Release Notes - 2024-APR-25

ServiceNow task integration is now available for all Enterprise plan customers! Streamline compliance workflows with a seamless bi-directional task synchronization, ensuring that compliance end-users can manage ServiceNow tasks efficiently within Hyperproof. See Hyperproof and ServiceNow. Updates include:

See the Tasks: ServiceNow task integration idea in the Ideas portal.

Improved Asana task integration by adding the option to filter projects by team. (Case # 00008226)

IEC 62443 4-1:2018 and 4-2:2019 is now available as a program - IEC 62443 4-1 and 4-2 are international standards series designed to secure industrial communication networks and systems. IEC 62443 4-1 focuses on secure product development lifecycle requirements. It outlines practices and procedures for developing and maintaining secure products, addressing aspects from specification and design to maintenance. IEC 62443 4-2 deals with technical security requirements for industrial automation and control systems components. It specifies how to secure components against unauthorized access and misuse, thereby ensuring the resilience and integrity of industrial operations. Together, these standards provide a framework for enhancing the cybersecurity of industrial environments.

ISO 42001 AI Management System is now available! ISO/IEC 42001 is an international standard that provides a framework for organizations to manage the ethical development, deployment, and governance of Artificial Intelligence (AI) systems. It details mandatory clauses and control requirements aimed at ensuring AI systems are developed and utilized in a manner that considers ethical implications, bias, transparency, and accountability. The standard includes guidance on organizational context analysis, stakeholder engagement, AI policy formulation, risk assessment processes, and internal audit mechanisms. Annex A of the standard further elaborates on specific requirements for AI system development and usage, covering aspects such as policies, resources, impact assessments, and data management. ISO 42001's applicability is intended for various industries and organizations aiming to adhere to responsible AI practices.

The Israeli Protection of Privacy Law and Regulations is now available as a program - The Israeli privacy laws, particularly those from 1981 (Protection of Privacy Law, 5741-1981), 2001 (Regulations Under the Protection of Privacy Law, 5761-2001), 2017 (Protection of Privacy Law Amendment, 5777-2017), and 2023 (further amendments in 5783-2023), establish a robust legal framework designed to protect the privacy and personal data of individuals. The 1981 law laid the foundation, establishing basic privacy rights and creating the framework for data protection, which prohibits the misuse or unauthorized sharing of personal data. Subsequent amendments and regulations, such as those in 2001, have updated the law to include specific guidelines on data security and the responsibilities of data controllers, adapting to technological advances. The 2017 amendment further tightened data security requirements, introducing obligations for notification of data breaches. Most recently, the 2023 amendments have focused on enhancing transparency and granting individuals greater control over their personal data, reflecting global trends towards stronger data protection and privacy rights.

FedRAMP rev. 5 parts and parameters, and SSP report, have now been fully updated - We've been working to align the parts and parameters of the FedRAMP rev. 5 program to exactly match the FedRAMP SSP report; this work is now completed and all clients have had the changes made directly to their programs.

Additionally, we've updated the SSP report ("Appendix A") to match the FedRAMP template.

NIST CSF 2.0 is LIVE!

StateRAMP rev. 5 is now available as a program - StateRAMP, short for State Risk and Authorization Management Program, is a security framework designed to enhance cloud cybersecurity across state and local government entities in the United States. It is based on the NIST 800-53, Rev. 5 standards, which are comprehensive guidelines that include best practice controls and sub-controls for cybersecurity. StateRAMP provides a structured pathway for service providers to demonstrate their compliance with rigorous security requirements through assessments conducted by Third Party Assessment Organizations (3PAOs). The program emphasizes continuous monitoring and includes a Security Snapshot feature that offers a less exhaustive, yet strategic assessment of a service provider's security posture against the NIST standards.