Proof on a control
There are two ways you can collect evidence (called proof in Hyperproof):
Manually, where you import proof and link it to a particular object, such as a control.
Automatically, where Hyperproof does the work for you.
Proof can be linked to objects like controls, labels, and tasks, or you can import proof at the organizational level to use later on. If you have a scenario where a single piece of proof (or evidence) needs to be linked to a single control, we recommend navigating to the control and uploading that proof directly to the control.
In this video, we'll go over how to add a single piece of proof to a control. We'll discuss how to add that proof using the Proof Picker and the different import options available in the Proof Picker.
The tutorial below is shown from the perspective of the administrator role with object permission as a manager. If you are in a different Hyperproof role or have a different permission, you may not have access to some of the areas shown, or they may be grayed out.
Click the arrow below to learn more:
Linking proof to a control
Linking proof to a control
From the left menu, select Controls.
Select the control that you want to link proof to.
Select the Proof tab.
Add your proof in one of the following ways:
Drag and drop files onto the proof grid.
Click Add proof and select one of the following:
My Computer - To use proof stored on your computer, click My Computer in the upper-left corner.
Cloud storage integration - To use proof stored in an integration, such as Drive, select the integration’s icon from the Add integration section in the bottom-left corner. Optionally, turn on LiveSync to automatically keep your proof up to date.
Paste a link - Select this option to use a website URL as proof. The URL is rendered as a “Link” file type in Hyperproof; the only information shown in the file is the URL.
Paste an image - Select this option to use a screenshot as proof. Take a screenshot (Cmd-Shift-5 on Mac, Shift-S on Windows), copy it to the clipboard, and then paste it in Hyperproof. Chrome users may need to allow this functionality if prompted by the browser (refresh the page after clicking Allow).
Existing proof - To reuse proof that already exists in your organization, select either Labels, Proof, My Controls, Vendors, Risks, or Programs from the left menu
Creating a label and adding it to a control
Labels are optional, but highly recommended, especially if you manage multiple compliance frameworks. You can create as many labels as you want, import as much proof as you need, and use and reuse labels across all of the controls in your organization. Labels are designed to help you organize and manage proof.
In this video, we'll discuss how to access the labels area on a control, how to create a label, how to apply it to a control, and how to link it to additional controls.
The tutorial below is shown from the perspective of the administrator role with object permission as a manager. If you are in a different Hyperproof role or have a different permission, you may not have access to some of the areas shown, or they may be grayed out.
Since our last update in March 2025, if you have a Hypersync on a label, you can now easily create a test on your control if you link the label with the Hypersync to your control. We recommend this as a best practice, so keep this in mind when setting up your organization.
A new Links tab is now available, consolidating all controls and requests previously found on the Details tab. You can also link any items directly from this tab. Please note that the video below is outdated due to this change.
Click the arrow below to learn more:
Linking a label to a control
Linking a label to a control
From the left menu, select Controls.
Select the control you want to link the label to.
Select the Labels tab.
Click Add labels.
The Add labels window opens.
Select the checkbox next to the label you want to link, and then click Confirm.
The label is linked to the object.
Control automations tab
On the Control Automations tab, you'll find a feature called Hypersyncs. Hypersyncs take the hassle out of collecting and organizing evidence. Save yourself and your team time by eliminating the manual process of searching for evidence, filing it away, and having to remember to update it before an audit.
In this video, we'll discuss Hypersyncs. We'll also talk about adjusting your automation settings. Note that the video also discusses repeating tasks that you can skip over, as they are not necessary to use a Hypersync.
The tutorial below is shown from the perspective of the administrator role with object permission as a manager. If you are in a different Hyperproof role or have a different permission, you may not have access to some of the areas shown, or they may be grayed out.
Since our last update in March 2025, if you have a Hypersync on a label, you can now easily create a test on your control if you link the label with the Hypersync to your control. We recommend this as a best practice, so keep this in mind when setting up your organization.
Click the arrow below to learn more:
Creating a Hypersync
Creating a Hypersync
From the Proof type drop-down menu, select the type of proof you want to collect.
Click Next.
The Configure workflow window opens.
By default, the Collect proof automatically checkbox is selected. Clear the checkbox if you don’t want Hyperproof to collect proof automatically.
From the Collect proof every…drop-down menu, select how often proof should be collected. Options include:
Day - Runs every day at 13:00 UTC.
Week - Runs on Mondays at 12:30 UTC.
Month - Runs the first day of the month at 12:00 UTC.
Select how you prefer to add proof, either by versioning or new files.
Click Next.
The Name this Hypersync window opens.
Enter a name for the Hypersync, and then click Save and Sync.
Linking controls to a request in an audit
In the audits area of Hyperproof, once you configure an audit, you'll find that the requests you imported for that audit are found on the requests tab. This area is very important in an audit because it's where you can manage the requests for your audit. In this area, we can link controls and labels and add proof to requests
To link a control to a request, first click on that request and navigate to the linked objects area. From there, you can link and search for the control you'd like to link.
Click the arrow below to learn more:
Linking an object to a request
Linking an object to a request
From the left menu, select Audits.
Select your audit.
Select the Requests tab.
Select the request you want to link an object to.
In the right pane, scroll to Linked objects.
Click the arrow in the Link button and do one of the following:
Select Link new
Select the object from the drop-down menu, and fill out the required fields (they differ depending on the object). Click Create.
Select Link existing.
Select the checkbox next to the object you want to link, and then click Link.
Issues on a control
To pass the audit, issues need to be remediated. Because remediation can take several steps, visibility of progress is absolutely vital.
Remediation can range from a quick fix to a multi-quarter project that needs to be tracked. At best, issues mean spending resources to fix a problem. At worst, they jeopardize a company’s entire future—losing a certification can mean not being able to do business at all. Because many organizations don’t discover issues until the audit is in progress, they are oftentimes left scrambling under severe pressure to implement a fix.
Because Hyperproof is a continuous compliance operations platform, issues can be discovered and addressed long before your organization enters its audit phase.
Click the arrow below to learn more:
Creating an issue
Creating an issue
From the left menu, select the tab that corresponds with the issue you want to link. For example, if you want to link an issue to a control, select the Controls tab.
Select the specific object. For example, if you want to link the issue to control ID 1234, select that control.
Select the Issues tab.
Click New.
Enter the following information:
Summary (required) - A summary of the issue and the potential result if it isn't remediated
Description - A detailed overview of the issue
Make issue private checkbox - Select this checkbox to make the issue private. Doing so restricts inheritance—only users explicitly added to the issue’s facepile can see the issue. Other users (such as members of affected objects) can see that the issue exists, but they’ll only see the issue ID. To access the issue, they’ll need to contact the issue manager(s).
Action plan - The plan to remediate the issue
Impact - The impact the issue has on your organization if it isn't resolved
Priority - The priority level for resolving the issue
Assignee - The individual who will work to remediate the issue
Effort level - The amount of effort it'll take your organization to remediate the issue
Business owner - The individual who owns the issue. Note that a contact can also be an owner.
Executive sponsor - The individual who is of senior level and ultimately responsible for overseeing the remediation of the issue
Due date - The date that the remediation is due
Discovered on - The date that the issue was discovered
Click Create.
The issue is created.
Affected objects on issues
It's important to monitor linked affected objects on issues, including issues on controls.
In the tutorial below, we'll walk through why this is the case, especially when it comes to our controls and the health of those controls.
The tutorial below is shown from the perspective of the administrator role with object permission as a manager. If you are in a different Hyperproof role or have a different permission, you may not have access to some of the areas shown, or they may be grayed out.
Click the arrows below to learn more:
Linking an additional affected object to an issue
Linking an additional affected object to an issue
From the left menu, select the tab that corresponds with the issue.
For example, if you want to link an additional affected object to an issue that's linked to a control, select the Controls tab.
Select the specific object that the issue is linked to.
For example, if the issue is linked to control ID 1234, select that control.
Select the Issues tab.
Select the issue.
In the right pane, click the arrow in the Link button next to Affected objects.
Select either Link new or Existing link.
If you select Link New, the Create New window opens. Select an object from the drop-down menu, name the object, and then click Create.
If you select Link Existing, the Link Objects window opens. Select the object or objects you want to link, then click Link.
The affected object is linked.
Linked risks on a control
Controls are the most common method of mitigating risks. They define the actions an organization needs to take to reduce threats, such as privacy and security breaches.
In Hyperproof, you have the option to include a mitigation percentage for controls linked to risks. By linking a control with a mitigation percentage to a risk, you indicate that you want to reduce the likelihood of the risk actually occurring by XX percent.
Note that the risk module is an optional feature in Hyperproof. If you have not purchased this feature, you will not be able to link a control to a risk.
Keep in mind, control health also affects risk health. If certain mitigation percentages are chosen and the control is at risk or critical, it will lower the risk health compared to a healthy control.
Click the arrows below to learn more:
Linking a control to a risk
Linking a control to a risk
From the left menu, select Risk.
Select the Risks tab.
Select the risk that you want to link the control to.
From the Details tab, click the arrow next to the Link button, and then select either Link new or Link existing.
If you selected Link new, the Create new control window opens. Enter a control ID (required), name, description, domain, and owner (required).
Click Create.
If you selected Link existing, the Link additional controls window opens. Select the checkbox next to the control you want to link. Optionally, use the filters in the right menu to narrow the scope of the listed controls.
Click Link selected controls.
Unlinking a control from a risk
From the Details tab, mouse over the control you want to unlink, and then click the Unlink icon.
Linking controls to a vendor
Controls can also be linked directly to a vendor in the vendor module. You can link or unlink controls from vendors at any time.
Click the arrows below to learn more:
Linking a control to a vendor
Linking a control to a vendor
From the left menu, select Vendors.
Select the Vendors tab.
Select the vendor to link to one or more controls.
On the vendor details, select the Controls tab.
Click the Add button.
The Link controls window opens.
Use the filters to find the control or controls to link to the vendor.
Choose the controls to link by selecting one or more checkboxes.
Click the Link selected controls button.
The controls are linked to the vendor.
Unlinking controls to a vendor
Unlinking controls to a vendor
From the left menu, select Vendors.
Select the Vendors tab.
Select the vendor where you want to unlink controls.
On the vendor details, select the Controls tab.
Hover over the control you want to unlink, and then click the Unlink icon.
On the confirmation message, click Confirm to unlink the control.
The control is unlinked from the vendor.
