Release Notes - 2025-AUG-21

Updated! Hypersync for CrowdStrike. Support for the gov instance of CrowdStrike.

Updated! Hypersync for Microsoft Entra ID. The List of Users and List of Groups proof types now have a Status field with the values active or deleted.

Updated! Hypersync for Okta.

Updated! Hypersync for Jira and Hypersync for Jira Cloud. Added an Issue type filter to the List of Issues proof that allows you to filter for All Issue Types or Epics.

Updated! Hypersync for SentinelOne. Added the ability to send a list of users to an access review.

Updated framework: Webtrust

Webtrust Principles and Criteria has now been merged into a single program, and all standards within it are updated. It provides a cohesive and adaptable compliance framework that organizations can adopt to ensure the integrity and trustworthiness of their public key infrastructure (PKI) operations. It includes foundational guidance for Certification Authorities (CAs) to establish sound governance, certificate lifecycle management, and operational controls. The framework encompasses criteria for baseline SSL/TLS issuance and robust network defenses, as well as enhanced validation requirements to verify identity and certificate integrity for EV SSL certificates. It also covers assurance for code signing and S/MIME certificates, reinforcing trust in software and secure communications. Broader system resilience is addressed through network and infrastructure security standards, while specific support exists for verified mark certificates that embed brand or logo identity. Additionally, guidance is provided for Registration Authorities operating in support of CAs. Altogether, this suite of principles offers a comprehensive, flexible foundation that any organization can customize into a PKI compliance program.

Updated framework: HIPAA

Health Insurance Portability and Accountability Act (HIPAA) has been updated to include a new set of content. Hyperproof has added 173 new requirements to its HIPAA program, incorporating recent final rules from the Department of Health and Human Services (HHS) and the Federal Trade Commission (FTC). This major update includes the HIPAA Privacy Rule to Support Reproductive Health Care Privacy, which establishes strong protections for protected health information related to reproductive care by prohibiting certain uses and disclosures and adding new attestation requirements. It also integrates the 21st Century Cures Act's Information Blocking regulations (45 CFR Part 171), outlining exceptions, disincentives, and transparency requirements. Additionally, the update aligns 42 CFR Part 2 requirements for substance use disorder records more closely with HIPAA and incorporates the FTC's Health Breach Notification Rule (16 CFR Part 318) for entities not covered by HIPAA.

Illustrative controls for this program have also been updated and expanded. The updated HIPAA program transforms its control set by replacing the previous granular, interpretive controls with a more authoritative and comprehensive structure. This new version uses direct citations from the HIPAA regulations for improved traceability and integrates the nationally recognized NIST SP 800-53 and NIST SP 800-66r2 frameworks for implementation guidance. Furthermore, the program's scope has been significantly expanded to include new regulations such as the 21st Century Cures Act's Information Blocking rules, 42 CFR Part 2 for substance use disorder records, and the FTC's Health Breach Notification Rule, resulting in a more robust and legally defensible compliance program.To use these updated controls, select the requirement, then select the "Controls" tab of that requirement. Select "Create new control" then select the template on the right.