Skip to main content

Evaluating controls , requirements , and risks

Written by Hyperproof Support
Updated this week

Roles and permissions

The following users can evaluate controls, requirements, and risks:

  • Anyone with manager permissions for the evaluation

You’ll do the majority of your assessment work in the Evaluations tab. From here, you can assess your controls, requirements, or risks and record your findings. You can also assign evaluation work to different members of your team. As always, you can communicate with team members about a particular evaluation via the Activity Feed.

Tip: Active evaluations can also be accessed via Work items. From the left menu, select Work items, then select the Evaluations tab.

For more information, see the Tutorial videos at the bottom of the page.

To evaluate controls, requirements, or risks:

  1. From the left menu, select Assessments.

  2. Select your assessment.

  3. Select the Evaluations tab.

    evaluations-tab-generic.png

    A list of evaluations corresponding to the assessment’s controls, requirements, or risks is displayed.

  4. Select the evaluation you want to assess.

  5. From the right pane, do any or all of the following:

    1. Change the status of the evaluation

      • Not started - Work on the evaluation has not yet begun.

      • In progress - The evaluation is underway.

      • Submitted - The evaluation has been submitted for review.

      • In review - The organization is reviewing the evaluation.

      • Closed - The evaluation has been canceled.

      • Approved - All information in the evaluation has been verified and accepted.

      Tip: In a risk assessment, the evaluation status is located in the upper-left area of the screen. In control and requirement assessments, the evaluation status is located in the upper-right.

    2. For control and requirement assessments, add or edit the evaluation reference. Note that Evaluation 1 and Evaluation 2 in Assessment 1, for example, cannot have the same reference value, but Evaluation 111 in Assessment 2 and Evaluation 1 can. The value can be empty; this does not affect uniqueness.

    3. For risk assessments, expand the Research section to link a research item

    4. Enter a description of the evaluation

    5. Change the evaluation assignee. This can be an individual user or a group.

    6. Set the evaluation priority

    7. Enter the due date

    8. Enter your observations

    9. View the evaluation source

    10. Expand the Evaluating section to link objects (e.g., labels), tasks, proof, or related issues

      Tip: Proof that is indirectly linked to the evaluation is shown with an Indirect link icon.

      evaluations-indirect-link.png

    11. Click the facepile in the right pane to manage user permissions for the evaluation

      • Manager - Can manage and share content, and manage object members and settings.

      • Contributor - Can share, add, and remove files from objects where they are a member.

      • Viewer - Can view information about objects where they are a member or have inherited access.

    12. Communicate with team members via the Activity Feed

Tip: Looking to score controls (either numerically or categorically)? Create a custom field on your evaluations.

Tutorial videos

Requirement assessments and evaluations

Control assessments and evaluations

Did this answer your question?