Release Notes - 2024-JUL-08
Added
Hyperproof EU instance is in managed rollout (MRO)
Additional programs will be added as needed.
Programs in Hyperproof EU are limited to the following:
NIST 800-53 Rev 5 - Full catalog
FedRAMP Rev 5
ISO 20000-1:2018
ISO 9001:2015
ISO 27001:2022
AICPA SOC2
See the Create EU Data Centers for customers who need to store proof in the EU idea in the Ideas portal.
See Hyperproof instances for more information.
Self-service reporting is GA
The Snowflake data warehouse enabling you to use best-in-class 3rd party reporting tools is now generally available to all Hyperproof customers. See Self-service reporting.
You can use your preferred tool (Looker, Tableau, Microsoft PowerBI, etc.) to connect to the data warehouse and build reports and dashboards or you can build simple reports and dashboards using Snowflake's BI app/data explorer at https://app.snowflake.com.
The data warehouse is synchronized twice daily (at 1200 and 2000 UTC) to ensure up-to-date reporting over a full data model of the Hyperproof business objects.
To get started, go to Settings → Self-service reporting and create service account credentials to connect to the Snowflake data warehouse for your organization.
Bulk delete proof
A new bulk delete option is available on the Proof page. You can use the Filter pane to filter by date range to find, select, and delete proof in bulk.
See the Filter and bulk delete proof idea in the ideas portal.
See Deleting proof for more information.
Improved
Filter pane
System-provided date fields can be filtered from the Filter pane using a date range filter. Examples:
Tasks: Closed on
Issues: Discovered on and Closed on
Vendor: Contract start and Contract end
Choose to filter for a specific date, between two dates (inclusive), before or on a specific date, or after or on a specific date.
Access reviews - Managed roll out
Added email notifications and reminders based on new Application reviews due and System updates due dates. See Access reviews email notifications and reminders.
When an access review is created, due dates are required for Application reviews and System updates.
When the access review is launched, moving it from Setup to In progress, Hyperproof generates a notification to all reviewers.
Notifications are sent to reviewers with outstanding reviews 7, 3, and 1 days before the Application reviews due date and every day after.
The day after the Application reviews due date, a notification is sent to all sysadmins.
Notifications are sent to sysadmins with outstanding system updates 7, 3, and 1 days before the System updates due date and every day after.
Added imports for one new application using the following Hypersync: Crowdstrike.
API updates
A new property, isPrivate, is available in the public Proof API.
Help Center
Added a new Best Practice guide with an in-depth explanation of how to leverage features in Hyperproof to streamline proof collection. See Collecting proof best practices.
Hypersyncs and integrations
Added a new Hypersync. Google Sheets - Managed rollout.
Brings in data from a Sheet, a Named range, or a Custom range.
Testable with automated control testing.
Data types for testing are determined by looking at the first 50 rows of data in the sheet.
See the Create and run automated tests against uploaded CSV file idea in the Ideas portal.
See Google Sheets proof types for more information.
Updated Hypersync: Jira- The Issue Details proof now includes Jira Activity history.
See the Tasks: Filtered View of Issues by Status Change idea in the ideas portal.
Program frameworks
PCI DSS 4.0 now includes a new version with more granular illustrative controls. These illustrative controls are the "test procedures" listed in the PCI DSS ROC report.
Microsoft SSPA DRP version 9.1 is now available. Organizations with previous versions can now update to this version using the Framework Update feature.
Addressed issues
Fixed an issue where some Contact users could not submit proof due and Hyperproof generated this error:
Error: <username> is no longer a member of any organization.
(Case # 00008624, 00008669)Fixed an issue where a user could not edit control parameter values on some FedRAMP controls. (Case # 00008585)
Fixed an issue when setting up a Snowflake account where the password was not masked. (Case # 00008580)
Fixed an issue with program health displaying as Critical after all requirements were completed and all controls were healthy. (Case # 00008444)
Fixed an issue where a repeating task template associated with an archived control remained active. (Case # 00008505)
Fixed timeout issues with the Jamf All Computer Groups and Computer Groups by ID proof type. (Case # 00008475)
Fixed an issue where some users could not bulk-assign tasks. (Case # 00008413)
Fixed an issue importing risk records where no error was displayed for duplicate IDs and the import process would not complete. (Case # 00008463)
Fixed an issue with the Hypersync for AWS where large numbers of records were causing the Asset Inventory proof request to time out. To address this issue, we added an optional filter to exclude terminated or stopped instances of AWS. (Case # 00008429)
Fixed an issue where some users couldn't link multiple controls to a single requirement. (Case # 00008479)
Fixed an issue exporting risks to an XLSX format when filters were applied. (Case # 00008571)
Fixed an issue where PDF files uploaded from Confluence couldn't be opened in the Proof viewer and were blank when exported from Hyperproof. The issue was caused by a security policy implemented in Confluence that prevented data from being exported. Now the upload fails immediately with a failure warning instead of creating blank proof. (Case # 00008583)
Fixed an issue where Contacts who clicked a link on a task assignment email got an error indicating they were not members of any organization. (Case # 00008624)
Fixed an issue with the integration for Jira where a 500 error was generated when users in Jira made comments and those users were not Hyperproof users. (Case # 00008665, 00008658)