Issue introduction
In order to pass the audit, issues need to be remediated. Because remediation can take several steps, visibility of progress is absolutely vital.
Remediation can range from a quick fix to a multi-quarter project that needs to be tracked. At best, issues mean spending resources to fix a problem. At worst, they jeopardize a company’s entire future—losing a certification can mean not being able to do business at all. Because many organizations don’t discover issues until the audit is in progress, they are oftentimes left scrambling under severe pressure to implement a fix.
Because Hyperproof is a continuous compliance operations platform, issues can be discovered and addressed long before your organization enters its audit phase.
Click the arrow below to learn more:
Creating an issue
Creating an issue
From the left menu, select the tab that corresponds with the issue you want to link. For example, if you want to link an issue to a control, select the Controls tab.
Select the specific object. For example, if you want to link the issue to control ID 1234, select that control.
Select the Issues tab.
Click New.
Enter the following information:
Summary (required) - A summary of the issue and the potential result if it isn't remediated
Description - A detailed overview of the issue
Make issue private checkbox - Select this checkbox to make the issue private. Doing so restricts inheritance—only users explicitly added to the issue’s facepile can see the issue. Other users (such as members of affected objects) can see that the issue exists, but they’ll only see the issue ID. To access the issue, they’ll need to contact the issue manager(s).
Action plan - The plan to remediate the issue
Impact - The impact the issue has on your organization if it isn't resolved
Priority - The priority level for resolving the issue
Assignee - The individual who will work to remediate the issue
Effort level - The amount of effort it'll take your organization to remediate the issue
Business owner - The individual who owns the issue. Note that a contact can also be an owner.
Executive sponsor - The individual who is of senior level and ultimately responsible for overseeing the remediation of the issue
Due date - The date that the remediation is due
Discovered on - The date that the issue was discovered
Click Create.
The issue is created.
Affected objects on issues
As mentioned above, it's important to monitor linked affected objects on issues. In the tutorial below, we'll walk through why this is the case.
Note that this video tutorial uses this example with controls; however, you can also link vendors to an issue from the work items tab when creating an issue.
The tutorial below is shown in the administrator role with organizational permission as a manager in Hyperproof. If you are in another role in Hyperproof or have a different permission, you may not have access to some of these areas shown, or they may be greyed out.
Click the arrow below to learn more:
Linking an additional affected object to an issue
Linking an additional affected object to an issue
From the left menu, select the tab that corresponds with the issue.
For example, if you want to link an additional affected object to an issue that's linked to a control, select the Controls tab.
Select the specific object that the issue is linked to.
For example, if the issue is linked to control ID 1234, select that control.
Select the Issues tab.
Select the issue.
In the right pane, click the arrow in the Link button next to Affected objects.
Select either Link new or Existing link.
If you select Link New, the Create New window opens. Select an object from the drop-down menu, name the object, and then click Create.
If you select Link Existing, the Link Objects window opens. Select the object or objects you want to link, then click Link.
The affected object is linked.
Using issues with vendors
To add an issue to a vendor, you must first navigate to the Work Items tab to create the issue. During the creation of the issue, you can then link the vendor or vendors under the affect objects section while creating the issue.
Click the arrow below to learn more:
Linking vendors to an issue
Linking vendors to an issue
From the left menu, select the Work Items tab.
Click issues at the top.
Click new or import if adding in a new issue.
If linking to an existing issue click on an issue from the list.
If creating new click add source.
If linking to an existing issue navigate to Affected objects and search and link a vendor.
Now the vendor is linked to this issue.
