Issue introductions
In order to pass the audit, issues need to be remediated. Because remediation can take several steps, visibility of progress is absolutely vital.
Remediation can range from a quick fix to a multi-quarter project that needs to be tracked. At best, issues mean spending resources to fix a problem. At worst, they jeopardize a company’s entire future—losing a certification can mean not being able to do business at all. Because many organizations don’t discover issues until the audit is in progress, they are oftentimes left scrambling under severe pressure to implement a fix.
Because Hyperproof is a continuous compliance operations platform, issues can be discovered and addressed long before your organization enters its audit phase.
Creating and monitoring an issue on a risk
Issues can be created in the work items area or directly on a risk. When you click on a risk, you can navigate to the issues tab to create and monitor issues tied to that risk from this area.
Click the arrow to learn more below:
Creating an issue
Creating an issue
Click on the Risks tab.
Click the specific risk.
Select the Issues tab.
Click New or Click on an existing issue.
Enter the following information:
Summary (required) - A summary of the issue and the potential result if it isn't remediated
Description - A detailed overview of the issue
Make issue private checkbox - Select this checkbox to make the issue private. Doing so restricts inheritance—only users explicitly added to the issue’s facepile can see the issue. Other users (such as members of affected objects) can see that the issue exists, but they’ll only see the issue ID. To access the issue, they’ll need to contact the issue manager(s).
Action plan - The plan to remediate the issue
Impact - The impact the issue has on your organization if it isn't resolved
Priority - The priority level for resolving the issue
Assignee - The individual who will work to remediate the issue
Effort level - The amount of effort it'll take your organization to remediate the issue
Business owner - The individual who owns the issue. Note that a contact can also be an owner.
Executive sponsor - The individual who is of senior level and ultimately responsible for overseeing the remediation of the issue
Due date - The date that the remediation is due
Discovered on - The date that the issue was discovered
Click Create.
The issue is created.
Affected objects on issues
As mentioned above, it's important to monitor linked affected objects on issues. In the tutorial below, we'll walk through why this is the case, especially when it comes to our controls and the health of those controls.
The tutorial below is shown in the administrator role with organizational permission as a manager in Hyperproof. If you are in another role in Hyperproof or have a different permission, you may not have access to some of these areas shown, or they may be greyed out.
Click the arrow below to learn more:
Linking an additional affected object to an issue
Linking an additional affected object to an issue
From the left menu, select the tab that corresponds with the issue.
For example, if you want to link an additional affected object to an issue that's linked to a control, select the Controls tab.
Select the specific object that the issue is linked to.
For example, if the issue is linked to control ID 1234, select that control.
Select the Issues tab.
Select the issue.
In the right pane, click the arrow in the Link button next to Affected objects.
Select either Link new or Existing link.
If you select Link New, the Create New window opens. Select an object from the drop-down menu, name the object, and then click Create.
If you select Link Existing, the Link Objects window opens. Select the object or objects you want to link, then click Link.
The affected object is linked.
