Skip to main content

Importing controls into an existing program

Roles and permissions

The following roles can import controls into an existing program:

  • Administrators

  • Compliance managers

  • Users

Many Hyperproof program templates include sample controls to help you get started. However, if your organization has already developed its own set of controls, you can import them into Hyperproof.

Note

The steps below explain how to import controls into an existing program within your organization. If you want to import your own controls into the main controls list, refer to Importing your own controls.

Tip

Adding additional information does not overwrite existing data. During the import, Hyperproof searches for any exact data identifiers. If it doesn’t find any, it treats the data as new. If it finds a match, it updates the existing data.

Step One: Downloading the example CSV

The easiest way to start importing your own controls is by downloading Hyperproof’s example CSV. The example CSV provides the exact template for successfully importing controls into Hyperproof.

  1. From the left menu, select Programs.

  2. Select your program.

  3. Select the Controls tab.

    controls-program.png

  4. Click Import controls.

    The Import controls window opens.

  5. Click Download the example CSV.

Step Two: Editing the CSV

Replace the contents of the example CSV with your own controls. Be sure to follow the format of the example file to ensure that your controls are successfully imported.

Note

The CSV must contain ALL headings listed below even if they are optional. Keep in mind that headings are case-sensitive!

Heading

ID

Should contain a control ID that's unique to your organization. This field is required.

Tip: Control IDs play an important role in the import process and must be unique across your Hyperproof organization. If the control ID is not unique, this row is skipped.

Name

This is the name of the control. This is an optional field.

Description

This is the full definition of the control. It can be a multi-line string. This field is required.

Domain

Used to group related controls, e.g. Change management, PeopleOps, etc. This is an optional field.

Owner

Must be formatted as FirstName LastName (email address), i.e. Jennifer Cook (jcook@lunabtechnologies.org). This is an optional field.

Tip: If no control owner is provided, the control is assigned to the individual who imports the CSV.

Additional tip: The owner's email address must match the email address they use to sign in to Hyperproof.

Maps to requirement

A field for linking a control to an existing requirement. This field is required. Note that you can only map to requirements which exist in the program you are importing your controls into.

Tip: If mapping multiple control IDs to a requirement, enter the control IDs in a comma-separated format, i.e. 4.1.1, 4.1.2, 4.5.5.

Notes

A field for any notes related to the control. This is an optional field.

Implementation

A field for tracking the implementation of the control. This is an optional field.

Tip: Hyperproof recognizes the following implementation statuses: Unknown, Not started, In progress, and Completed.

Testing status

Used to track where the control is in terms of testing. This is an optional field.

Tip: Hyperproof recognizes the following testing statuses: Not tested, In progress, Effective, and Ineffective.

Scopes

Used to link a scope assignment to a control. Scope assignments can be linked to existing controls or to new controls. This is an optional field.

Tip: Make sure the heading is Scopes and the scope name matches the name in Hyperproof.

Additional tip: Currently, it's only possible to edit existing scope assignments via CSV import. Additionally, Hyperproof supports one scope per control in the CSV import. Improvements to the scope assignment import process are ongoing.

Custom fields

Below is a snippet of a sample import file.

example-csv-controls-program.png

Step Three: Importing the CSV

After you’ve made the necessary changes to the CSV, it can be imported into Hyperproof.

  1. Drag and drop the CSV file into the Upload CSV File field, or click Select file to upload to upload it manually.

  2. Click Import.

    Hyperproof checks the CSV to ensure that there are no errors. You’ll be alerted if Hyperproof encounters any errors.

  3. If Hyperproof didn’t detect any errors, click Next. If Hyperproof detected errors, do one or both of the following:

    1. First, use the Error viewer to identify the errors. Second, correct the errors directly in the CSV. This ensures that the CSV is up-to-date should you need to re-import in the future.

      Tip

      Use the forward and backward arrows to cycle through the errors. The Error viewer gives specific information on what needs to be corrected.

    2. Remove rows that contain errors by clicking Remove all rows with errors. Note that this doesn't remove any data in the actual CSV.

  4. Click Next.

    The CSV is imported.

In this section: