goes into effect and time is running out to ensure your organization is fully compliant. If you’re feeling overwhelmed by the thought of complying with this new law, we’ve got you covered. As a OneTrust partner we can help you ensure compliance with the ICDPA and other data privacy regulations with our comprehensive suite of privacy management tools.

Get prepared and compliant with a consent and management platform.