Vendor Management Onboarding
PLNU has a vendor management program in place to manage suppliers, who are also known as vendors. Vendor management includes selecting vendors, negotiating contracts, reducing vendor-related risk, and ensuring service delivery.
PLNU utilizes a solution called OneTrust to perform its vendor management processes.
Starting the process
1. To begin onboarding a vendor, visit https://pl.nu/OneTrust and sign in with your PLNU OneLogin email address.
. 
2. Click Launch under New Vendor Request
3. Please take the time to read the Welcome message and then proceed by clicking the arrow in the bottom right-hand corner of your screen.
Note: The new vendor onboarding form is designed to be dynamic and responsive. As you progress through the form, additional questions may be presented based on your earlier responses, while irrelevant questions will be omitted. This allows us to tailor the onboarding process, ensuring a more efficient and streamlined experience.
Vendor Details
4. Enter the name of your vendor. If you only see an option with “Add option:” in front of the vendor name, please select that one. If you see a match in the drop-down, that vendor is already in OneTrust. Please skip down to New Engagements below for furhter instructions.
5. Select a date for when you would like to have your vendor onboarded.
6. Enter a summary of the business purpose of the proposed vendor.
7. Provide the name of the supplier sponsor.
The Supplier Sponsor is the University employee who will be the primary point of contact between the supplier/vendor.
Screening Questions
8. If you answer No to question 2.1, question 2.2 will appear. If the answer to 2.2 is No, question 2.5 will appear up.
. 
9. If you answer Yes to question 2.1, question 2.3 will appear to provide the agreement. An attachment is required.
For question 2.3 Be sure to choose the “Add:” option that appears below when you are done typing.
10. Question 2.6 is required to be acknowledged based on the approval and signatory threshold in the screen shot above.
11. Question 2.7, If the contract threshold is met based on the criteria, please select Yes. If not, choose no.
12. Questions 2.8, 2.9, and 2.10 helps identify if the vendor is considered a technology vendor.
13. If question 2.10 is yes, 2.11 will appear asking if the vendor is PCI compliant. If this question isn't applicable, change the answer to 2.10 to No.
14. If the answer to 2.11 is Yes, question 2.12 will appear asking for the PCI AOC to be attached.
Additional Questions
Answer any remaining questions in the next section.
16. When you have answered all the questions and see the text “Click Submit to submit this request”, click on the Submit button at the bottom right-hand corner of the page.
Note: If this button is grayed out, you may have unanswered questions. On the left-hand side of your screen, it should let you know where required questions still need to be answered with a red tag with a white asterisk.
Engagements
Rejected Requests
What happens next
After submitting the form, the vendor will go through any relevant reviews by internal service departments in IT, Enterprise Risk, and Legal. You will receive email notifications from OneTrust when the process advances through these review steps.
Here is the work flow that the onboarding process will follow:
