Skip to main content

Linking evaluation proof to controls, requirements, or risks

Roles and permissions

The following roles can link back proof:

  • Anyone with manager or contributor permission for the proof, manager permissions for the assessment, and manager or contributor permission on the control, program, or risk.

Should the need arise to move evaluation proof out of an assessment, a user can easily link the proof to the controls, requirements, or risks linked to the assessment.

Note: Users must have sufficient privileges to perform this action. If a user is not a member of the risk, control, or program associated with the requirement, those objects are skipped over in the link-back process.

Attachments are not considered proof and are not linked back to evaluation objects such as controls, requirements, or risks.

Linking evaluation proof to controls or requirements

  1. From the left menu, select Assessments.

  2. Select your assessment.

  3. Select the Evaluations tab.

    evaluations-tab-generic.png

  4. Select the checkbox or checkboxes next to the evaluations with the proof you want to link back.

  5. Click Link back proof.

    assessments-link-back-proof.png

    The Review and confirm window opens.

    Note: This action can't be easily undone! If you change your mind, proof needs to be manually unlinked from the linked controls or requirements.

    Things to keep in mind:

    • If the proof is already directly linked to the control, risk, or requirement, it is not duplicated.

    • The latest version of proof is linked to the control, risk, or requirement.

      • For example, the latest version of a piece of proof in Hyperproof is version 7, but version 5 is linked to the evaluation. When the proof is linked to the control or requirement, version 7 is the one linked.

    • Archived evaluations are not included in the link-back process. To take this action, you must open the archived section and select those evaluations in addition to or separately from the active evaluations.

    • You can't link proof to labels linked to the evaluation. Labels aren't included in the link-back process for evaluations.

  6. Click Confirm.

    The proof is linked to the selected controls, risk, or requirements.

Did this answer your question?