Starting a Data Transfer Risk Assessment from the Hub list pages

Overview

The Data Transfer Residual Risk Score is calculated after a Data Transfer Risk Assessment is completed. This assessment provides clear insight into your data transfer risk at both the individual record level and the organisational level.

This article explains how to start a Data Transfer Risk Assessment from a Business Process or Data Inventory record, how to edit an assessment that is already underway, and how to download the International Data Transfer Risk Report once an assessment is complete.

What you can do
Start a Data Transfer Risk Assessment from a Business Process or Data Inventory record
Edit an in-progress assessment while it is in Open, In Progress, or In Review state
Download the International Data Transfer Risk Report as a PDF
Prerequisites
Active TrustArc account with Data Mapping & Risk Manager access
At least one Business Process or Data Inventory record exists in the system
At least one Data Transfer Assessment template is configured
Starting a Data Transfer Risk Assessment

To start a Data Transfer Risk Assessment, follow these steps:

1
From the Business Processes or Data Inventory list page, locate the record you want to assess.
📋 Note: Use the Search field or the Filter options (1) to locate the record quickly.
Business Processes or Data Inventory list page showing the Search and Filter options
2
To the right of the record, under the Data Transfer Assessment column, click Start Assessment (2).
Data Transfer Assessment column showing the Start Assessment button

The Start Assessment modal appears.

Start Assessment modal
3
Select an assessment template from the list, then click Start Assessment.
📋 Note: If the recommended template does not suit the type of assessment you need, click Select existing assessment to choose from existing assessments that match valid templates, including assessments not currently assigned to the record.

The system redirects you to the Assessment Manager setup page.

4
From the Edit Assessment page, complete the following sections as needed:
Assessment Details
Managers & Respondents
Users
Advanced Settings

For more information, see the Creating an Assessment section of the Assessment Manager User Guide.

5
Review the assessment and then publish it.
📋 Note: After the assessment is published, the Data Transfer Assessment status changes from Open to In Progress. You may need to refresh the Business Processes or Data Inventory list page to see the updated status.
Editing the Data Transfer Risk Assessment
📋 Note: You can only edit a Data Transfer Risk Assessment when it is in Open, In Progress, or In Review state.

To edit a Data Transfer Risk Assessment, follow these steps:

1
Under the Data Transfer Assessment column, click the assessment status (1).
Data Transfer Assessment column showing the assessment status link

The system redirects you to the Edit Assessment page.

📋 Note: If the assessment is in In Progress state and you are a respondent to the survey, the system redirects you to the Assessment Survey page instead.
2
From the Edit Assessment page, update the following sections as needed, then click Save changes:
Assessment Details
Managers & Respondents
Users
Advanced Settings

For more information, see the Creating an Assessment section of the Assessment Manager User Guide.

Downloading the International Data Transfer Risk Report
📋 Note: The report is only available for download when the assessment is in In Review or Approved state.

To download the International Data Transfer Risk Report, follow these steps:

1
Under the Action column, click the ellipsis menu (), then select Data Transfer Risk Report.
Action column showing the ellipsis menu with the Data Transfer Risk Report option

The report downloads as a .pdf file.

TrustArc ·  Data Transfer Risk Assessment  ·  support.trustarc.com