Release notes

• Access the Meeting Book Viewer with a single click using the Open book button on the home page and workroom page.

• As a System Admin or an editor, you can now update a book by using the Book builder button on the home page and workroom page.

• The More options menu (three dots) next to the Book builder button provides admins with options to add attachments to an event, as well as to edit, copy, or delete the event.

Learn more

Restrict questionnaire anonymous links access

You can now restrict access to the anonymous links for event report and survey tables questionnaires, limiting them to specific user (Launchpad and Workflow) groups. This enhancement allows you to securely share these links while still providing the flexibility to share them with anyone, if required.

Learn more

Enhanced activity logging

We have improved activity logging to include vulnerability-specific actions in the downloaded activity logs, in addition to the existing asset and record logs.

Learn more

Lock activity data during ESG audits

As an administrator, you can lock your data for a specific period of time (maximum duration till a year) during an ESG audit to ensure its integrity and prevent unauthorized changes.

Learn more

New login experience

Diligent One now uses OIDC (OpenID Connect) for authentication, a widely accepted security standard that ensures the platform adheres to modern and secure best practices.

The login page address is updated to oidc.highbond.com, replacing accounts.highbond.com.

TEC-4382

Use the dashboard templates provisioned by Diligent One, create analyses, and map your organization’s datasets with them.

Learn more

TEC-4884

Personalize the Diligent One Platform landing page using the Customize page option.

Learn more

Schedule records from Risk Manager objects

Create and manage schedules to trigger records from Risk Manager objects.

Learn more

• New widgets.

• Attach files has a different component to drag and drop files.

• Completing a test now uses radio buttons.

• To change the next reviewer for the test plan after completing the previous step, select Change.

• Confirmations and Adding issues are now in a side panel.

• Filtering and Finding Risks and Controls are now in the sidebar.

Phased upgrade of the version of Python used by Robots now complete

On 26 October 2024, Robots support for Python 3.8 and older versions of associated libraries ended. Python 3.11 is now the only option for running scripts in Robots.

To avoid possible disruption of your automated processes, you should verify that all scheduled production scripts run in the Robots Python 3.11 environment, and produce correct output.

Production or development scripts that have not been transitioned to Python 3.11 may still run, but cannot be guaranteed to run. Or they may run, but produce incorrect output.

Learn more

Customized asset list view To ensure consistency, your customized asset list view is saved in the database and automatically loads the next time you open the asset list page. Learn more

Connect static Dashboard Snapshots to a Boards site - You now have the option to generate a Dashboard Snapshot to provide static dashboard data to stakeholders when connecting to a Boards site. Previously, the only option was to connect dashboards with changing data that could impact the values of the reports / metrics within the shared dashboard. To help ensure that the correct data is presented in dashboards, you can connect a Dashboard Snapshot to a Boards site instead of the dynamically updating dashboard.

Learn more

The Diligent One Marketplace introduces an enhanced look and feel for Toolkits, providing a more streamlined and intuitive experience. The Toolkits interface includes:

• A unified tab to access all toolkits in one place.

• An option to request information for toolkits that require purchase.

• A search bar and filter options for ease in navigation.

• A new Installed items button to easily view all the installed toolkits.

Learn more

Access working files directly in the Robots script editor The new Working data panel in the script editor provides direct access to all stored working files in a robot, and allows you to upload additional working files. The file functionality is identical to the existing Working data tab, but with the added convenience of easy access without needing to leave the script editor.

The Working data panel also includes labor-saving features that automatically produce the HCL load_working_file() method with a specific file name prefilled.

Learn more

Enhancements in email notification service

• Custom domain configuration: You can now send email notifications for Results and Storyboards from your own domain, ensuring DMARC compliance. For assistance, contact your Diligent representative.
• Template upgrades: The templates for notifications are enhanced for scenarios such as record assignments and storyboard sharing. These templates offer a better look, have reorganized content, and the action buttons are easier to find.

  Note

  The template upgrade can affect email rules. Review and adjust the rules based on the subject or body text.

• Enhanced display of Toast Message while Vulnerability Data Import in progress To prevent users from clicking the Start Manual Import button during data import from Tenable, the button is disabled. The import progress and its status is indicated through blue, green, and red outlined text boxes. Learn more

• SLA Calculation Enhancement To ensure accurate SLA date calculation, the system prioritizes the selected Finding severity value. The SLA calculation logic is enhanced to use alternate metrics, if the selected score is unavailable. If none of the scores are available, the due date is not calculated. Learn more

• Deleted Findings To maintain data efficiency, findings that are closed and older than six months are automatically deleted.

• Findings with Overdue status To maintain accuracy, the Overdue status is updated whenever you calculate the SLA using the Execute SLA Calculation button and refresh the due dates for all findings. Learn more

• Updated discrete asset list from Tenable To ensure synchronization, discrete assets deleted at Tenable, are removed from the Discrete Asset List in Asset Manager. The Discrete Asset List displays only active assets.

Learn more

New metadata fields in Control performance > Control tasks table

We've added the following metadata fields to the Control tasks table in Control performance analysis:

Control Owner, Control Owner Email, Frequency, Control Method, Prevent or Detect, Control Type.

Learn more

Tenable VM integration with Asset Manager

We've integrated Tenable VM with Asset Manager to import vulnerability data and display it on a comprehensive dashboard. This integration provides you with real-time insights into the security posture of your assets, so you can prioritize vulnerabilities based on their risk levels.

Learn more

Robots upgrade to Python 3.11

Diligent is upgrading the version of Python used by Robots, as the Python Software Foundation has announced that Python 3.8 is officially end-of-life on 14 October 2024.

This upgrade is being done in phases. The changes from July 12, 2024 are as follows:

HighBond robots and Workflow robots: 

• In the Robots home page, a table appears listing all the robots with an activated script containing Python code that will soon become obsolete.
• A warning icon appears on the robot with an activated script containing Python code that will soon become obsolete. This icon disappears once you upgrade the robot to the latest package and activate the script.

Learn more

Activity Center dashboard authoring is now available to GovCloud and DFAS customers

Easily leverage Projects app data visualizations in analysis that you can publish as a dashboard. Optionally, you can share your streamlined data findings.

• Datasets: Build dashboards from Projects app datasets.

• Analyses: Curate your analyses by adding visuals, filters, and insights to deliver easy-to-consume data findings. Publish your analysis as a dashboard that you can optionally share.

• Share: With a Professional Subscription and Reports access as an Administrator or Writer, you can share your dashboards with other users in your organization.

Learn more

Robots upgrade to Python 3.11

Diligent is upgrading the version of Python used by Robots, as the Python Software Foundation has announced that Python 3.8 is officially end-of-life on 14 October 2024.

This upgrade is being done in phases. For more information about the upgrade schedule, see the release notes of April 2024 and December 2023.

The changes from July 4, 2024 are as follows:

HighBond robots and Workflow robots

• You cannot downgrade scripts to Python 3.8 when opened in the Robots script editor.

• You cannot upload, commit, or activate scripts that are incompatible with Python 3.11 (HCL 3.0.*). This rule also applies to uploading and activating scripts through APIs or toolkits.

You are advised to thoroughly review the script, make essential modifications to ensure seamless compatibility, and verify the output before committing.

During this transitional phase, Highbond/Workflow Robots will support both Python 3.8 and 3.11 for executing scheduled Robots scripts until October 14th, 2024.

Learn more

View the activity log for all the scoring activities performed for risks and assessments.

Learn more

API token security enhancement for existing API tokens

As a security best practice, existing tokens (created before November 24, 2023) cannot be copied. You only have access to tokens when they are first created for the purpose of saving them in a secure place for future use. They cannot be accessed at a later date from the Diligent One Platform. In the event that a token is lost, a new one can be created.

Learn more

Associate organizational units with library objects such as risks, controls, processes, and objectives in Risk Manager, and view the relationship in the details page. For more information, see:

• Working with Risks

• Working with Controls

• Working with Processes

• Working with Objectives

New roles in Robots

We've added two new roles to the Robots app:

• Developer A developer can work with a robot in development mode and commit new script versions.
• Read-only A read-only user can work with a robot in production mode and view the task runs.

These roles will help streamline access control and improve collaboration within the app.

Learn more

Policy Manager has two new features:

• Bulk upload of new documents

• Bulk update of metadata to existing policies

Learn more

Enhanced script editor interface for improved usability

We've reorganized the buttons and icons in the script editor. Now, it's much easier to distinguish between buttons like Manage Variables or Ask AI and icons specific to cells such as add, run, or delete.

The realignment provides clearer visual cues, helping you navigate the script editor with ease.

Learn more

On the Controls page, you can update control activities such as walkthroughs, tests, and test plans in bulk.

Learn more

From the Controls page, users can sign off on multiple cards in bulk.

Learn more

Robots upgrade to Python 3.11

Diligent is upgrading the version of Python used by Robots, as the Python Software Foundation has announced that Python 3.8 is officially end-of-life on 14 October 2024.

This upgrade is being done in phases. For more information about the upgrade schedule, see the release notes of December 2023.

The changes from April 4, 2024 are as follows:

• HighBond robots and Workflow robots

  • Newly created scripts run in the latest Python version with the corresponding libraries (Python 3.11, Pandas 2.2.0, and Requests 2.31.0). No other option exists.
  • When opened in the Robots script editor, scripts created before the Python upgrade (Python 3.8, Pandas 1.2.4, and Requests 2.26.0) default to running in the latest Python version with the corresponding libraries (Python 3.11, Pandas 2.2.0, and Requests 2.31.0).

    The script editor provides an option for manually downgrading existing scripts to run in Python 3.8, until the end of June 2024.

• Note regarding HighBond robot scripts upgraded to Python 3.11 after December 2023

  • If you have opened the scripts and committed them in Python 3.11 after December 2023 but before April 4, 2024, then the Python version of those scripts is Python 3.11, Pandas 1.2.4, and Requests 2.26.0.
  • After April 4, 2024, when opened in the Robots script editor, these scripts default to running in the latest Python version with the corresponding libraries (Python 3.11, Pandas 2.2.0, and Requests 2.31.0).

    The script editor provides an option for manually downgrading existing scripts to run in Python 3.11, Pandas 1.2.4, and Requests 2.26.0, until the end of June 2024.

  Learn more

New AI Script Assistant in Robots

We have added a chat-based artificial intelligence utility to the Robots script editor.

The AI Script Assistant is a major addition to the scripting tools available in Robots. The Script Assistant can significantly accelerate your script development and debugging work by providing information about Python, HighBond Command Language (HCL), and the HighBond API, including code snippets.

As you interact with the AI Script Assistant, the conversational history is preserved and used as context to make subsequent answers more relevant. Chat sessions and context are saved with scripts (segregated by user) and available for future use.

Data you enter in the AI Script Assistant is fully secure. It is never exposed outside the Diligent One Platform, or used by Diligent when training the model underlying the artificial intelligence capability.

Phased rollout

We're conducting a phased rollout of the AI Script Assistant in Robots. Initially, the capability is available to organizations using the Diligent One Platform in these AWS regions:

• North America (US)

• Europe (Germany)

• Asia Pacific (Tokyo)

• Asia Pacific (Singapore)

English-only initially

We're also taking a phased approach to language support.

Currently, the AI Script Assistant supports questions and responses in English. Using languages other than English is not yet officially supported and gives inconsistent results.

Learn more

Launchpad UI refresh and navigation upgrade - Launchpad now delivers an easier and more consistent navigation experience throughout the Diligent One Platform with the following upgrades:

• Updated UI with our Diligent brand colors for a modern look and feel
• Global navigation for a consistent experience throughout the platform
• Streamlined Resource Center components conveniently located in the new navigation

Access Resource Center components via the following locations:

• Academy is now a tile under Education & Certifications.
• Connect (formerly Community) is part of the Help & Support menu in the new sidebar.
• Help docs and Support are part of the existing Help and Support menu.
• Downloads can be accessed from the Analytics tile.

Learn more

Introducing search bars in user lookup fields

We've added a search bar to the user lookup fields in the following pages.

From the Robots home page:

• Settings > User management
• Folders > Open any folder > Manage Collaborators
• Robots > Open any robot > Manage Collaborators
• Robots > Open any robot > Tasks > Create or edit an existing task > Notify the Humans > Send notifications on failure

These search bars facilitate easy user lookup, particularly beneficial when managing a large number of users within the organization.

On the Compliance Library page, you can sort by all providers, Diligent, or third party providers.

Learn more

Compliance Maps uses Diligent AI Assistant to identify the changes between two versions of selected regulatory document pairs from Diligent.

Learn more

Email notification for owner assignments

We'll send an email notification to the owners, when you add or change the ownership (Owner field) of the following items:

• Asset
• Record

This will be helpful for the assigned user to be aware of their ownership and responsibility of an asset or a record.

Learn more

Processes and Objectives in Risk Manager

We've added processes and objectives to the Risk Manager app. You can now add processes and objectives and link them to the risks and controls of your organization.

This is useful for effective risk management and business operations in your organization. Learn more

External user provisioning - You can now enable external user provisioning to allow automatic user management from an identity provider data source by leveraging the System for Cross-domain Identity Management (SCIM).

Learn more

Projects

New filters are added:

• Action Status (from Actions)
• Action Priority (from Actions)
• Sign-off Status (from Controls)
• Testing Rounds (from Controls)
• Request Status Term (from Requests)

• Risk Term (from Risk)

Assessments handles up to 10 custom fields for:

• Walkthrough: Is the control designed appropriately?
• Testing: Did this control operate effectively?

Learn more

Custom sort order for the questionnaire records

You can now apply a custom sort order to the questionnaire records when you send them to participants for certification.

You can apply the sort order in the corresponding Results app table, and this order is applied to the records when they are sent in an email notification.

If you do not apply any order, then the records are sorted based on the record IDs in the Results table.

Learn more

Scalability improvements in Robots The addition of pagination and lazy loading to user lists in Robots significantly improves speed and performance. This global improvement means that Robots can scale more easily to support user numbers into the thousands.

Paginated user lists

In the following areas, lists of currently assigned users, sorted alphabetically, are now segmented into sequenced pages:

• User management and role assignment

• Robots folder collaborators

• Robot collaborators

• Automated notifications in robot tasks

Lazy-loaded user lists

(Load user names as you scroll)

In the following areas, lists of users available to be assigned, sorted alphabetically, are now progressively loaded as you scroll down a list:

• Robots folder add collaborators

• Robot add collaborators

Asset Manager

Further enhancements in Asset Manager

• Questionnaires from Records You can now send questionnaires from Asset Records also. Previously, this was available in assets only.
• Filter in paragraph fields A filter has been added to the paragraph fields in the Assets and Records list page for easier filtering and searching.
• Chart titles are dynamic now You can now change the chart titles on the Dashboard page by updating the attribute names in the Configuration page.
• Localization support:The Asset Manager app is now available in the following languages:
  • German
  • Spanish
  • French
  • Japanese
  • Chinese
  • Portuguese

Learn more

Launchpad UI refresh to reflect the Diligent One Platform - Launchpad has a new look and feel with a consistent, easy-to-navigate experience. Apps are organized into categories with an at-a-glance view, app icons are streamlined, there is a consistent platform experience, and an upgraded Organization settings gear icon replaces the Options button.

Learn more about the Diligent One Platform

Platform rebranding As of January 31, 2024, the Diligent HighBond platform is called the Diligent One Platform. The short form of the name is Diligent One.

For now:

• The Diligent One Platform domain remains highbond.com.

• The following items retain "HighBond" in their name:

  • HighBond robot

  • HighBond access token

  • HighBond API

  • HighBond for iOS or Android

Learn more about the Diligent One Platform

Risk Manager

Risk and Assessment Scoring Configuration - You can now configure risk and assessment scoring on your own. Previously, you had to use the default configuration and contact Support if you wanted to reconfigure.

The following are the advantages of this new method:

• Configure two different formulas for risk and risk assessment scoring
• Filter and choose the risks / risk assessments you want to score
• Score multiple risks / risk assessments at once.
• Override existing scores
• Less manual effort and saves time

Learn more

January 10, 2024

Risk Manager

The Risk Manager app is now available in the US Federal GovCloud region.

Risk Manager

The Add Asset dialog box has been changed to a drawer panel. You can now enter more fields when creating a new risk or a control, and you can create them consecutively by clicking the Save and New button.

Learn more

Robots upgrade to Python 3.11

Diligent is upgrading the version of Python used by Robots. Based on the schedule below, the cloud-based Robots Agent will be upgraded from Python 3.8.x to Python 3.11.x. During the transition period, both versions of Python will be supported by Robots.

One or more of your Python/HCL scripts could potentially be impacted by the upgrade to Python 3.11. If your organization uses HighBond robots or Workflow robots, familiarize yourself with the implications of the upgrade. To avoid disruptions to scheduled robot tasks, test compatibility of all production scripts with Python 3.11. Learn more

The Python Software Foundation has announced that Python 3.8 is officially end-of-life on 14 October 2024.

Upgrade schedule

• Mid-December 2023, HighBond robots and End of Q1 2024, Workflow robots

  • Newly created scripts run in Python 3.11. No other option exists.

  • Scheduled scripts, created before the Python upgrade, continue to run in Python 3.8, as long as the scripts are not edited.

  • When opened in the Robots script editor, scripts created before the Python upgrade default to running in Python 3.11. For a limited period of time, the script editor provides an option for manually downgrading existing scripts to run in Python 3.8.

• End of Q2 2024, HighBond robots and Workflow robots

  • When opened in the Robots script editor, scripts created before the Python upgrade can no longer be manually downgraded to run in Python 3.8.

• 14 October 2024, HighBond robots and Workflow robots

  • All scripts, including unedited scripts in scheduled tasks, run in Python 3.11. No other option exists.

  • Python 3.8 is officially end-of-life. See Status of Python versions.

December 15, 2023

Standards and regulations for the U.S. financial industry are available from Ascent, Diligent's regulatory content partner. You can see the list on the Compliance Library page.

Learn more

December 7, 2023

The Compliance Library consolidates the regulations and standards that may be secured from Diligent. All Compliance Maps content packaged in Toolkits are listed and can be imported from the Compliance Library.

Learn more

Introducing search bars for efficient user management

We've added a search bar to the following pages in the Results and Storyboards apps:

• Results home page > Settings > Users > Manage Users

• Results home page > Individual collection > Members > Manage collection members

• Storyboards home page > Individual storyboard > Storyboard Sharing > Users > Current Users

These search bars facilitate easy user lookup, particularly beneficial when managing a large number of users within the organization.

Asset Manager

Enhancements in Asset Manager

• Introducing multiple record types You can now have multiple record types configured to an asset type. Each record type can have its own attributes and workflows and its own tab in the asset. Previously, you only had a single record type: Findings.

  Note: You cannot create, update, or delete record types on your own, contact our consulting team to customize your environment.

• Viewing Record Types in a Flat Table You can view all records of a Record Type in a single table. Click the record type from the left panel to view its records.
• Linking Records to Other Objects We've added a Relationships tab to records to link the records with other assets, records, risks, and controls.
• Tab ChangesThe Findings tab is now renamed to Projects-Issues tab. With support for multiple record types, Findings can now have its own tab. The Projects-Issues tab displays open issues associated with an asset linked to a project in the Projects app.
• UX Enhancements
  • Filtering option has been added to Boolean and Number fields for easier filtering.
  • Blank has been added as an option in Select (dropdown list and radio buttons) and Boolean fields for filtering empty entries.
  • Metadata fields such as Created At, Created By, etc. and paragraph fields are now available in the Config Column of assets and records list to view/hide in the list.
  • Search bar is now available in the Column Config of assets and records list for easier column search.
  • The Add Asset dialog box has been changed to a drawer panel. You can now enter more fields when creating a new asset, and you can create assets consecutively by clicking the Save and New button.

Learn more

Assign records through Workflow group from field in Triggers

In the Trigger configuration window, we've added a new option to assign records: Workflow group from field.

This option enables you to choose a table field to search for a workflow group name. If a valid workflow group is identified in that field, the record is assigned to that specific workflow group.

Learn more

Skipped and Cancelled statuses added to task notification The automated email notification sent when a robot task fails has been expanded to include tasks that do not run because they are skipped or manually canceled.

With this enhancement, the notification, if enabled, is now triggered if a task does not run for any reason. The email indicates the reason the task did not run: failed, skipped, or canceled.

Previously, the notification was triggered only by a Failed status.

Learn more

API token security enhancement - As a security best practice, newly-created tokens cannot be copied. However, existing tokens can be accessed and copied until March 27, 2024 at which point all tokens will follow the token security best practice which means that they can only be saved when they are created. If you haven't already, it is recommended that you either take this opportunity to save your existing tokens now or to create new ones that are already leveraging security best practices.

Learn more

Compliance maps regulation details sidepanels were updated.

The standard and regulation details related sidepanels have a new look and feel. We have updated several button names and labels for improved clarity.

Once a file is uploaded, you can copy the file name and file link and paste it as a reference. You and also download historical files.

Learn more

Sharing Activity Center dashboards with all users - Within Activity Center, Reports Admins now have the ability to manage dashboards without needing to be the creator of the dashboard. Reports Admins can edit, share, and connect to Boards. This enables opportunities for multiple users to collaborate on and co-author dashboards. It also further improves efficiency by allowing dashboard management to be transferred.

Learn more

Asset Manager

Enhancements in the Assessments and Findings tabs

• Assessments tab We've added a Column Config dropdown that allows you to show or hide the columns.
• Findings tab
  • The Projects Issues list now displays only open issues. Closed issues are no longer shown.
  • You can also now view issues with unassigned severity.

Learn more

Risk Manager

Risk Manager sync enhancement - In the Risk Manager app, when you establish links between risks and controls, these associations will now synchronize with the Risk Manager framework in the Frameworks app.

As a result, you will now be able to view the risk-control associations in the Risk and Control Matrix of the Risk Manager framework.

Note that the synchronization applies specifically to risk-control associations. Other associations such as risk-to-risk, control-to-control, risk-to-asset, and control-to-asset will not get synchronized.

Learn more

Projects

Users can have up to 10 control test ratings with customizable names and ratings within a specific Project Type. This expands the previous pass/fail ratings.

Control test automation (assessment drivers) and reporting are coming soon.

Learn more

Users may rename files and view version history. Version history includes versions for renamed files and PDF annotations. Files attached to a request are also available in the new Requested files section for Risk, Control, Walkthrough, Test Plan, and Testing Round.

Learn more

Help was updated to state that a project backup includes the latest versions of uploaded attachments.

Learn more

Asset Manager

Filter using User Lookup columns in Asset Manager

We've converted the user lookup column headers (such as Business Owner and Technical Owner) into dropdown lists. Now, you can filter the asset list based on specific users.

Please note that as a result of this change, the sorting option will no longer be available for the user lookup columns.

Learn more

Introducing the ability to stop and start the auto-publishing of Results app data - We have added the ability to ensure that the most up-to-date Results app data is being shared with the Activity Center app for the purpose of building dashboards by enabling the automatic publishing of this data.

From the Results app, a Results Admin can enable automatic publishing of datasets to the Activity Center app. They can also disable automatic publishing at any time.

Once a dataset is created, Report Admins in the Activity Center app will have access to all of the records of the table. Once enabled, the Results app table is published automatically at a regular interval which is set at every 24 hours by default.

Learn more

UX improvements in Results and Storyboards - We have introduced the following enhancements in the Results and Storyboards apps:

• Pagination in the following pages
  • Users list in the Results settings page.
  • Members list in the Members tab of a collection.
  • Manage users list in the Storyboards Sharing page.
• Load As You Scroll in the following pages
  • Add user dropdown in Workflow Groups under Results settings.
  • Add members dropdown in the Members tab of a collection.

Both of these options will enhance the application's speed, efficiency, and overall user experience. This will be especially helpful for organizations with a large number of users.

Introducing dynamic filtering in Storyboard filters - We have added dynamic filtering to the Storyboard filters. You can enable and disable this option from the Storyboards landing page.

With dynamic filtering enabled, when you apply one filter in a storyboard with multiple filters, the values in subsequent filters will automatically update based on your selection in the first filter.

When dynamic filtering is turned off, subsequent filters will display all values without any automatic updates.

Learn more

New enhancements in Asset Manager-

• Interactive dashboards We've introduced interactive dashboards in the Asset Manager app. Explore and filter assets by workflow status, criticality level, and more. Gain a comprehensive view of your assets for better decision-making.
• All Assets page View and filter all your assets in one place, including IT and third-party assets.
• Activity logging System Admins can now download 31-day activity logs, capturing all user actions within Asset Manager.

Learn more

Email notification in the Risk Manager app

We'll send an email notification to the owners, when you add or change the ownership (Owner field) of the following items:

• Risk
• Control
• Risk assessment
• Control assessment
• Risk mitigation plan

Improved Assessments navigation and filtering We've updated several aspects of the Assessments interface for easier navigation and filtering of activity cards. This update also supports future functionality expansion in Assessments.

Learn more

Dashboards in the Risk Manager app

We've added the following charts to the home page of the Risk Manager app:

• Workflow status This is a donut chart that shows the total number of risks based on their workflow status.
• Risk heatmap This is a heatmap chart that shows the risks based on their final rating, such as low, medium, and high.

These visuals provide you with a holistic view of your risks. This will help you to identify, prioritize, and mitigate risks and make important strategic decisions.

Learn more

We have released a set of Python/HCL scripts that allow you to automate the process of deleting old task runs in Robots. If you have one or more robots that run frequently, the number of saved task runs can build up quickly. Automating the deletion of old task runs saves you the labor of continual manual deletion, preserves server space if your organization uses an on-premise Robots Agent, and keeps the Robots interface free of clutter.

Learn more

Introducing Compliance Library - Compliance Library delivers a cleaner, more streamlined process for managing standards and regulations in Compliance Maps. The list of available standards and regulations now appears on its own page, with one-click access to import standards and regulations, an improved side panel, and seamless integration back to the Compliance Maps home page. Learn more

UX enhancements in Asset Manager- We've added the following enhancements to the Asset Manager app:

• Updated rows per page We have added 250 and 500 to the pagination options. You can now view a maximum of 500 rows per page in the Asset List and Third-Party Finding List.
• Export current view You can now export or print the current view of the Asset List and the Third-Party Finding List.
• Reordering columns You can now reorder the columns in the Asset List and the Third-Party Findings List view.

Learn more

Risk Manager sync with Frameworks

Risk Manager - Frameworks sync is now available in the South Africa region.

This region was not included in the initial release due to a technical limitation.

Learn more

Integration of Projects and Risk Manager with Asset Manager - We've added the following enhancements to the Asset Manager app:

• Integrated the Projects app with the Asset Manager app
  • In the Relationships tab, you can view the projects that are associated to an asset.
  • In the Findings tab, you can view findings from projects that are associated to an asset.

• Added a new tab called Assessments In this tab, you can view assessments of risks and controls that are associated to an asset from the Risk Manager app. You can also view assessments of risks and controls in projects that are associated to an asset from the Projects app.

Learn more

Custom Request statuses You can now customize the number of status options available for Requests, and can define your own terminology for each status level.

Learn more

Alignment of Robots-initiated methods for uploading ACL scripts The two Robots-initiated methods for uploading an ACL script now work the same way. To simplify user interaction, uploading an ACL script to a robot for the first time now uses the same dialog box that appears when you upload a script from the Script versions tab.

Using ACL Analytics to upload scripts to Robots remains the primary method for uploading and committing scripts, and includes the benefit of automatic script validation.

Learn more

Multi-select for deleting working files In HighBond robots and Workflow robots, you can now delete multiple working files in a single operation. Previously, you had to delete files one at a time from the Working data tab.

The ability to multi-select and delete was already added to ACL robots.

Compliance Maps home page updates The Compliance Maps home page now has a new look and feel. Existing functionality remains in the same locations, and we have updated several button names and labels for improved clarity. We have also added several features to make it easier to locate key information, including:

• Column sorting

• A Controls column to show which requirements have controls mapped to them

• A requirement counter next to standard and regulation names

Risk and control events in history and activity log Risk and control associations now appear in the item history and project activity log.

In addition, updates to Data Analytics, Surveys, and Event Report links to risks, walkthroughs, and tests now appear in the item history and project activity log. These updates applies to events that occur anywhere in Projects and Frameworks.

Learn more

IT Risk Management using Risk Manager - We've updated our ITRM solution guide to demonstrate the IT risk management workflow using Asset Manager and Risk Manager, as using these apps is more optimal compared to the Asset Inventory and the Projects app.

Learn more

Prod and Dev buttons redesigned In response to user feedback, we have made additional changes to the buttons that you use to switch back and forth between production mode and development mode in Robots.

To improve usability, the full terms Production and Development are now used for the button labels, and the buttons are larger. We have also added a helpful tooltip that briefly explains the two modes, and provides a link to the Robots documentation for more detailed information.

Learn more

Risk Manager sync with Frameworks The risks and controls in the Risk Manager app are now synced with the Frameworks app. The sync happens automatically in real time each time you add or edit a risk or a control in the Risk Manager app.

You now have a central repository for your organization's risks and controls, which you can work with in Risk Manager, Projects, or both.

Learn more

Multi-select for deleting working tables or files In ACL robots, you can now delete multiple Analytics data tables, or non-Analytics related files, in a single operation. Previously, you had to delete tables or files one at a time from the Input/Output tab.

The ability to multi-select and delete is initially available in ACL robots only. Similar functionality will soon be added for HighBond robots and Workflow robots.

Overwrite identically named files You can now overwrite identically named files when manually uploading files to the Input/Output tab in an ACL robot.

Previously, overwriting during the manual upload of files was not supported in ACL robots, which was inconvenient. You had to first delete the old version of the file from the Input/Output tab, and then upload the new version.

This enhancement standardizes the method for uploading and overwriting working files across all robot types.

Learn more

Fully customizable sign-off configurations Sign-off configurations for Projects can now be fully customized to meet the unique requirements of review and approval processes across organizations. This feature introduces the ability to define the number of sign-off levels for each type of item in projects, up to a maximum of five, as well as the ability to define custom sign-off role names.

Learn more

File events in history and activity log All events for Supporting files now appear in the item history and project activity log. Logged events include file uploads, deletions, and annotations. This update applies to Supporting file events that occur anywhere in Projects and Frameworks.

Learn more

Introducing the Asset Manager app We have created a new app called the Asset Manager to manage your assets.

The Asset Manager app is similar to the Asset Inventory app, but the Asset Manager app offers better user experience and time to value. Asset Manager is also more suited to manage your IT and third-party assets.

Learn more

New method for uploading ACL scripts to Robots You can now initiate an upload of ACL scripts to Robots from within Robots, without needing to open Analytics.

This new method is intended as a convenience feature. It bypasses the syntax validation of scripts performed when you upload from Analytics, so you should use it only for uploading minor script updates of previously validated scripts.

Learn more

History and activity log available for archived projects Previously, when a project was archived, its item history and activity log were no longer available. A project's item history and activity log are now preserved and available to review after the project has been archived.

Additional keyboard shortcuts New keyboard shortcuts have been added to the Robots script editor.

Learn more

Configure expiry dates for new tokens - You now have the ability to configure an expiry date for a token to implement security best practices. This capability applies to newly-created tokens only; your existing tokens will not be affected. However, you can replace your existing tokens to leverage this new feature by creating new tokens that include expiry dates for improved security.

Also, tokens will expire using the creation time (current user's time zone) as the baseline with no UTC conversion. The expiration time is only displayed at the time of token creation. Learn more

More management functionality in Assessments You can now manage, monitor, and complete more risk and control tasks in Assessments.

Assessments now includes the following features in My Activities:

• Action cards View and complete actions that you have been assigned to resolve issues.

• Issues Add issues to walkthroughs, test plans, tests, and risks, and view issues that have previously been added.

We have also improved display functionality in the Risk and Control Matrix with:

• Risk Owner filter option

• Column config menu to control which columns appear

• Expand and collapse all rows or individual rows

Learn more

Copy a robot task You can now copy a robot task from development mode to production mode, which saves time and effort. Previously, you had to manually recreate a development task in production mode.

You can also copy a task within development mode, or within production mode. Copying a task from production mode to development mode is not supported.

When you copy a task, some task configurations are copied and some are not:

• Copied Script selection, script input parameter values

• Not copied Task schedule, user notifications

Learn more

Restrict storyboard link access You can now restrict access of a storyboard link to specific user groups (Launchpad / Workflow Groups).

In the Storyboard Sharing panel, we've added an option to select user groups, where you can choose the user groups that you want to share the storyboard with.

Previously, you had only one option of sharing the storyboard anonymous link with anyone. Learn more

Specify the order of ACL scripts in a robot task You can now drag ACL scripts in the Task Designer to specify the order in which they run in a task.

Previously, script order was alphanumeric by name, which meant that you had to incorporate an ordering scheme in your script naming.

The new script ordering capability also applies to tasks in HighBond robots and Workflow robots. However, these robot types currently support only one script per robot.

Learn more

New privilege for project type management – The new Project Type Admin privilege provides permissions for users to create, update, and delete project types, without granting full administrative privileges for the project or organization.

This update allows System Admins to delegate project type management tasks to other users in the organization, while maintaining control over elevated administrative permissions.

Project Type Admins may be granted permissions for one or more project types.

Learn more

More Custom Attributes – Projects now supports up to 10 custom attributes for risks, controls, and any other component for which custom attributes can be added.

This update is fully supported for linked items in Frameworks. Bulk Importer also now supports up to 10 custom attributes.

Note that Reports does not support custom reporting dashboards for custom attributes beyond the previous limit of five.

Learn more

Faster access to Standards and regulations – Standards and regulations functions are now available directly from the Compliance Maps home screen for faster access.

• Clicking the title of a standard or regulation in the tree view on the home screen will now open the Standard and regulation details side panel, allowing direct access to edit functions.

• The Import from library and Create your own buttons are now located on the Compliance Maps home screen. The functionality of these options remains the same.

  Learn more

Copy Python/HCL scripts between robots Copying a Python/HCL script between HighBond robots or Workflow robots is now easier. Instead of copying and pasting script code, you can download an entire script from a source robot as a *.json file and upload it to a destination robot. Any variable definitions and values associated with the script are also included in the *.json file.

An additional benefit of this new feature is that it gives Diligent a convenient way to distribute prepared scripts to customers.

Learn more

RAPRM-4618

RAPRM-4619

• Two-column layout reduces scrolling allowing you to see more fields at once.
• In-line editing enables quicker, easier changes, and you can engage with individual fields when editing which maintains a cleaner screen for better focus.
• Tab reordering and relabeling improves your workflow by displaying the Details tab first and relabeling the "Overview" tab as the "Record" tab to better represent its contents.
• Browser tabs now include the name of the Asset in your web browser to make assets easier to find.
• Additional context for Statuses and Actions allows you to view descriptions for further information on what happens once you click a button within various statuses in the status tracker and various events in the Actions dropdown.
• The first section expanded by default saves you a click every time and remembers your preferences whether you choose to expand or collapse other sections.

Access to uploaded data files in the Bulk Importer You now have access to the data files that you have uploaded.

You can click and download the data files from the Sessions table. This will be helpful if you want to correct any previously uploaded data.

Learn more

Dev mod toggle updated The toggle that you use to switch between production mode and development mode in Robots has been redesigned to be more intuitive.

Instead of a toggle, you now use a Prod button and a Dev button to switch between the two modes. The buttons clearly indicate which mode is active.

Previously, the Dev mode toggle was either enabled or disabled. A disabled Dev mode toggle implied that you were in production mode, but did not make the current state explicit.

Risk Owner role affects display logic in Assessments - A Risk Owner role has been added to the Projects app. With the introduction of this role, the Assess a risk card in Assessments now shows risks for which the user is assigned the Risk Owner role. Previously, this card appeared for users with the Assigned User role for an objective.

Introducing Impact Reports in the Results app We have added Impact Reports capability to the Results app. This is a subscription-based service, and you can avail it to get your desired reports, based on your Results data. This was available only in the Projects app until now. Learn more

Select All option in the Results and Storyboards apps We have added a Select All option to the following filters:

• Column filter and View & Add Filters panel in the Results app (both Tables and Metrics).
• Storyboards global filter.

You can now select all the options in a filter in just one click. This will help you to save time and effort when selecting or clearing multiple filter options.

Introducing two new resources in the Bulk Importer You can now bulk import time entries and non-project time categories using the Bulk Importer.

Learn more

Risk Register is now Risk Manager We have overhauled the user interface of the Risk Register and renamed it Risk Manager. This upgrade will significantly enhance your experience and provide more value for risk management in HighBond. Learn more

Introducing auto-saving in the Questionnaires When you are answering a questionnaire, your data will now get saved automatically after every few seconds. This is especially helpful if it is a lengthy questionnaire, so that you can retain the data in case of a timeout.

Hiding metadata in the Results app tables We have changed the default behavior of the metadata columns in the Table View. Now, when you create a new Results table (Data analytic, Survey, Event Report) from the user interface, the metadata columns will be hidden and you will only see the actual data. Note that this is applicable only for the tables that you create henceforth.

You can still view the metadata by switching on the field toggle in the Configure Table View panel.

New features improve Robots feature parity and ease of use at scale

We've added new features to Robots that increase the degree of feature parity with Analytics Exchange (AX), and make Robots easier to use at scale:

• Global views

• Task sequences

• Folders

As we approach the end of support date for AX (January 1, 2023), these new features support AX customers migrating to Robots and replicating their current AX data automation workflows.

The features also significantly enhance the overall user experience in Robots for everyone.

Global views Two new global views, available from the Robots dashboard, provide a central location to view and access all tasks and task runs in your organization's Robots instance. You no longer have to drill down into individual robots to view the tasks in a robot, or to check the status of task runs. With a single click, you can also go directly from a global view to the details screen for a task or a task run.

Global views make Robots easier to use at scale, and greatly increase the overall convenience of navigating in the app. Learn more

RAPRM-3392

Introducing Assessments App Assessments presents the risk and control information, assigned to you in the Projects app, in a simplified view that’s also easy to access. You can use Assessments to manage the risks and controls you have access to, while completing your assessments and testing activities in one place.

Learn more

Robots Agent 16.1.1 released to address export to Excel defects in version 16.1

We have released a new version of Robots Agent that fixes two defects that can occur when exporting to Excel using version 16.1 (details below).

Any customers who have installed version 16.1.0 of Robots Agent should upgrade to version 16.1.1.

Learn more

Truncated data when exporting to Excel (*.xlsx)

Exporting a computed field that concatenates two physical fields was not working correctly in version 16.1. If values in the first concatenated field contained trailing spaces, the values in the second concatenated field were not exported.

This issue has now been resolved, and concatenated fields export correctly to Excel.

Export to Excel syntax error causes export failure

A missing quotation mark in the EXPORT command syntax was causing the export to fail in version 16.1 without any error capture. This issue has now been resolved and an error message is logged.

Task sequences A new feature called "task sequence" allows you to execute a group of robot tasks sequentially. Successful completion of one task automatically starts the next task in the sequence. You can link tasks from multiple robots, and from any type of robot, in the same sequence.

Task sequences are equivalent to analytic chains in Analytics Exchange (AX). Learn more

RAPRM-3498

RAPHX-3671

New version of Robots Agent Version 16.1 of the on-premise Robots Agent has been released.

If your organization uses an on-premise agent, you must upgrade to the new version if you want to use analytic scripts that include any of the updates to ACLScript in Analytics 16.1. For information about Analytics 16.1 updates, see Analytics and ACLScript release notes.

Learn more

Robots Agent 16.1

(introduced in 16.0)

Option to exclude Microsoft Access Database Engine when installing Robots Agent

When you perform an installation of Robots Agent 16.1 you have the option to exclude Microsoft Access Database Engine.

• Exclude the Database Engine if you use the Robots Agent with only the current generation of Excel file (*.xlsx), and you do not use older Excel files (*.xls), or Microsoft Access files (*.mdb). The Database Engine can cause compatibility issues with other, newer Microsoft Office products. So exclude the Database Engine if you do not need it.
• Include the Database Engine if you need the Robots Agent to import from, or export to, older Excel files (*.xls), or Microsoft Access files (*.mdb).

Introducing bulk importing questionnaires You can now bulk import numerous Results questionnaires at once using the Bulk Importer.

Learn more

Redesigned detailed work pages We have redesigned the detailed work pages in the Projects app. The new design is cleaner and easier to use.

The changes are turned off by default. On pages with an available redesign, you will see a banner, and can enable the new design yourself. You can switch back to the old design if there is anything you don't like. Eventually, we will make the new design permanent. Before then, test out the new design and leave feedback at your convenience.

What pages are changing?

All detailed work pages can switch to the new design.

• Narratives
• Risks
• Controls
• Walkthroughs
• Test plans
• Tests

What exactly changes on each page?

When you enable the new design, you will notice several changes.

• Text boxes for information like titles and descriptions have been converted to plain text. This makes content easier to read, especially when you have lengthy descriptions. Clicking on text to edit it will restore the usual text box.
• Information that isn't always required has been reorganized into expandable/collapsible sections. This includes metrics, Results tables, risk-control associations, entity coverage, certifications, control performance, and change history. For many of you, this will significantly reduce scrolling and the feeling of being overwhelmed by data.
• Empty sections now include commentary and links to help, so new users can more easily populate data for the first time.
• Actions that used to be text links are now buttons, making your available options more obvious.

Column header changes in the Results app tables We have made the following changes in the table column headers:

• Added word-wrapping. Now, long column names will be wrapped and moved to the next row. Previously, longer column names were getting truncated.
• Removed the data type icons from the column headers to have a clearer view of the column names.

Folders You can now create folders to contain and organize individual robots on the Robots dashboard. Folders impose order on large collections of robots. Folders also support standardized user access to related groups of robots. You assign robot access permissions at the folder level and the permissions automatically cascade to all the robots in the folder.

Both of these features of folders make Robots easier to use at scale. Learn more

Introducing Admin Console for System Admins We have added the ability for System Admins to directly view and manage their workflow configurations for Workflows, Statuses, Events, and Handlers. Previously, customers had to heavily rely on our team to make workflow configurations. Learn more

Simplified importing of HighBond resources We have made it easy for you to bulk import the following resources: Assets, Asset Records, Projects, Frameworks, Objectives, Risks, Controls, and Mitigations.

You can now select the resource type and a specific resource within, and download the template. The generated template will contain the configuration of the resource selected.

This considerably reduces the manual effort required to fill the template.

Learn more

Record limit upgrade in the Bulk Importer We have increased the row limit in the Bulk Importer template. You can now upload up to 2000 records at a time using the Bulk Importer. It was 900 records previously. Learn more

Save Python/HCL script output to a log file A new option is available with Python/HCL scripts in Robots: Save script output to the task run log file. When you select this option for a script version, running a task with that version of the script saves any script output to the log file that accompanies each task run.

The saved output in the log file can be useful to review when you are developing and troubleshooting scripts.

Learn more

Introducing SOX dashboard in the Activity Center app We have added a new SOX Program Management dashboard to the Activity Center. You can use this dashboard to manage your organization's SOX program. Learn more

Redesigned detailed work pages We have redesigned detailed work pages in the Projects app. Over the years, we added a lot of features to Projects, and some people reported that things felt a bit cluttered. This new design is more intuitive and relieves that perception.

This change places related options into sets of panels. It's almost entirely visual. Projects will continue to work the same way they did before.

What exactly changed:

• Narrative details pages: segmented into panels that contain related elements.
• Control details pages:
  • Segmented into panels that contain related elements.
  • The Control X-Ray/Procedure X-Ray button is now on the right side of the page, above the panels in the right column.
• Risk details pages: Segmented into panels that contain related elements.
• Walkthrough/Execute Procedure pages
  • Segmented into panels that contain related elements.
  • The Control X-Ray/Procedure X-Ray button is now on the right side of the page, above the panels in the right column.
• Test plan pages
  • Segmented into panels that contain related elements.
  • The Control X-Ray/Procedure X-Ray button is now on the right side of the page, above the panels in the right column.
• Testing round pages: Segmented into panels that contain related elements.

Introducing the Risk Register app We have created a new app for risk management. Using the Risk Register app, you can manage your organization's risks and controls more efficiently. Learn more

HCL suppresses metadata fields when saving to Results tables If a data analysis workflow round-trips data from Results to Robots and back to Results, metadata fields in an HCL dataframe are automatically suppressed and not saved back to Results.

Previously, the fields were not suppressed, which caused saving data to Results to fail. Learn more

Set up multi-factor authentication If you are a system admin, you can now enforce two-factor authentication (2FA) for anyone using your HighBond instance. Learn more

Tabs when updating organization settings When you update the settings for your instance of HighBond, the page is now divided into 3 tabs for better organization of the options. Learn more

New version of Robots Agent Version 16.0 of the on-premise Robots Agent has been released.

If your organization uses an on-premise agent, you must upgrade to the new version if you want to use analytic scripts that include any of the updates to ACLScript in Analytics 16.0. For information about Analytics 16.0 updates, see Analytics and ACLScript release notes.

Learn more

Analytics–Robots Agent version alignment made less restrictive The version of Analytics that you use to create scripts that run in Robots no longer needs to be identical to your organization's installed version of an on-premise Robots Agent.

Previously, scripts failed in Robots if the versions of Analytics and the Robots Agent were unaligned. The scripts failed even if the ACLScript functionality they contained was fully supported by the Robots Agent. The requirement for aligned versions was overly restrictive and has now been removed.

Scripts will still fail in Robots if they contain new ACLScript functionality unsupported by an older Robots Agent.

RAPRM-963

RAPHX-3283

Option to retain or delete temporary analytic job folder on robot task failure The way the KeepJobFolder configuration setting for an on-premise Robots Agent works has been clarified and fixed. The setting now allows you to specify whether the temporary analytic job folder is kept or not when a robot task fails.

The setting has no effect when a robot task succeeds. Upon success, the temporary job folder is automatically deleted.

Previously the setting was intended to control retention or deletion of the temporary job folder for all robot tasks, regardless of failure or success. However, it was not working as designed.

Learn more

Language selection for questionnaire labels When you create and edit questionnaires, you can now choose what language to use for system-generated fields like labels and buttons on your questionnaire. This does not translate the actual questions and answers, but it helps you design questionnaires with a consistent language experience for your recipients.

The languages available today are:

• English
• Chinese
• French
• German
• Greek
• Italian
• Japanese
• Polish
• Portuguese
• Romanian
• Russian
• Spanish
• Ukrainian

Learn more

Pattern fill in Storyboard visualizations We have added an option to fill visualizations in a storyboard with design patterns, in place of colors. You can find the Pattern fill toggle in upper-right corner of a storyboard under More options. Learn more

Introducing in-page editing in Activity Center You can now edit issues and actions of your organization from Activity Center itself. Learn more

New format options in Storyboard text widget We have added new format options such as strikethrough and block quote to the Text and Body fields of a Storyboard text widget. You can use these options to format your text content easily and efficiently. Learn more

Introducing Utility Toolbar We’ve added the Utility Toolbar to Projects. It's a slim quick access toolbar where the Issues (formally Issue List), Requests, To-dos, and Time entries (formally Time Tracking) side panels now display with a click of an icon.

The functionality behind adding and viewing Issues, Requests, To-dos, and Time entries within the panels is still the same. This change is to help optimize your workspace, and is the first of a number of usability improvements we will be rolling out in Projects in the future. Learn more

New data storage and data management capabilities in HighBond and Workflow robots

HighBond robots and Workflow robots now have the ability to store and manage data files, which greatly extends the automation possibilities of these robot types.

HighBond robots and Workflow robots support native, cloud-based scripting in the HighBond platform using Python and HighBond Command Language, our custom Python library.

New data storage and data management functionality:

• Session files (Previously released) When you run a Python/HCL script interactively in the HighBond script editor any files created or loaded by the script are listed in the new Session files panel. Before you save a new version of a script, you can download files from the panel and review their format and content to verify that they meet your expectations.

  Session files are temporary and are deleted as soon as you exit the script editor.

• Permanently saved working files (Released) You can save files generated by a Python/HCL script to the new Working data tab in the robot. Like the Input/Output tab in an ACL robot, the Working data tab provides a central location for storing data that you can use as input for subsequent scripts, or for preserving historical information.

• Permanently saved result files (Released) You can save files generated by a Python/HCL script as result files within individual robot task runs.

• Uploaded external files (Released) You can upload external files such as Excel and CSV to the Working data tab for use as input for Python/HCL scripts.

Learn more

RAPHX-2519 (session files)

RAPRM-2539 (working files)

RAPRM-2540 (result files)

RAPRM-2538 (upload files)

Relocated sign-offs The sign-offs section for the Narratives, Walkthrough, Test Plan, and testing round pages is now located on the right side of these pages. This change is part of a number of usability improvements coming to Projects.

Bulk Importer enhancements We have made the following changes in the Excel template:

• Added target type and target ID fields to the Issues worksheet. You can now bulk upload issues and simultaneously associate them to projects, risks, controls, etc.
• Added Owner user field to the Issues worksheet. You can now provide a HighBond user (UID or email ID) as the Owner user responsible for the issue.

Learn more

Copy project types We've added the ability to copy a project type. You no longer need to create a new project type and manually add existing configurations in order to make a copy. Learn more

Introducing Activity Center We've added a new app to HighBond called Activity Center. Use Activity Center to view pre-configured dashboards that are customized to your workflow. Learn more

Update actions post-sign-off Professional users can now follow up and change actions that become restricted post-sign-off, including: 

• Leaving comments
• Adding attachments
• Setting completion dates
• Changing the status

Learn more

Introducing ESG Insights toolkit We've added a new toolkit to HighBond called ESG Insights. Use this toolkit to view environmental, social, and governance (ESG) health of your organization. Learn more

New data storage and data management capabilities in HighBond and Workflow robots

We have begun to roll out new data storage and data management capabilities in HighBond robots and Workflow robots. These two robot types support native, cloud-based scripting in the HighBond platform using Python and HighBond Command Language, our custom Python library.

New data storage and data management functionality is being released on a phased basis:

• Session files (Released) When you run a Python/HCL script interactively in the HighBond script editor any files created by the script are listed in the new Session files panel. Before you save a new version of a script, you can download files from the panel and review their format and content to verify that they meet your expectations.

  Session files are temporary and are deleted as soon as you exit the script editor.

• Permanently saved working files (Not released yet) You will be able to save files generated by a Python/HCL script to the new Working data tab in the robot. Like the Input/Output tab in ACL robots, the Working data tab will provide a central location for storing data that you can use as input for subsequent scripts.

• Uploaded external files (Not released yet) You will be able to upload external files such as Excel and CSV to the Working data tab for use as input for Python/HCL scripts.

• Permanently saved result files (Not released yet, HighBond robots only) You will be able to save files generated by a Python/HCL script as result files within individual robot task runs.

RAPHX-2519 (session files)

• If you are a new subscriber, you will automatically have access to both the 2021 and 2022 versions of the questionnaire when you install the toolkit for the first time.
• If you are an existing subscriber, you can contact your Diligent representative to get access to the 2022 version, in addition to your existing access to the 2021 version.

Strengthen the cybersecurity posture of your organization by using the Cybersecurity Maturity Model Certification (CMMC) 2021 in HighBond The full set of controls for Cybersecurity Maturity Model Certification (CMMC) are now available for HighBond.

The CMMC framework includes a comprehensive and scalable certification element to verify the implementation of processes and practices associated with the achievement of a cybersecurity maturity level. There are 5 separate frameworks and each level consists of a set of processes and practices, with the practices ranging from basic cyber hygiene at level 1 to advanced or progressive cybersecurity at level 5. Essentially, each level up indicates a higher degree of protection for sensitive information. In order for an organization to achieve a specific CMMC level, it must demonstrate achievement of all of the preceding lower levels.

There are a total of 5 frameworks in this release. Import or learn more or get content.

Password protect storyboard PDF You can now export a storyboard to a PDF by adding a password. Learn more

Let Maestra suggest controls for you We're excited to launch Maestra, a system that uses machine learning to make working in Compliance Maps easier and faster. Maestra analyzes your controls and scans for requirements that are most likely to match. Then, you can choose to either accept her suggestions, or you can still browse through all available requirements as before. As before, many controls satisfy multiple requirements, so you can map multiple requirements to the same control. Learn more

Stronger password requirements System Admins can now enable stronger password requirements with the new Enhanced password settings feature. Learn more

Rebranded HighBond login We have updated the look and content of the HighBond login page to reflect the Diligent brand. As part of the rebrand:

• The HighBond logo is now the Diligent HighBond logo.
• The Support link in the footer is now a Contact Support link.
• The Rsam logo was removed.

Bulk importing compliance maps You can now use the Bulk Importer to upload numerous compliance regulations, requirements, and maps at once. Learn more

Add questions to questionnaires at any location You can click the line between two questions to add a new question between them. You no longer need to add it at the end and drag it into position.

New header alert You can now display a custom or default message as a red banner at the top of each page within a project. Learn more

Rebranded error messages We have updated the look of error messages in HighBond to reflect the Diligent brand. As part of the rebrand, the HighBond logo is now the Diligent HighBond logo.

Conditional formatting colors in storyboard PDF Colors applied during conditional formatting will now be included in the PDF exported from a storyboard.

For example, if your storyboard has a table with conditional formatting applied, such as icon color, text color, and background color, you can now see those colors in the storyboard PDF. Previously, the colored formatting appeared in grayscale.

Questionnaires rebranded We've made a minor visual change to questionnaires to better align with the Diligent brand. The header is now dark blue, and the HighBond logo is gone.

Rebranded HighBond emails We have updated the look and content of HighBond’s email templates to reflect the Diligent brand. As part of the rebrand:

• The HighBond logo is now the Diligent HighBond logo.
• HighBond and formerly Galvanize links are now Diligent links.

Unlink an asset from a risk category in a project ITRMBond subscribers can now remove the association between an asset and a risk category in a project. Learn more

New robot types available on GovCloud HighBond robots and Workflow robots are now available on the AWS GovCloud infrastructure. Previously they were only available in commercial AWS environments.

The new robot types provide native, cloud-based scripting using Python and HighBond Command Language (HCL), our new custom Python library for domain-focused data analysis and HighBond automation.

• HighBond robots support full-scale data analysis

• Workflow robots support automating portions of your HighBond workflow with custom-built automation or Diligent toolkits

Learn more

Accessibility improvement We have added keyboard accessibility to the Choose a visualization dialog, which appears when you create a new visualization. If you use your keyboard to navigate, this should make it a little easier to build visualizations.

Right-aligned numbers in tables Numbers in numerical columns will now be aligned to the right, making them easier to read.

Copy interpretations We've added an option to copy an Interpretation with all its visualizations to another table. Note that you can copy the configuration of the interpretation, but not its data. Learn more

Arrange, sort and filter Controls table by Assigned User The Controls Dashboard now has an Assigned User option, which makes it easier to:

• See which team member, or Assigned User, is testing controls.
• Find specific controls and their tests by Assigned User.

This option is now available in the following menus:

• The arrange columns dropdown menu, which you can also use to show/hide the Assigned User column.
• The sort dropdown menu.
• The filter side panel.

There will be up to four testing rounds, which means an equal number of new Assigned User columns and entries in each menu. Terms for the testing rounds are also configurable. Learn more

New browser tab icon We have updated the HighBond browser tab icon to reflect the Diligent brand. As part of the rebrand, the HighBond “H” icon is now the Diligent “D” icon.

Activity logging System Admins can now download activity logs that contain all users' changes in Asset Inventory over the last month. Learn more

New Controls tab We have added a new Controls tab. Now, you can see an overview of your controls in a customizable table, navigate to the procedures or walkthroughs and test plans associated with those controls, and see their results at a glance. You can show or hide this tab in your project type settings. Learn more

To support this change, we've also introduced the ability to customize the plural term for controls in project type settings.

Improvements in Bulk Importer We've made some changes in the Sessions table in Bulk Importer.

When a bulk import fails, you now have access to an error log in the Sessions table. The error log will contain the error details. You can check the error log, rectify and re-upload the template.

You can also click the Status field and check detailed summary of the import, and you can sort the Date field in ascending / descending order.

Learn more

Toolkit interface improvements We have made some improvements in the user interface of the Toolkits app.

The dialog box for the Install and Delete operation has been replaced with a right panel. You can now begin Install or Delete operation, and go to other apps of HighBond while the toolkit operation keeps running in the background.

Also, toolkits that have failed to complete the operation will now be highlighted through a colored border with an error icon.

Learn more

Rename an interpretation We've added a renaming option in the Interpretations page. You can now rename an interpretation, and this will help you to change the title of an interpretation used in a storyboard, as and when required.

Learn more

With the rebrand, we’ve removed the HighBond logo from the navigation bar. To get back to Launchpad from any app, you can now click the name of your organization. For getting anywhere else, you can still use the app switcher.

• You now have breadcrumb-style links in the header that give better insight into where you are.
• We have simplified the menu you can use to switch between projects and frameworks. We have removed the portion you could use to navigate to different places within the Projects and Frameworks apps.

Steele Risk Intelligence robot toolkit We've added a pre-configured Steele Risk Intelligence robot toolkit. This will help you to automate screening and monitoring of customers, suppliers, and employees against Steele Risk Intelligence dataset.

Currently, the Steele Risk Intelligence robot toolkit can be used for watchlist screening for trade, export, and anti-corruption compliance. Other categories will be added in future enhancements.

This is a premium toolkit and requires an additional subscription. Contact Support or your Diligent representative for assistance.

Learn more

Robots user interface enhancements Several enhancements make navigating and using Robots easier and more intuitive.

• New page header A new page header with breadcrumb-style links makes it easier to move quickly between different areas of Robots. The breadcrumb is especially helpful in the Robots script editor where it gives better insight into your current location, and makes it obvious how to move from the editor to the Script versions tab or the Robots dashboard.

  The new page header is consistent with the new page header design being implemented across all HighBond apps.

• Robots script editor Several enhancements make the Robots script editor easier and more intuitive to use:

  • Script title The script title now uses the comment text from the saved script version instead of the robot name. This change makes it easier to see at a glance which version of a script you are working with. As well, the script version number has been repositioned to be more prominent.

  • Keyboard shortcuts Keyboard shortcuts have been added to the script editor. You can access a list of shortcuts by clicking the Keyboard shortcut icon in the title bar, or by pressing Ctrl+/.

  • Variables and Commit buttons repositioned The Variables and Commit buttons have been moved from the page header to the tool bar to make it clearer that they represent actions you can perform while working in the script editor.

  • Commit button renamed The Commit button has been renamed Save and commit to make it clearer what the button does.

• Resource Center The Resource Center has been added to Robots, aligning it with the rest of the apps in HighBond. The Resource Center provides periodic in-app notifications and various other forms of support to keep you informed as Robots and HighBond continue to evolve.

  Access the Resource Center using the Help and Support icon in the title bar.

UXD-1241 (Robots page header)

RAPRM-1258 (keyboard shortcuts)

RAPRM-1803 (other UI changes)

New page headers We are continuing to release improved page headers in more apps. These headers provide more consistent design and easier navigation throughout HighBond.

In Strategy, the tab menu was previously on the right side of the screen, but has moved to the left on the redesigned page header.

In Assurance Plans, we have removed a menu that you could use to switch between projects and places within the Projects app from the header.

Variables window The Variables window in the Robots script editor has been redesigned to be easier and more intuitive to use. The relation between HCL variables and robot task inputs is now more obvious. Tooltips now provide more extensive guidance.  Learn more

HCL password variable The maximum length of an HCL password variable in HighBond robots and Workflow robots has been increased from 245 characters to 8 KB. The longer length accommodates the longer authentication strings that are often associated with cloud computing.

• For controls that are linked to source controls in a framework, in the Control X-Ray panel, we have added a link to the source framework.
• For projects and frameworks, on the Fieldwork tab, we have replaced the “Control definition” header with the name of the control.

Strengthen your cybersecurity risk and control assessments with the pre-mapped Center for Internet Security (CIS) Controls version 8 (2021) to NIST SP 800-53 Revision 5 Security and Privacy Controls in HighBond Mappings between the controls for Center for Internet Security (CIS) Controls version 8 (2021) to NIST SP 800-53 Revision 5 Security and Privacy Controls are now available in HighBond.

Center for Internet Security (CIS) version 8 and NIST SP 800-53 Security and Privacy Controls Revision 5 are the latest version of security and privacy controls needed by organizations to accomplish security and privacy objectives. The controls address diverse requirements derived from mission and business needs, laws, executive orders, directives, regulations, policies, standards, and guidelines. Import or learn more or get content.

Strengthen your cybersecurity risk and control assessments with the pre-mapped Center for Internet Security (CIS) Controls version 8 (2021) to NIST Cybersecurity Framework (CSF) version 1.1 in HighBond Mappings between the controls for Center for Internet Security (CIS) Controls version 8 (2021) to NIST Cybersecurity Framework (CSF) version 1.1 are now available in HighBond.

Center for Internet Security (CIS) version 8 and NIST Cybersecurity Framework (CSF) version 1.1 are the latest version of security and privacy controls needed by organizations to accomplish security and privacy objectives. The controls address diverse requirements derived from mission and business needs, laws, executive orders, directives, regulations, policies, standards, and guidelines. Import or learn more or get content.

Strengthen the cybersecurity posture of your organization by using CIS Controls IG1 version 8 (2021) in HighBond The full set of controls for CIS Controls IG1 version 8 (2021) are now available for HighBond.

Version 8 is the latest version of CIS controls needed by organizations to accomplish security and privacy objectives. The controls address diverse requirements derived from mission and business needs, laws, executive orders, directives, regulations, policies, standards, and guidelines. 

This control catalog contains 18 cybersecurity controls to ensure and support an IG1 organization’s compliance against diverse set of threats and risks. A company self-identifies as IG1 when resources and cybersecurity expertise are limited and the impact of implementation is low. IG1 is considered to be Basic Cyber Hygiene. Learn about frameworks or see other content for security and IT compliance.

Strengthen the cybersecurity posture of your organization by using CIS Controls IG2 version 8 (2021) in HighBond The full set of controls for CIS Controls IG2 version 8 (2021) are now available for HighBond.

Version 8 is the latest version of CIS controls needed by organizations to accomplish security and privacy objectives. The controls address diverse requirements derived from mission and business needs, laws, executive orders, directives, regulations, policies, standards, and guidelines.

This control catalog contains 18 cybersecurity controls to ensure and support an IG2 organization’s compliance against diverse set of threats and risks. A company self-identifies as IG2 when resources and cybersecurity expertise are moderate and is typically focused on technical mitigations to manage sensitive client or company information. Learn about frameworks or see other content for security and IT compliance.

Strengthen the cybersecurity posture of your organization by using CIS Controls IG3 version 8 (2021) in HighBond The full set of controls for CIS Controls IG3 version 8 (2021) are now available for HighBond.

Version 8 is the latest version of CIS controls needed by organizations to accomplish security and privacy objectives. The controls address diverse requirements derived from mission and business needs, laws, executive orders, directives, regulations, policies, standards, and guidelines.

This control catalog contains 18 cybersecurity controls to ensure and support an IG3 organization’s compliance against diverse set of threats and risks. A company self-identifies as IG3 when resources and cybersecurity expertise are mature and is typically very technically focused on security automation for reducing zero-day and targeted attacks. Learn about frameworks or see other content for security and IT compliance.

Strengthen the cybersecurity posture of your organization by using Center for Internet Security (CIS) Controls version 8 (2021) in HighBond The full set of requirements for Center for Internet Security (CIS) Controls version 8 (2021) are now available for HighBond.

Version 8 is the latest version of CIS controls needed by organizations to accomplish security and privacy objectives. The controls address diverse requirements derived from mission and business needs, laws, executive orders, directives, regulations, policies, standards, and guidelines.

This compliance map contains 171 cybersecurity requirements to ensure and support your organizations compliance against diverse set of threats and risks. Import or learn more or get content.

Bulk Importer in GovCloud Bulk Importer is now available in GovCloud, too. Learn More

Email ID in place of User ID in Bulk Importer In the Excel template of Bulk Importer, you can now provide even an email ID for the fields which require a user ID.

For example, assignedBy field in Actions and ownerUser field in Requests.

This will help you save time and effort, as you don't have to go and find UID of the users. You can still provide the UID if you have it. Learn more

Improved navigation in Interpretations We've introduced a new way of navigating between visualizations in Results. You can now easily switch between multiple visualizations and the Table View using the new All tabs button. We've also moved the left/right arrow buttons (< >) next to each other for easy access.

• On the Dashboard tab, in the My work status table, the order of objectives matches any sorting you have applied on the Fieldwork tab, in the Objective List table.

  Note: You have to refresh your browser to see the changes on the Dashboard tab.

• For projects and frameworks, on the Fieldwork tab, we have improved the menu you use to navigate between different controls and aspects within those controls.

New reports enhancements We have upgraded our Reports system to provide the following feature enhancements:

• Enabled PDF export for Dashboards and Presentations. Learn more
• Reinstated the option to toggle between chart and table view for a multi-chart canvas report on a dashboard.
• Enhanced the Image Manager to accept a broad range of image file types, including animated GIFs.
• Added the option to share a dashboard as a PDF via email. Learn more
• Added the option to save the current settings of the export panel for PDF.
• Added a button to exit full-screen mode for Present.

Easier to access and distribute questionnaires On any collection home page, the following options have moved from overflow menus to their own buttons, making them easier to find and open with fewer clicks.

• Questionnaires
• Distribute survey
• Distribute event report

Learn more

New and improved Excel template in Bulk Importer We've enhanced the Excel template in Bulk Importer to make it more intuitive and user-friendly. This will also help you to reduce input errors and improve usability. Some of the enhancements include:

• Dropdown lists: We've added dropdown lists with predetermined values wherever applicable, such as Target Types, True / False fields.

• Field validation: We've added validation to fields where only certain type of input is allowed.

Workflow improvements We have made several improvements to Asset Inventory:

• When viewing an asset, you can now view attributes in customizable and collapsible sections. To configure these sections, contact your Galvanize representative.
• When viewing an asset, when you navigate to a tab and/or section, the URL now updates accordingly. If you send a colleague a link to the asset, that information is included in the URL, so they can see the exact attributes you were looking at.

• We have improved the error indicators that display when you save an asset, or advance it to another status, if the asset has incomplete or missing attributes.

  These improvements include more descriptive error messages that include direct links to the affected attributes, visual indicators on the sections that include the affected attributes, and indicators on the specific attributes that require attention.

• If you have any unsaved changes to an asset, buttons that allow you to save or discard your changes automatically appear and are anchored to the bottom of your screen.

TEC-991, TEC-1143

UI improvements We've made various improvements to the Asset Inventory UI:

• On the Asset Inventory home page, we have changed the list of asset types to display in a table, rather than cards, for better visibility.
• Asset Inventory now supports rich text fields, so you can use text formatting, hyperlinks, and images.
• When viewing lists of assets, findings, and questionnaire responses, you can now choose to hide a column using the Options button in the column header.

TEC-1022

HighBond robots released HighBond robots for cloud-based scripting are now available in the Robots app in HighBond. The release of this new type of robot is the next phase in our rollout of major new capabilities in Robots, which began on May 1, 2021.

HighBond robots allow you to develop data analysis scripts that combine the full power of Python and all its supported libraries with HighBond Command Language (HCL), our new custom Python library for domain-focused data analysis and HighBond automation.

Learn more

IN-517

IN-630

RAPHX-379

RAPRM-572

RAPRM-840

Map chart in visualizations We have added map chart to Visualizations. You can use a map chart to show data across different geographical locations. You can visualize how different locations are performing on their respective parameters across the world. Learn more

Show totals in summary table We have added a new option called Show Totals to the Display tab of Summary table. You can use this option to show / hide totals in the Summary table. Learn more

TEC- 790

TEC-801

TEC-807

TEC-806

TEC-810

TEC-809

TEC-811

TEC-812

TEC-813

TEC- 790

TEC-801

TEC-807

TEC-806

TEC-810

TEC-809

TEC-811

TEC-812

TEC-813

Major new capabilities in Robots We are beginning a phased introduction of major new capabilities in Robots. Our plan is to roll out the capabilities over a number of months, with completion expected some time in the final quarter of 2021. The first of the new capabilities have now been released.

Released

• Cloud-based scripting (Released)

  • Use Python as well as HighBond Command Language (HCL), our new custom Python library, to write scripts directly in Robots.
  • With cloud-based scripting we're adding two new robot types: Workflow robots, followed by HighBond robots.
  • The existing robot type, now called an ACL robot, continues to support data analysis and data automation using ACLScript and scripts uploaded from Analytics.

• Workflow robots (Released, customizable event-based triggering not yet available)

  • Event-based Workflow robots allow System Admins with a Professional subscription type to automate portions of their organization's HighBond workflow.

Not yet released

• HighBond robots (Not released)

  • HighBond robots will support domain-focused data analysis.

Learn more

RAPRM-1095

AN-8238

We have introduced a number of improvements to reduce the likelihood that Reports will time out as a result of having to process too much data. This includes improved filters that you can use before running your report, and limiting the number of projects per report. Learn more

Manage and maintain your Cybersecurity posture using the Secure Controls Framework The framework is updated to the newest version, SCF 2021.01.

The update to the content includes new controls that were added to account for the recent release of NIST SP800-53 rev 5 baseline controls, as well as updates to controls that map to PCI DSS 3.2.1 and HIPAA. This catalog contains over 950+ controls to help you achieve your security goals.

Import or learn more

Get content

Logical fields in Visualizations Logical data fields (true / false) in the Table View will now be available in the X-axis and Color by fields of the Configure Visualization panel. You can now use the logical fields to create visualizations.

Size options in Bubble chart We have added Bubble scale to the Display tab in the Configure Visualization panel of Bubble chart. You can now select the size of the bubbles on the chart from options 1 through 3, where 1 is the smallest and 3 is the biggest. This will help you to better visualize the charts. Learn More

Bulk importing HighBond resources Use the new Bulk Importer to upload numerous HighBond resources at once.

You can upload the following resources in bulk:

• Projects
• Frameworks
• Issues
• Actions
• Objectives
• Risks
• Controls
• Mitigations
• Entity Category
• Entity
• Requests

Learn More

Strengthen the cybersecurity posture of your organization by using NIST SP 800-53 Revision 5 Security and Privacy Controls Revision 5 (2020) The full set of controls for NIST SP 800-53 Security and Privacy Controls Revision 5 are now available for HighBond.

Revision 5 is the latest version of security and privacy controls needed by organizations to accomplish security and privacy objectives. The controls address diverse requirements derived from mission and business needs, laws, executive orders, directives, regulations, policies, standards, and guidelines.

This control catalog contains 1,100 security and privacy controls to protect your organization from a diverse set of threats and risks.

Import or learn more

Get content

SOX Storyboard toolkit We've added a pre-configured SOX Storyboard toolkit that helps monitor the progress of your SOX programs in HighBond.

The toolkit delivers quick time-to-value and provides greater visibility into SOX programs through out-of-the-box storyboards that display various visualizations from your environment. This is highly helpful to executives as the visibility of progress can provide assurance and instill confidence in the effectiveness of your SOX program.

Learn more

Show Total in Pie Chart We have added a new option called Show Total to the Display tab in the Configure Visualization panel of Pie Chart. You can turn on this option to see the sum total of the pie chart values.

Comply with the latest updates to Reg X - Real Estate Settlement Procedures Act (Title 12 CFR Part 1024) Updates to the Electronic Code of Federal Regulations (eCFR) up until December 2020 for Reg X - Real Estate Settlement Procedures Act (Title 12 CFR Part 1024) are now available for import into HighBond.

The RESPA requires lenders, mortgage brokers, or servicers of home loans to provide borrowers with pertinent and timely disclosures about the nature and costs of the real estate settlement process. RESPA also prohibits practices such as kickbacks, and limits the use of escrow accounts. The Department of Housing and Urban Development (HUD) originally published Regulation X, which implements RESPA.

The changes to the chapter were minor wording changes to improve clarity of the sections and subsections.

Import or learn more

Get content

Comply with the latest updates to Fair Credit Reporting Act (FCRA) – (Title 12 CFR Part 1022) Fair Credit Reporting (CFPB Regulation V) Updates to the Electronic Code of Federal Regulations (eCFR) up until December 2020 for Fair Credit Reporting Act (FCRA) – (Title 12 CFR Part 1022) Fair Credit Reporting (CFPB Regulation V) are now available for import into HighBond.

The FCRA is intended to ensure consumer reports are accurate and used for permissible purposes. It creates consumer protections and rights and imposes responsibilities on banks as users of consumer reports and entities furnishing information to the consumer reporting agencies.

The changes to the chapter were minor wording changes to improve clarity of the sections and subsections.

Import or learn more

Get content

Comply with the latest updates to Reg M - Consumer Leasing Act (Title 12 CFR Part 1013) Updates to the Electronic Code of Federal Regulations (eCFR) up until December 2020 for Reg M - Consumer Leasing Act (Title 12 CFR Part 1013) are now available for import into HighBond.

The CLA ensures consumers get meaningful and accurate disclosure of lease terms before they enter into a contract. With this information, consumers can more easily compare one lease with another, and compare the cost of leasing with the cost of buying on credit or the opportunity cost of paying cash. In addition, the CLA limits balloon payments due at the end of the lease, and regulates advertising for leasing transactions.

The changes to the chapter were minor wording changes to improve clarity of the sections and subsections.

Import or learn more

Get content

Search in Configure Table View panel We have added a search field to the Configure Table View panel. You can now enter a keyword or phrase to filter the list of available columns in the table. This is especially useful when you have to search through a large number of columns.

This enhancement includes keyboard accessibility and screen reader support in the Configure Table View panel. This will be helpful for those using screen readers, keyboards, and other assistance technology. Learn more

Strengthen the cybersecurity posture of your organization by using NIST 800-53 Security and Privacy Controls Revision 5 - Full Baseline (2020) in HighBond The full set of controls for NIST 800-53 Security and Privacy Controls revision 5 are now available for HighBond.

Revision 5 is the latest version of security and privacy controls needed by organizations to accomplish security and privacy objectives. The controls address diverse requirements derived from mission and business needs, laws, executive orders, directives, regulations, policies, standards, and guidelines.

This control catalog contains 1,100 security and privacy controls to protect your organization from a diverse set of threats and risks.

Import or learn more

Get content

Strengthen the cybersecurity posture of your organization by using NIST 800-53 Security and Privacy Controls Revision 5 - High Baseline (2020) in HighBond The full set of High baseline controls for NIST 800-53 Security and Privacy Controls revision 5 are now available for HighBond.

Revision 5 is the latest version of security and privacy controls needed by organizations to accomplish security and privacy objectives. The controls address diverse requirements derived from mission and business needs, laws, executive orders, directives, regulations, policies, standards, and guidelines.

This control catalog contains 371 security and privacy controls to protect your organization from a diverse set of threats and risks.

Import or learn more

Get content

Strengthen the cybersecurity posture of your organization by using NIST 800-53 Security and Privacy Controls Revision 5 - Moderate Baseline (2020) in HighBond The full set of Moderate baseline controls for NIST 800-53 Security and Privacy Controls revision 5 are now available for HighBond.

Revision 5 is the latest version of security and privacy controls needed by organizations to accomplish security and privacy objectives. The controls address diverse requirements derived from mission and business needs, laws, executive orders, directives, regulations, policies, standards, and guidelines.

This control catalog contains 288 security and privacy controls to protect your organization from a diverse set of threats and risks.

Import or learn more

Get content

Strengthen the cybersecurity posture of your organization by using NIST 800-53 Security and Privacy Controls Revision 5 - Low Baseline (2020) in HighBond The full set of Low baseline controls for NIST 800-53 Security and Privacy Controls revision 5 are now available for HighBond.

Revision 5 is the latest version of security and privacy controls needed by organizations to accomplish security and privacy objectives. The controls address diverse requirements derived from mission and business needs, laws, executive orders, directives, regulations, policies, standards, and guidelines.

This control catalog contains 149 security and privacy controls to protect your organization from a diverse set of threats and risks.

Import or learn more

Get content

Strengthen the cybersecurity posture of your organization by using NIST 800-53 Security and Privacy Controls Revision 5 - Privacy Baseline (2020) in HighBond The full set of Privacy baseline controls for NIST 800-53 Security and Privacy Controls revision 5 are now available for HighBond.

Revision 5 is the latest version of security and privacy controls needed by organizations to accomplish security and privacy objectives. The controls address diverse requirements derived from mission and business needs, laws, executive orders, directives, regulations, policies, standards, and guidelines.

This control catalog contains 96 privacy focused controls to protect your organization from a diverse set of threats and risks.

Import or learn more

Get content

Display Percentage in Bar and Column Charts We have added a new option called Show Percentages to the Display tab in the Configure Visualization panel. You can turn on this option to see the percentage that each value represents in the chart.

Note that this is applicable only for the bar and column charts. Learn more

Get the fixes made to the PCI DSS 3.2.1 compliance map Fixes to the PCI DSS 3.2.1 compliance map are now available in HighBond.

We noted some issues in the structure which did not allow for the granularity required to map controls to sub-sections. We fixed these by splitting out the sections and creating a more granular level of requirements to map to your controls.

Import or learn more

Get content

Comply with the latest updates to FINCEN: Rules For Banks - (Title 31 CFR Part 1020) Updates to the Electronic Code of Federal Regulations (eCFR) up until December 2020 for FINCEN: Rules For Banks - (Title 31 CFR Part 1020) are now available for import into HighBond.

Part 1020 requires covered financial institutions to establish and maintain written policies and procedures that are reasonably designed to (1) identify and verify the identity of customers; (2) identify and verify the identity of the beneficial owners of companies opening accounts; (3) understand the nature and purpose of customer relationships to develop customer risk profiles; and (4) conduct ongoing monitoring to identify and report suspicious transactions and, on a risk basis, to maintain and update customer information.

Import or learn more

Get content

Comply with the latest updates to General Provisions - Title 31 CFR Part 1010 Updates the to Code of Federal Regulations for Title 31 Part 1010 - General Provisions, as part of FinCEN, are now available in HighBond.

Part 1010 outlines the general requirements for anti-money laundering programs, reports of currency transactions, and standard due diligence for preventing money laundering.

The changes to Part 1010 were in two sections:

• Section 1010.661 was added

• Section 1010.821 had changes to the penalties table.

Updates are generated by regulatory action taken by federal agencies and published in the Federal Register, and subsequently to the Code of Federal Regulations.

Import or learn more

Get content

Storyboard filters carry over to the Visualization When you drill down from a storyboard that has filters applied, these filters will now be carried over to the visualization and you can see the filtered dataset in Results as it was in the storyboard. You do not have to apply the same filters again. Learn more

Change in Report Readers role We have changed the permission level of Report Readers to read-only access. Report Readers can now only view existing reports, dashboards, and presentations. They cannot create or delete any components in the Reports app. Learn more

Comply with the latest updates to Reg DD - Truth in Savings Act (Title 12 CFR Part 1030) Updates to the Electronic Code of Federal Regulations (eCFR) up until December 2020 for Reg DD - Truth in Savings Act (Title 12 CFR Part 1030) are now available for import into HighBond.

Reg DD enables consumers to make informed decisions about their accounts at depository institutions through the use of uniform disclosures. The disclosures aid comparison shopping by informing consumers about the fees, annual percentage yield, interest rate, and other terms for deposit accounts.

The changes to the chapter were minor wording changes to improve clarity of the sections and subsections.

Import or learn more

Get content

Comply with the latest updates to Reg Z - Truth in Lending Act (Title 12 CFRPart 1026) Updates to the Electronic Code of Federal Regulations (eCFR) up until December 2020 for Reg Z - Truth in Lending Act (Title 12 CFRPart 1026) are now available for import into HighBond.

Reg Z prohibits certain practices relating to payments made to compensate mortgage brokers and other loan originators. The goal of the amendments is to protect consumers in the mortgage market from unfair practices involving compensation paid to loan originators.

The changes to the chapter were minor wording changes to improve clarity of the sections and subsections.

Import or learn more

Get content

Comply with the latest updates to Reg E - Electronic Fund Transfer Act (Title 12 CFR Part 1005) Updates to the Electronic Code of Federal Regulations (eCFR) up until December 2020 for Reg E - Electronic Fund Transfer Act (Title 12 CFR Part 1005) are now available for import into HighBond.

The EFTA is intended to protect individual consumers engaging in electronic fund transfers (EFTs) and remittance transfers.

The changes to the chapter were minor wording changes to improve clarity of the sections and subsections.

Import or learn more

Get content

Comply with the latest updates to Reg C - Home Mortgage Disclosure Act (Title 12 CFR Part 1003) Updates to the Electronic Code of Federal Regulations (eCFR) up until December 2020 for Reg C - Home Mortgage Disclosure Act (Title 12 CFR Part 1003) are now available for import into HighBond.

The HMDA requires many financial institutions to collect, report, and disclose certain information about their mortgage lending activity. It establishes institutional and transactional coverage thresholds in Regulation C that determine whether financial institutions are required to collect, record, and report any HMDA data on closed-end mortgage loans or open-end lines of credit (collectively, coverage thresholds).

The changes to the chapter were minor wording changes to improve clarity of the sections and subsections.

Import or learn more

Get content

Comply with the latest updates to Reg II - Debit Card Interchange Fees and Routing (Title 12 CFR Part 235) Updates to the Electronic Code of Federal Regulations (eCFR) up until December 2020 for Reg II - Debit Card Interchange Fees and Routing (Title 12 CFR Part 235) are now available for import into HighBond.

The DCIFR establishes standards for debit card interchange fees and prohibits payment card network exclusivity arrangements and routing restrictions for debit card transactions.

The changes to the chapter were minor wording changes to improve clarity of the sections and subsections.

Import or learn more

Get content

Comply with the latest updates to FRS Reg H - Membership of State Banking Institutions in the Federal Reserve System (Title 12 CFR Part 208) Updates to the Electronic Code of Federal Regulations (eCFR) up until December 2020 for FRB Reg H - Membership of State Banking Institutions in the Federal Reserve System (Title 12 CFR Part 208) are now available for import into HighBond.

Reg H addresses issues related to membership of state chartered banking institutions in the Federal Reserve System. Topics covered include membership, capital, and branching requirements, investment in securities, premises and loans, real estate lending and appraisals, Bank Secrecy Act compliance, and financial subsidiaries and related activities. Regulation H also implements National Flood Insurance Act and Flood Disaster Protection Act requirements.

The changes to the chapter were minor wording changes to improve clarity of the sections and subsections.

Import or learn more

Get content

Comply with the latest updates to Reg Y - Bank Holding Company Act (Title 12 CFR Part 225) Updates to the Electronic Code of Federal Regulations (eCFR) up until December 2020 for Reg Y - Bank Holding Company Act (Title 12 CFR Part 225) are now available for import into HighBond.

The BHCA regulates the acquisition of control of banks and bank holding companies by companies and individuals, defines and regulates the nonbanking activities in which bank holding companies (including financial holding companies) and foreign banking organizations with United States operations may engage, and establishes the minimum ratios of capital to assets that bank holding companies must maintain.

The changes to the chapter were minor wording changes to improve clarity of the sections and subsections.

Import or learn more

Get content

Comply with the latest updates to Community Reinvestment Act and Interstate Deposit Production Regulations (Title 12 CFR Part 25) Updates to the Electronic Code of Federal Regulations (eCFR) up until December 2020 for Community Reinvestment Act and Interstate Deposit Production Regulations (Title 12 CFR Part 25) are now available for import into HighBond.

The CRA regulations establish CRA performance standards for small and intermediate small banks and savings associations. The regulations define small and intermediate small banks and savings associations by reference to asset-size criteria expressed in dollar amounts, and they further require the agencies to publish annual adjustments to these dollar figures.

The changes to the chapter were minor wording changes to improve clarity of the sections and subsections.

Import or learn more

Get content

Comply with the latest updates to Reg CC - Availability of Funds and Collection of Checks (Title 12 CFR Part 229) Updates to the Electronic Code of Federal Regulations (eCFR) up until December 2020 for Reg CC - Availability of Funds and Collection of Checks (Title 12 CFR Part 229) are now available for import into HighBond.

The AFCC addresses two laws—the Expedited Funds Availability Act (EFA Act), and the Check Clearing for the 21st Century Act (Check 21). The regulation sets forth the requirements that depository institutions make funds deposited into transaction accounts available according to specified time schedules and that they disclose their funds availability policies to their customers.

The changes to the chapter were minor wording changes to improve clarity of the sections and subsections.

Import or learn more

Get content

Comply with the latest updates to Loans to Executive Officers, Directors, and Principal Shareholders of Member Banks (Title 12 CFR Part 215) Updates to the Electronic Code of Federal Regulations (eCFR) up until December 2020 for Loans to Executive Officers, Directors, and Principal Shareholders of Member Banks (Title 12 CFR Part 215) are now available for import into HighBond.

Reg O restricts credit that a member bank may extend to its executive officers, directors, and principal shareholders and their related interests.

The changes to the chapter were minor wording changes to improve clarity of the sections and subsections.

Import or learn more

Get content

Improvements to the help and support menu We have made some changes to the help and support menu.

• It has a new Product updates section, where we will tell you about major enhancements.

• It includes new, more dynamic help and training content, which we will expand on over time.

Currently, this applies to Launchpad, but the changes will be applied to the other apps in HighBond over the coming weeks.

New reports enhancements We have upgraded the Reports app in the North American region (Canada and the United States). For the complete list of enhancements, see below.

New reports enhancements We have upgraded the Reports app in the Asia Pacific (AP), Europe (EU), and Australia (AU) regions.

• The Dashboard module has been completely redesigned to enable you to create infographic dashboards via a flexible, free-form canvas. Learn more
• The new free-form dashboard canvas layout supports the use of multiple content objects to create pixel perfect dashboard designs. Learn more
• Traditional static dashboard layouts have been retained and further enhanced.
• Many new widgets have been introduced on the dashboard canvas, like text, images, icons, filters, and action buttons. Learn more
• The Storyboard module has been replaced with Presentation. Presentation is a fully integrated presentation module designed for data-led communications. Learn more
• The entire dashboard canvas functionality has been shared in Presentation. This includes reports, text, images, icons, filters, and action buttons. Learn more
• Presentation slides can be designed and saved as themes to be reused for other presentations or individual slides. Learn more
• Filter objects can now be positioned freely on the dashboard and in the standard fixed locations, providing additional design freedom.
• The Dashboard builder now supports undo and redo for multiple changes on the canvas. Learn more
• A new Preview mode has been introduced to allow users to preview the dashboard and test out its interactions before publishing. Learn more
• A Properties Panel has been introduced that allows you to easily customize content objects with instant effect. Learn more
• The user interface for linking report interactions on the dashboard has been completely redesigned, making it simpler and more intuitive. Learn more
• You can now launch report editing mode directly from the dashboard so you can customize the report and return directly to the dashboard. Learn more
• You can now export reports into CSV format files from a dashboard. Learn more
• You can share dashboards without going into edit mode. Learn more
• Filters in Dashboard and Presentation have been enhanced.
• Enhancements have been made to make the filter linking process easier. You can now link filters through the filter panel in an easy-to-use setup. Learn more
• We've made enhancements to the overall user interface design and user experience throughout the Reports app.
• Adding KPI reports to dashboards has been deprecated.
• Exporting a dashboard has been deprecated.

North American region upgrades are expected shortly.

Customers who use an on-premise agent must upgrade to the new version if they want to use analytic scripts that include any of the updates to ACLScript in Analytics 15.0.

Version 15.0 of the Robots Agent is also required if you want to implement the new multi-agent capability.

Learn more

Customers who upgrade from version 14.x of the Robots Agent to version 15 Check the status of the UploadLogsWhenFailed configuration setting in the Robots Agent configuration file on the server (C:\Program Files (x86)\ACL Software\Robots Agent\agent\Agent.exe.config).

If UploadLogsWhenFailed is set to false, and your intention is that logs for failed tasks should not be uploaded to the Robots app in the cloud, you need to re-specify the upload prohibition using a new configuration setting in Robots.

In the Agent management screen in Robots, set Permitted file uploads to File uploads not permitted.

Although UploadLogsWhenFailed currently still appears in the configuration file, the setting no longer has any effect.

Learn more

Robots Agent cluster for increased processing capacity and load-balancing Customers with ACL Robotics Enterprise Edition can now create a Robots Agent cluster by installing additional instances of the Robots Agent on additional Windows servers. A multi-agent cluster increases task processing capacity by automatically balancing the processing demand across multiple agents.

This capability significantly increases the scalability of Robots as an enterprise-level data automation and analysis solution.

Learn more

More flexible directory structure You can now configure separate base folders for these Robots Agent items:

• temporary analytic job folders
• Analytics data tables folders
• Analytics result tables folders

Separately configurable base folders allows you to optimize hardware resources when implementing an on-premise Robots Agent. For example, you can locate temporary analytic job folders on a fast, high performance drive. For data table folders, you can specify a more economical, cold storage location appropriate for large files that are accessed only periodically.

Learn more

Improved control of file security A new global configuration setting in Robots gives you three options for controlling the upload of files from the Robots Agent to the Robots app in the cloud:

• Upload only non-Analytics result files, such as Excel, and logs (existing behavior in version 14.2 of the Robots Agent)
• Upload Analytics result tables, non-Analytics result files, and logs (new option)
• Prohibit the upload of any file from the Robots Agent to the Robots app. (new option)

Learn more

Data segregation enforced Robot tasks are prevented from accessing data in other robots, or from outputting data to other robots. Tasks can only interact with data in the robot in which they are located, or with data located outside the Robots Agent directory structure. In a script, any command that attempts to traverse a robot boundary will cause the script to fail.

Strict data segregation allows different departments in your organization to use the same instance of Robots while ensuring that employees see only data that they are entitled to see.

Learn more

Configuration setting removed The UploadLogsWhenFailed configuration setting has been removed from the Robots Agent configuration file (Agent.exe.config). The uploading of Analytics logs from the Robots Agent to the Robots app is now controlled by the new file uploads configuration setting in Robots.

Learn more

4 new pre-built analysis robots We’ve added 4 new analysis robots to our pre-built robot offering:

• T&E Analysis for Concur Robot

• User Access Controls Testing Analysis Robot

• P2P Analysis for SAP ERP Robot

• P2P Analysis for Oracle eBS Robot

You can implement these analysis robots in conjunction with the corresponding data integration robots.

The overall approach is to implement the data integration robot(s), and share the tables created from this robot to any analysis robots using Robots' shared tables feature.

Learn more

Content - Pre-built Robots

• Active Directory Data Integration Robot

• User Access Controls Testing Analysis Robot

Field length limitations for Member field in AD Group and MemberOf field in AD User tables Using Analytics or Robots Agent v15, the fields Member in the Group table and MemberOf in the User table are limited to a maximum length of 2000 characters (4000 in Unicode) in the Active Directory Data Integration robot. This may result in significant truncation of data contained in these fields and impact the results of analytic UA04AD_NonAdmin_Privilege, which analyzes the membership of groups in the Group table. Groups for which possible truncation occurred are flagged by the analytic.

Using previous versions of Analytics or Robots Agent, these fields are imported with a maximum length of 12,000 (24,000 in Unicode), which reduces the risk of truncation but does not entirely eliminate it.

Content - Pre-built Robots

• All Data Integration Robots

Use Sample Data Parameter The intended behavior of leaving the "Use Sample Data?" parameter blank is to skip the use of sample data and use production data instead. Leaving the parameter blank returns an error message.

Workaround: Select False in the dropdown list for this parameter to skip the use of sample data and use production data instead.

Content - Pre-built Robots

• Unicode analysis robots running with Robots Agent 14.2

HighBond mobile app for iOS 5.7.1 This release includes updated Firebase Crashlytics SDK libraries.

Bulk update the assigned user for control tests You can now bulk update the assigned user for multiple controls at once. Then, that user gets one digest email notification, instead of one email per control. Learn more

Expanded permissions for bulk updating control and testing attributes Bulk updates in Mission Control are no longer restricted to Launchpad System Admins only.

Learn more about the new bulk update permissions

We have made several improvements to the People tab in the Scheduler app:

• We have added a column that shows the number of scheduled and remaining hours for each user, so you can see at a glance if a user has been scheduled for too many or too few hours for the time frame you’re viewing in the scheduler.
• You can now choose to view the Gantt chart by week, month, quarter, or fiscal year, and jump to either today or a specific date.
• If a user is scheduled to a phase outside of the time frame that’s currently visible in the Gantt chart, the phase now displays anyway, so you can check when they’re scheduled for that phase.
• You can click and drag the start, end, or an entire bar to adjust scheduled project time within the visible portion of the Gantt chart.

New version of COVID-19 toolkit A new version of the COVID-19 case data toolkit is available that fixes two issues with the first version (JHU COVID-19 Case Data Robot and Storyboard). The new version automatically accommodates case data that exceeds 100,000 records. It also allows specification of your HighBond region when configuring the robot task, which removes the need for a manual script update.

Notification improvements We have made some improvements to the communications you receive when you bulk update controls.

• When you bulk update the Owner for multiple controls, the new Owner now receives one digest email notification rather than one email per control.
• We have improved the readability of the messages that let you know whether you have successfully or unsuccessfully updated one or more controls.

Learn more

Toolkits navigation update Launchpad has a new link under Resources called Toolkits. You can click this link to go to the Toolkits app that matches the region of your HighBond instance. Learn more

Toolkits interface update The user interface of the Toolkits app now provides more control over managing your toolkits. It now has two tabs, Available Toolkits and Installed Toolkits, with the option to install and delete toolkits, respectively. You can also preview the resources of a toolkit before performing an action. Learn more

Combo Chart in visualizations We have added a combination chart to the charts available in Visualizations. A combination chart consists of a line chart overlaid on a column chart. This can be useful when comparing values in different categories. For example: Using combination chart to compare projected sales with actual sales for a given time period. Learn more

Usability improvements when bulk updating controls We have made some helpful improvements to the bulk update process.

• When you change an attribute, a blue dot appears next to the attribute name, indicating that it will change.
• When you change an attribute, a small reset icon or link appears, so you can quickly undo that change.
• You can now set any attribute to "blank". Doing this removes the data from that attribute. It does not revert your changes.
• When bulk updating controls, the Update and Cancel buttons are always visible when the list of attributes is taller than your browser window.

Custom date fields available in more Views The following fields are now available in the Actions and Actions by Entity Views for your reporting purposes:

• Project Planned Start
• Project Planned End
• Project Actual Start
• Project Actual End
• Project Planned Milestone
• Project Actual Milestone
• Objective Planned Start
• Objective Planned End
• Objective Actual Start
• Objective Actual End
• Objective Planned Milestone
• Objective Actual Milestone

Learn more

Comply with the latest updates to the Homeowner's Protection Act (HPA) (12 U.S.C. Chapter 49) Updates to the U.S. Code up until June 2020 for Homeowner's Protection Act (HPA) (12 U.S.C. Chapter 49) are now available for import into HighBond.

The HPA addresses homeowners’ difficulties in canceling private mortgage insurance (PMI) coverage.

The changes to the chapter were minor wording changes to improve clarity of the sections and subsections. Updates are made throughout a congressional session on an ongoing basis as public laws are enacted. The version made available is the most current online release point.

• Learn more or import
• Get content

Comply with the latest updates to the Debt Collection Practices (15 U.S. Code Chapter 41 Section 1692) Updates to the U.S. Code up until June 2020 for Debt Collection Practices or FCDPA (15 U.S. Code Chapter 41 Section 1692) are now available for import into HighBond.

The FCDPA is the main federal law that governing debt collection practices and prohibits debt collection companies from using abusive, unfair or deceptive practices to collect debts.

The changes to the chapter were minor wording changes to improve clarity and interpretation of the sections and subsections. Updates are made throughout a congressional session on an ongoing basis as public laws are enacted. The version made available is the most current online release point.

• Learn more or import
• Get content

Comply with the latest updates to the Electronic Signatures in Global and National Commerce (15 USC chapter 96) Updates to the U.S. Code up until June 2020 for Electronic Signatures in Global and National Commerce or E-Sign Act (15 USC chapter 96) are now available for import into HighBond.

The E-Sign Act facilitates the use of electronic records and electronic signatures in interstate and foreign commerce by ensuring the validity and legal effect of contracts entered into electronically.

The changes to the chapter were structural changes (splitting requirements) to improve clarity and interpretation of the sections and subsections. Updates are made throughout a congressional session on an ongoing basis as public laws are enacted. The version made available is the most current online release point.

• Learn more or import
• Get content

Comply with the latest updates to the Servicemember Civil Relief Act (50 U.S. Code Chapter 50) Updates to the U.S. Code up until June 2020 for Servicemember Civil Relief Act or SCRA (50 U.S. Code Chapter 50) are now available for import into HighBond.

The SCRA gives military members a wide range of legal protections not available to the general public.

Updates to the chapter included additional requirements and definitions as well as structural changes (splitting requirements) to improve clarity and interpretation of the sections and subsections. Updates are made throughout a congressional session on an ongoing basis as public laws are enacted. The version made available is the most current online release point.

• Learn more or import
• Get content

Comply with the latest updates to the Restrictions on use of telephone equipment (47 U.S. Code Chapter 5 Section 227) Updates to the U.S. Code up until June 2020 for Restrictions on use of telephone equipment or TCPA (47 U.S. Code Chapter 5 Section 227) are now available for import into HighBond.

The TCPA restricts the use of certain telemarketing phone calls, text messages, and facsimiles. It also restricts the use of automatic dialling systems and/or artificial or prerecorded voice messages without the consumers consent.

Updates to the chapter included several additional requirements as well as structural changes (splitting requirements) to improve clarity and interpretation of the sections and subsections. Updates are made throughout a congressional session on an ongoing basis as public laws are enacted. The version made available is the most current online release point.

• Learn more or import
• Get content

Comply with the latest updates to the Fair Housing Act (42 U.S. Code Chapter 45) Updates to the U.S. Code up until June 2020 for Fair Housing Act or FHA (42 U.S. Code Chapter 45) are now available for import into HighBond.

The FHA prohibits discrimination in the sale, rental, and financing of housing based on race, color, national origin, religion, sex, familial status, and disability.

The changes to the chapter were minor wording changes to improve clarity of the sections and subsections. Updates are made throughout a congressional session on an ongoing basis as public laws are enacted. The version made available is the most current online release point.

• Learn more or import
• Get content

Six new pre-built data integration robots We’ve added 6 new data integration robots to our pre-built robot offering.

• Active Directory Data Integration Robot
• Oracle eBS Data Integration Robot
• Salesforce CRM Data Integration Robot
• SAP ERP Data Integration Robot
• Concur TnE Data Integration Robot
• UNIX Data Integration Robot

You can implement these data integration robots by themselves, combine them with related analysis robots, or use them as the basis for building your own analysis robots.

The overall approach is to implement the Data Integration Robot, and share the tables created from this robot to any analysis robots using Robots' shared tables feature. Get content

Cosmetic improvements We have made cosmetic changes to better standardize Mission Control.

• Better, more colorful icons
• When you examine a control, custom attributes are now on the right side, below the rest of the attributes

HighBond mobile app for Android 2.7 The latest release includes an optimized APK file and other minor fixes. This release also includes support for Android version 11, and the minimum supported version of Android now is 5.0 or later.

Accessibility improvements to Questionnaire Response page We have made some accessibility improvements on the Questionnaire Response page. Those using screen readers or other assistance tools should have a better experience now. This enhancement improves accessibility by making the page more compliant with WCAG 2.O Levels A and AA guidelines and also makes typography and spacing more consistent.

• In the Safari browser, you can now select radio buttons by using the Tab key.
• We have modernized the Related Files link and if you are using a screen reader, when focus is on the link, it reads out the file name.
• We have enhanced the color contrast ratio of text elements.
• You can now use your keyboard to select response types for numeric scale, date, and signature questions and use the Adjust column width button.
• The page shifts focus to the top automatically when you navigate to different pages in a multi-page questionnaire. If there is an error, focus shifts to the top or the first response that has an error.

Two new COVID-19 toolkits We have released two new COVID-19 toolkits that are free to all customers and easier to install.

• Aggregated regulatory feed and U.S. bill list: High-quality, public data from the WHO, CDC, and U.S. government, right in HighBond.
• Assessment questionnaires: Employee self-reporting, work-from-home capabilities, and return-to-office site preparedness surveys.

We have made a variety of enhancements to the People tab in the Scheduler app.

• You can now assign resources to projects and phases to ensure you have adequate capacity to complete planned projects. Any tasks (planning files, objectives, and results files) that were previously scheduled are now displayed as phases (planning, fieldwork, results). This change offers a less granular Gantt chart view, more flexibility, and ease of scheduling resources to significant stages in a project.
• You can now account for absences that are not based around project functions, such as vacations, leaves, professional development, administrative tasks, and more.
• Project Admins can now configure the default working days and full-time hours for people in their organization. They can also set individual hours if they need to specify different work hours for certain people. This information is used to calculate how many hours a resource is expected to work, and how much of the resource's time can be spent on project work.

Learn more

Subscription changes To ensure HighBond provides the best possible value, we've added capabilities to some of our subscriptions.

• AuditBond standard subscribers now have access to the Results and Storyboards apps
• AuditBond standard subscribers now have access to survey tables in the Results app
• All standard editions of HighBond now have access to data analytic tables in the Results app
• All standard editions of HighBond now have access to the Robots app

Labels for My Fieldwork status For better concision and clarity, we changed some of the labels in the My Fieldwork status dashboard tool:

• My Fieldwork status is now called My work status.
• The Preparer review column in the table is now called Prepared.

Learn more

Offline Projects The latest release resolves the following customer reported issues.

• Custom Terms were overflowing the sidebar and not wrapping around when they contained long words without spaces. (OPM-851)
• Line spacing was not maintained in the Description field when text was copy-pasted with new line characters or edited in the web application with new line characters. (OPM-933) and (OPM-864)
• The Risk/Impact and Owner fields were mandatory, but they should be optional. (OPM-886) and (OPM-930)
• Names in the Next Reviewer dropdown list were not sorted alphabetically. OPM-934
• Random text displayed in the Impact and Likelihood fields under Associated Risk when the fields did not have any selected value. (OPM-935)
• Newly created issue under Walkthrough did not display the saved field values. (OPM-940)

Note To upgrade to the latest version of Offline Projects, check in all checked out sections to auto-update Offline Projects to the most recent version.

A new harmonized security and data privacy controls framework Added a the Secure Controls Framework^TM Harmonized Controls - a comprehensive catalog of controls harmonizing requirements across about 100 statutory, regulatory and contractual frameworks spanning multiple geographic regions.

• Learn more or import
• Get content

Reference Collection and basic Active Directory integration Results Admins will now see a new system-generated collection in Results: the Reference Collection.

• This is a special collection that holds Reference tables. These are tables where you can import custom data from an external source so people can reference that data in HighBond. We recommend using a robot to keep this data up-to-date.
• The first reference table, called Contact book, is out now. Use it to automatically import contacts from Active Directory or any other address book. Once set up, Projects users can find people and assign actions and requests to them with greater ease.
• To help you get started quickly, we have provided a script to help ACL Robotics customers quickly integrate Active Directory contacts into HighBond. You can use this script as-is, or you can modify it to bring contacts into your Contact book from another system or data source. Learn more

HighBond mobile app for Android 2.6 The latest release includes an upgraded Android Gradle plugin and updated translations. Android 2.6 also fixes the following customer reported issues:

• Documents cannot be attached to various pages, including planning files, narratives, walkthroughs, and testing. (ANDROID-449)
• Some pages appear editable when signed off. (ANDROID-288)

Project Admins now have the flexibility to define who can update the status of an action. The new option (Allow anyone to update the status of actions) is available under System administration > Settings.

• Enabled Anyone with access to actions can update the Status field (default).
• Disabled Only licensed HighBond users with access to actions (Professional Managers, Professional Users, Oversight Executives, and action creators) can update the Status field.

The new option applies to all projects in your HighBond instance.

Learn more

COVID-19 toolkit We've released the first phase of our COVID-19 toolkit. This toolkit is available for free to all customers. It includes a pandemic risk and response management framework and enterprise risk, a data analytics package with COVID-19 infection data from Johns Hopkins University, and more.

Assigning roles in projects and frameworks We have optimized and improved the performance of the side panels where you grant individual users and groups access to projects and frameworks:

• Groups and individuals assigned the No Access role are no longer displayed.
• The groups and individuals list are now paginated, with a maximum of 50 groups and individuals displayed per page.

Learn more

HighBond mobile app for iOS 5.7 The latest update fixes the following customer reported issues.

• After signing off as a Preparer on a narrative, there was no indication that the item had become read-only. (MOBDEV-2578)
• Multiple versions of the same files (MS Word and Excel) displayed with the same name in the Testing section, with no indication as to which was the latest version. (MOBDEV-2803)
• User was unable to view the items assigned in the project when added to the project through a group. (MOBDEV-2804)
• "No response" pop-up message displayed when a user tried to open an objective. (MOBDEV-2835)

Issue SYS ID and URL fields The following fields are now available in the Fieldwork and Fieldwork by Entity Views for your reporting purposes:

• Risk Issue SYS ID
• Risk Issue URLs
• Control Test Issue SYS ID
• Control Test Issue URLs
• Walkthrough Issue SYS ID
• Walkthrough Issue URLs

Learn more

Custom date fields available in more Views You can now include the following fields in your reports, using the Archived Issues, Archived Issues by Entity, Issues, or Issues by Entity View:

• Project Planned Start
• Project Planned End
• Project Actual Start
• Project Actual End
• Project Planned Milestone
• Project Actual Milestone
• Objective Planned Start
• Objective Planned End
• Objective Actual Start
• Objective Actual End
• Objective Planned Milestone
• Objective Actual Milestone

Learn more

Cloning or importing items To better handle copying items from different project types, we have implemented the following behavioral change:

When cloning or importing items, if the target project or framework has a required field that is blank, the first available value from the required field is chosen.

To learn more, see the following topics:

• Cloning and importing objectives
• Importing narratives
• Importing risks
• Importing procedures or controls

Action fields Issue owners, while still maintaining control over action fields, can now allocate some responsibility to action owners. Action owners can specify when they have completed an action.

These completion updates can be collected in a systematic and reportable way, and are accessible to all action owners.

To support this enhanced workflow, we made the following changes:

• A new Submitted On field has been added to enable action owners to choose their completion date.
• The Discussion tab has been renamed to Update Action to better indicate the area where the action owner makes updates.
• All users (including assigned action owners without access to HighBond) can interact with the Update Action tab.
• The action Status field has been moved to the Update Action tab so that action owners can update their status of completion.

  Tip

  Issue owners can still maintain control to close the action, using the Action state field.

• The default action status option (Closed) has been renamed to Completed.

Learn more

Working with issues When you create or update an issue from the Issues tab or Issue List panel, you can now interact with the page in context while the side panel is open. We have also reordered the list of fields and made some styling improvements in the side panel. Learn more

Automatic issue assignment When you bulk upload issues and specify a HighBond user's email in an owner field (Owner, Executive Owner, Project Owner), the person is now automatically assigned the issue in Projects.

Previously, automatic issue assignment via bulk upload was not supported. Learn more

New version of Robots Agent Version 14.2.0 of the on-premise Robots Agent has been released.

Customers who use an on-premise agent must upgrade to the new version if they want to schedule analytic scripts that include any of the updates to ACLScript in Analytics 14.2.  Learn more

HighBond mobile app for iOS 5.6.2 The latest update fixes the following customer reported issue:

Mobile app crashes. (MOBDEV-2806)

Redesigned Risk Profile cards We have improved the risk cards on the Risk Profile page.

• You can now go to a risk by clicking its name, even if the card is collapsed.
• For expanded cards, the Manage button now says View, but it performs the same function.
• You can no longer double-click a risk card to edit that risk. To edit a risk, expand the card and click the new Edit button.
• You can no longer associate a risk with strategic objectives from the Risk Profile page. To associate a risk with strategic objectives, open the risk and go to the Assessment tab. Learn more
• Minor visual tweaks and color changes to risk cards to improve their appearance.

Deleting items associated with certifications Before you can delete an item associated with a certification, you must either remove the item from the certification or delete the certification. Learn more

Deleting projects containing certifications

• If you temporarily delete a project, the Results collection is archived.
• If you restore a deleted project, the Results collection is also restored, and the certification process resumes.
• If you permanently delete a project, the Results collection is archived and no longer displays a link to the project.

Learn more

Risk heatmap PDFs We have made several improvements to risk heatmaps that you export to PDF.

• Overlapping bubbles are numbered and marked in both the heat map and the legend. Learn more
• There is an additional page containing a heatmap with no legend.
• There is an additional page containing a legend with no heat map.
• The links to zoom in and out, which do not work in PDFs, no longer appear in the export.

HighBond mobile app for iOS 5.6.1 and Android 2.5.1 The latest update fixes the following customer reported issues.

• Mobile app crashes. (MOBDEV-2817; ANDROID-434)
• Android app now asks for permission when attempting to access photos and videos. (ANDROID-426; ANDROID-437)
• Unable to check in narrative that was edited in offline mode. (PD-13542)
• "Turn on your wifi..." popup message displays for pages that can be accessed offline. (MOBDEV-2813)
• Unable to download image file after taking a photo. (ANDROID-440)

Importing risks or controls When you import risks, you can now choose to include associated controls. Similarly, when importing controls, you can also choose to include associated risks.

• Learn more about importing controls
• Learn more about importing risks

Resubmitting questionnaires We have made changes to the behavior of questionnaires when someone is resubmitting them.

• Recipients can now delete previously attached files.
• When responding to one questionnaire for multiple records, recipients now see previously attached files that are mutually attached to all records on that questionnaire. Previously, recipients only saw previously attached files from the first record on that questionnaire.
• When responding to one questionnaire for multiple records, if only a subset of those records have previous attachments from that questionnaire, recipients do not see those attachments listed as previous attachments. In addition, these invisible attachments are overwritten when the questionnaire is resubmitted. Only the files actually listed under previous attachments, and any new attachments you add, are preserved in the questionnaire response. Questionnaire recipients are warned before this happens.
• We have removed the Save button when you are responding to one questionnaire for multiple records if any of those records already have a response for that questionnaire.

Updated field formats We have updated the formats of fields in the Results View to coincide with how fields are presented in other Views. Learn more

Display auxiliary scripts Any auxiliary scripts in a script version are now displayed in the Scripts tab in production mode.

Displaying both analytic scripts and auxiliary scripts provides a more complete picture of the production version of a set of scripts.

Use SSO for multiple instances Users who need to access multiple instances of HighBond can now authenticate to all of them using Single Sign-On (SSO). Learn more

Delimited file import Characters were being omitted from the import of a delimited file if the file contained a delimiter character at the end of the line (end of the record). The issue has now been resolved. (AN-7700)

Making this fix required reverting an earlier fix: "Empty last field in *.csv and *.dat files correctly imported" (AN-6859). The defect addressed by the earlier fix is now present again in Robots Agent 14.1.2. It will be addressed in a future version of Robots Agent.

Additional system fields You can now include the following fields in your reports, using the Fieldwork or Fieldwork by Entity View:

• Parent Framework Control SYS ID
• Parent Framework Risk SYS ID

Learn more

Timesheets View The Timesheets View now includes the following objective fields: 

• Objective Name
• Objective Description
• Objective Reference
• Objective Owner
• Objective Executive Owner
• Objective Assigned Auditor
• Objective Location
• Objective URL
• Objective Assurance
• Objective Inherent Risk Score
• Objective Residual Risk Score
• Objective Created
• Objective Updated

Learn more

Issue Identified Date field The Issue Identified Date field is now available in the Action Items and Action Items by Entities Views.

Learn more

The updated HighBond mobile app for iOS 5.6 fixes the following customer reported issues:

• HighBond Help is pointing to the Support website instead of Help website. (MOBDEV-2789)
• Reference to www.aclgrc.com should read www.highbond.com. (MOBDEV-2790)
• Unable to edit Did this Control operate effectively? when Are you testing this key control as part of this testing round? is equal to Yes. (MOBDEV-2796)
• Japanese text display is distorted in the iPad app. (MOBDEV-2801)

The updated HighBond mobile app for Android 2.5 fixes the following customer reported issues:

• Unable to capture evidence from testing tab using the camera. (ANDROID-417)
• HighBond mobile app crashes when using the camera. (ANDROID-425)

• Text wrapping is now applied automatically when you export reports to Excel. You can additionally specify the number of characters after which the text will wrap.
• If you have a Co-Display report that contains tabs, you can now export all tabs to Excel. Each tab is defined as a separate worksheet in the Excel file.

• Discrete time series option Configure chart data to be viewed according to discrete time junctions, rather than a continuous flow.
• Date format Change the date format within a discrete time series chart to display longer or shorter variations.
• Specify how to treat null values If your data contains null values, you can now specify how to represent gaps in time granularity for series and trends data. You can choose to break the line where there are gaps in time, skip over the missing values without filling in the gaps with any additional values, or treat each missing value as zero.
• Specify a Color field You can now represent a third data dimension in time series charts.

• Pie charts Configure pie chart settings to hide the percentage value displayed in pie chart tooltips.
• Line charts Add labels to line charts to print out the values of the data points.
• Treemap chart Configure treemap chart settings to display a maximum number of squares or the top x number of values you specify.
• Heat Grid chart Sort Heat Grid charts by series and add a dimension field as a tooltip.
• Axis style settings Configure additional settings for the horizontal and vertical axis in a chart, such as displaying tick marks on the axis, customizing the axis style, and showing labels displaying tick values.
• Customizable axis titles Customize horizontal or vertical axis titles on an Auto Chart.
• Legend style settings Configure additional legend settings, such as limiting the number of values displayed in the legend, defining the shape of items in the legend, and showing legend items for trends.
• Sorting by group order Sort chart data based on the same group sorting applied to the table in the report.

Date fields added to Views The following fields are now available in the Projects and Users and Projects and Users by Entity Views:

• Project Planned Start
• Project Planned End
• Project Actual Start
• Project Actual End
• Project Planned Milestone
• Project Actual Milestone

Learn more

The Reports system upgrade corrects the following reported issues:

• Reports marked as favorites are being duplicated in the dashboard side panel. (RPM-1074)
• Removing reports from the favorites list does not automatically update the favorites list. (RPM-1124)
• Report Readers can edit a report if they are assigned as an approver. (RPM-1154)
• Cross-site scripting (XSS) is stored in image manager. (RPM-1216)
• Font color remains black even on dark colored backgrounds. (RPM-1070)
• Configuring the font size for summary reports does not work. (RPM-1070)

Sharing tables allows you to import a data set once and use it in multiple locations, instead of importing the same data set multiple times. It also lets you maintain a single master copy of a table. Learn more

• Datetime fields in Results now reflect DST when it is active in your time zone. Learn more
• Trigger schedules now adjust for DST when it is active in that trigger's time zone. In most cases, we updated your triggers to support DST automatically. In rare cases where we were unable to make that update for you, those triggers still run on their old schedule. If you need DST support, you can open those triggers and reselect a time zone to enable DST for that trigger. Learn more

Redesigned and simplified emails We have refreshed the design and content of our HighBond emails, making them simpler and easier to act on.

If you have specified a logo for your organization in Launchpad, the logo now displays in the footer of all system email notifications, which helps users identify that the notifications are from a legitimate source. Learn more

Redesigned and simplified emails We have refreshed the design and content of our HighBond emails, making them simpler and easier to act on.

If you have specified a logo for your organization in Launchpad, the logo now displays in the footer of all system email notifications, which helps users identify that the notifications are from a legitimate source. Learn more

Redesigned and simplified emails We have refreshed the design and content of our HighBond emails, making them simpler and easier to act on.

If you have specified a logo for your organization in Launchpad, the logo now displays in the footer of all system email notifications, which helps users identify that the notifications are from a legitimate source. Learn more

The updated HighBond mobile app for iOS 5.5 includes:

• Visual updates associated with our rebranded company and platform, including new logos and names. (MOBDEV-2771 and MOBDEV-2772)
• The ability to view and remove images inserted in rich text fields. (MOBDEV-2779)

The following customer reported issues have also been resolved:

• Unlinking risks and controls does not work. (MOBDEV-2647)
• Error message displays when creating a request and leaving the Contact Email field blank. (MOBDEV-1590)
• Difficult to see table headers as font color and background color is very similar. (MOBDEV-2786)

The updated HighBond mobile app for Android 2.4 includes:

• Visual updates associated with our rebranded company and platform, including new logos and names. (ANDROID-397 and ANDROID-398)
• The ability to view and remove images inserted in rich text fields. (ANDROID-404)

The following customer reported issues have also been resolved:

• Text is being duplicated when editing information within rich text fields. (ANDROID-411)
• A previously viewed planning overview page opens when you edit the planning overview for a different project. (ANDROID-412)
• Text typed into fields is not being display when creating a new project item. (ANDROID-414)
• Mobile app requests permission to access Phone and Device ID & Call Information. (ANDROID-402)

Redesigned and simplified emails We have refreshed the design and content of our HighBond emails, making them simpler and easier to act on.

If you have specified a logo for your organization in Launchpad, the logo now displays in the footer of all system email notifications, which helps users identify that the notifications are from a legitimate source. Learn more

Issue sign-off fields Report on issue details, issue remediation, and issue retest sign-offs from Projects using any of the following Views:

• Archived Issues
• Archived Issues by Entity
• Action Items
• Action Items by Entity
• Issues
• Issue by Entity

Learn more

New version of Robots Agent Version 14.1.0 of the on-premise Robots Agent has been released.

Customers who use an on-premise agent must upgrade to the new version if they want to schedule analytic scripts that include any of the updates to ACLScript in Analytics 14.1.  Learn more

• Automatic assignment of Robots Admin A Launchpad System Admin with a Professional subscription is now automatically a Robots Admin. This automatic assignment cannot be changed in Robots.

  Other users can still be manually assigned as a Robots Admin in Robots.

• Robots Admins have access to every robot Robots Admins are now automatically a collaborator for every robot, with the role of owner. This change ensures that at least one user has a global view and maintenance capability for all robots.

  Previously, Robots Admins had to be assigned to each robot just like a regular user.

• Robots Agent management The ability to manage the Robots Agent can now be assigned more flexibly with the addition of the Manage Agent? setting. If required, IT staff can be given the ability to manage the agent, while being prevented from seeing any data in Robots.
• Subscription change As a result of the security changes, users with an Oversight subscription can no longer be Robots Admins. A Professional subscription is required to be a Robots Admin.

Learn more

If you have specified a logo for your organization in Launchpad, the logo now displays in the footer of all system email notifications, which helps users identify that the notifications are from a legitimate source. Learn more

• Remediation Deadline
• Actual Remediation Date
• Retest Deadline Date
• Actual Retest Date

New role Assign control owners that are responsible for control testing the Contributor Tester role.

Users assigned the Contributor Tester role have the same permissions as Contributor Users, with the addition of read and write access to walkthroughs and tests they own in Projects and Mission Control.

Learn more

Mission Control Frontline staff can now evaluate the design and operational effectiveness of controls, view test plans, and easily access critical information about controls. Learn more

• The Assurance Plans Admin privilege provides read and write access to assurance plans. Learn more
• Use the Risks tab to see how your plan aligns with your organization's strategic risks. Learn more

Scheduling projects

• Add planning files, objectives, and results files directly from the Scheduler to build out your projects.
• View all projects by fiscal quarter or fiscal year.
• Filter by collaborator to view a team member's workload across multiple ongoing projects.
• The timeline start now defaults to the current day of the previous month.

Learn more

Assurance plans

• Download an assurance plan report in .docx or .pdf format to share with stakeholders.
• View a complete history of changes to an assurance plan.
• View each project's status and allocated hours in an assurance plan.

Learn more

The updated ACL GRC mobile app for iOS 5.4.7 fixes a scrolling issue associated with accessing different organizations.

Use the Scheduler to easily manage timelines and dates across the different phases of all active projects. The interactive Gantt chart allows you to quickly determine the risk of schedule slips, dependencies, and audit schedule overlaps. Learn more

All Views prefixed with "ZZZ (Retired)" are now deprecated and no longer supported.

You cannot access any reports you previously built based on retired Views. Broadcasted reports based on retired Views will still run normally. Any reports you were actively using based on a retired View need to be re-built using a supported View.

• For a list of supported Views, see View reference.
• For a list of templates based on supported Views, see Copying reports and dashboards.

• Iterative script development supported by version history and a testing environment. Learn more
• Scheduled tasks configured in the cloud but run from the security of a local Windows server, close to your data source and within the protective boundaries of your network. Learn more
• Simple yet powerful user management for controlling how users interact with robots and tasks. Learn more

The updated ACL GRC mobile app for iOS 5.4.6 includes:

• Support for fields that are automated using Assessment Drivers. (MOBDEV-2700 and MOBDEV-2701)
• Support for Super Retina display for iPhone X. (MOBDEV-2721)

Control performance tables are merged into a single table per Project. This change enables comprehensive reporting and supports visualizations, metrics, and triggers on control performance data from multiple controls and schedules within the same project.

Existing interpretations, metrics and triggers associated with control performance tables are automatically moved to the new unified tables. A filter based on their schedule name is included so that the data they reference stays the same. Learn more

• a maximum of 400 highlights and links (total of both)
• a maximum of 30 files per link
• a maximum of 200 clippings per file

Learn more

• consolidating the To-dos (Mine) and To-dos (Others) tabs into a single view, and adding improved filtering and sorting options. Learn more
• adding improved filtering and sorting options to the Requests tab. Learn more
• adding improved filtering and sorting options to the Reviews tab. Learn more

The updated ACL GRC mobile app for Android 2.3.4 includes:

• Support for fields that are automated using Assessment Drivers. (ANDROID-367)
• Preventative measures for editing text containing citations. (ANDROID-368)

The following customer reported issues have also been resolved:

• The objective Owner field is mandatory and should be optional. (ANDROID-323)
• When you add an issue, the Published field displays old user role names: "Client, Executives, and External Reviewers". (ANDROID-362)

The updated ACL GRC mobile app for iOS 5.4.5 implements preventative measures for editing text that contain citations. (MOBDEV-2704)

Any existing triggers configured to run against updated records only are still supported, however no new triggers can be configured this way. Learn more

The following reported issues have been corrected:

• Unable to email reports to external stakeholders.
• Users can modify / delete the default Storyboard theme