CISO Assistant

No entries match these filters. Clear filters

1. v4.2.0 Nov 1, 2026 · issue 127

   CISO Assistant adds Norwegian Bokmål and Turkish localization, EBIOS RMEBIOS RMA French risk-management method published by ANSSI for analysing cyber threats and selecting countermeasures; tools use it to structure risk assessments that satisfy French and EU regulatory expectations. Workshop 5 export, evidence-required questionnaires, and six new compliance frameworks including PIPED⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠

   └──▷ GET THIS VERSION

   copy

   $ git clone --branch v4.2.0 https://github.com/intuitem/ciso-assistant-community.git
   # already have the repo? check out this version:
   $ git checkout v4.2.0

   • Filter folders by ref_id via the folders API to narrow folder lookups programmatically.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠
   • Expand EBIOS RM exports to now include Workshop 5 data.
   • Override the PDF audit report template (Typst-based) per audit in the Pro edition.
   • Add custom fields and labels on entity assessments, plus vendor posture visuals with tier-based display, in the TPRMTPRMAssessing and monitoring the security risk an organization takes on through its vendors, suppliers and service providers. It covers the questionnaires, evidence and continuous checks behind letting a third party hold your data. module.
   • Require evidence attachments on questionnaire responses before submission.

   +5 more show less

   • Expand notifications to cover additional event types.
   • Improve the portals editor with support for documents.
   • Add Norwegian Bokmål (nb) UI localization, including forms, tables, and dynamic strings.
   • Add Italian translations for vendor evaluation quick forms and DPIADPIAA Data Protection Impact Assessment — a structured process, required under GDPR, for identifying and mitigating privacy risks before deploying a system that processes personal data at scale. workflows, and complete Turkish localization.
   • Add the Czech Decree 409/2025 framework and ZoKB risk matrix, the PIPEDA framework (Schedule 1, verbatim official text), the MonServiceSécurisé framework, the NCA DCC-1:2022 (Data Cybersecurity Controls) framework, the NCA CSCC-1:2019 (Critical Systems Cybersecurity Controls) framework, and OWASP Top 10 Web (2025) to the library.
   • Filter folders by ref_id via the folders API to narrow folder lookups programmatically.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠
   • Override the PDF audit report template (Typst-based) per audit in the Pro edition.
   • Require evidence attachments on questionnaire responses before submission.
   • Add Norwegian Bokmål (nb) UI localization, including forms, tables, and dynamic strings.
   • Add the Czech Decree 409/2025 framework and ZoKB risk matrix, the PIPEDA framework (Schedule 1, verbatim official text), the MonServiceSécurisé framework, the NCA DCC-1:2022 (Data Cybersecurity Controls) framework, the NCA CSCC-1:2019 (Critical Systems Cybersecurity Controls) framework, and OWASP Top 10 Web (2025) to the library.

   5 more in Everything

   └──▷ BREAKING ON UPGRADE

   • !The Libraries navigation entry is now located under Catalog in the sidebar.
2. v4.1.4 Oct 24, 2026 · issue 119

   v4.1.4 adds MCPMCPModel Context Protocol, a standard for connecting AI applications to external tools and data sources. A compatible server exposes capabilities an assistant can use through a common interface. tools for folders/users/evidence, DPIADPIAA Data Protection Impact Assessment — a structured process, required under GDPR, for identifying and mitigating privacy risks before deploying a system that processes personal data at scale. import from CNIL PIA, a dynamic data wizard, solutions tiering, expanded labels, and persistent Helm file storage.

   └──▷ GET THIS VERSION

   copy

   $ git clone --branch v4.1.4 https://github.com/intuitem/ciso-assistant-community.git
   # already have the repo? check out this version:
   $ git checkout v4.1.4

   • Adds update_folder, update_user, and update_evidence tools to the MCP integration.
   • Supports importing DPIA studies from CNIL's PIA tool exports into the privacy module.
   • Adds dynamic data wizard with headers and fields mapping in the epic import flow.
   • Surfaces questionnaire compliance scores on entity assessments in the TPRMTPRMAssessing and monitoring the security risk an organization takes on through its vendors, suppliers and service providers. It covers the questionnaires, evidence and continuous checks behind letting a third party hold your data. module.
   • Expands label support to more object types and introduces a dedicated view listing all objects associated with a label.

   +5 more show less

   • Adds solutions tiering with entity-driven strategies.
   • Enables persistent storage for uploaded files by default in the Helm chart deployment.
   • Enhances the EBIOS RMEBIOS RMA French risk-management method published by ANSSI for analysing cyber threats and selecting countermeasures; tools use it to structure risk assessments that satisfy French and EU regulatory expectations. study description section.
   • Sets noindex, nofollow by default in the robots meta tag to prevent search-engine indexing.
   • Publishes inlined API documentation on GitBook.

   10 details in Everything

   • New compliance framework ISO/IEC 27090:2026 outline
   • New compliance framework R-CNMV-2024-08-MV Dominican Republic securities market cybersecurity regulation
   • Updated integration n8n custom node restructured
   • New integration Microsoft Graph mail transport
   • New supported platform Hungarian translation
3. v4.1.3 Oct 17, 2026 · issue 112
   └──▷ GET THIS VERSION

   copy

   $ git clone --branch v4.1.3 https://github.com/intuitem/ciso-assistant-community.git
   # already have the repo? check out this version:
   $ git checkout v4.1.3

   • New compliance framework JM 181101-02 – Dominican Republic cybersecurity and information security regulation
4. v4.1.2 Oct 16, 2026 · issue 111

   CISO Assistant v4.1.2 adds DPIADPIAA Data Protection Impact Assessment — a structured process, required under GDPR, for identifying and mitigating privacy risks before deploying a system that processes personal data at scale./GDPRGDPREU regulation enacted in 2018 that governs how organizations collect, store, and process personal data of EU residents, giving cyber tools legal obligations around data handling and breach notification. screening, MCPMCPModel Context Protocol, a standard for connecting AI applications to external tools and data sources. A compatible server exposes capabilities an assistant can use through a common interface. incident tools, OAuth log forwarding, metric-to-control linking, and new Hungarian/Costa Rica frameworks.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠

   └──▷ GET THIS VERSION

   copy

   $ git clone --branch v4.1.2 https://github.com/intuitem/ciso-assistant-community.git
   # already have the repo? check out this version:
   $ git checkout v4.1.2

   └──▷ USE IT
   Route all outbound CISO Assistant mail (reminders, notifications) through a single configured mailer service.
   .env copy

   MAILERS=smtp://user:password@mail.example.com:587

   • Adds MAILERS service config to route all outbound mail through a single mail service, replacing per-feature mail settings.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠
   • Adds create_evidence, add incident and add timeline entry MCP tools for uploading local files as evidence and managing incidents and timeline entries from the MCP layer.
   • Adds MCP support for linking task templates to incidents via create_incident and update_incident calls.
   • Adds extended_result field to requirement assessments in the data wizard.
   • Adds ref_id field (unique across all folders) to the folders model.

   +5 more show less

   • Supports DPIA screening and DPIA forms for GDPR compliance workflows.
   • Adds a processor register role on the Processing register.
   • Adds an OAuth sink (beta) for log forwarding to support Microsoft Sentinel integration.
   • Enables linking a metric directly to an applied control.
   • Adds evidences to applied control linked fields.
   • Adds MAILERS service config to route all outbound mail through a single mail service, replacing per-feature mail settings.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠
   • Adds create_evidence, add incident and add timeline entry MCP tools for uploading local files as evidence and managing incidents and timeline entries from the MCP layer.
   • Supports DPIA screening and DPIA forms for GDPR compliance workflows.
   • Adds a processor register role on the Processing register.
   • Adds an OAuth sink (beta) for log forwarding to support Microsoft Sentinel integration.

   +1 more show less

   • Enables linking a metric directly to an applied control.

   4 more in Everything

5. v4.1.1 Oct 9, 2026 · issue 100

   Adds EBIOS RMEBIOS RMA French risk-management method published by ANSSI for analysing cyber threats and selecting countermeasures; tools use it to structure risk assessments that satisfy French and EU regulatory expectations. on MCPMCPModel Context Protocol, a standard for connecting AI applications to external tools and data sources. A compatible server exposes capabilities an assistant can use through a common interface., risk owner and asset capabilities on MCP server, third-party tiering, flexible forms, paginated external API workflows, and a visual framework aggregator.

   └──▷ GET THIS VERSION

   copy

   $ git clone --branch v4.1.1 https://github.com/intuitem/ciso-assistant-community.git
   # already have the repo? check out this version:
   $ git checkout v4.1.1

   • Expands MCP server with asset objectives/capabilities, entity relationship, and list_objects types.
   • Adds risk owner capabilities to the MCP server.
   • Makes advanced EBIOS RM available on the MCP server.
   • Introduces tiering capabilities for third parties and a more flexible forms engine.
   • Expands CELCELCommon Expression Language, an open-source expression language maintained by Google, used to embed lightweight, safe policy evaluation logic into tools without running a full scripting engine. capabilities to frameworks, enabling cyfun 2025 framework to benefit from them.

   +7 more show less

   • Surfaces pending document revisions alongside the revision currently in force.
   • Adds a global evidences list at /evidences-list.
   • Adds a button in audit treeview to exclude not_applicable requirements.
   • Adds threat import to risk scenarios via the import workflow.
   • Adds import/export support for filtering labels and IAMIAMIdentity and Access Management — a framework of policies and services for controlling who can authenticate to systems and what resources they are authorized to use, letting cyber tools enforce least-privilege and audit access. group creation on domains in the data wizard.
   • Adds more capabilities to handle paginated external APIs in workflows.
   • Introduces a visual framework aggregator (experimental).

   12 details in Everything

   • New compliance framework ISO 27001 to HDS mapping
   • New compliance framework PIPL and PI compliance frameworks for Chinese market
   • New compliance framework OWASP SAMM v2.2 library
   • New compliance framework IEC 62443 mapping with ANSSI recommendations
   • Updated integration ServiceNow integration pagination past ACL-short pages
6. v4.1.0 Oct 3, 2026 · issue 094

   Adds MCPMCPModel Context Protocol, a standard for connecting AI applications to external tools and data sources. A compatible server exposes capabilities an assistant can use through a common interface. risk-review write tools, entity-assessment CSV/XLSX export, a user-creator builtin group, CELCELCommon Expression Language, an open-source expression language maintained by Google, used to embed lightweight, safe policy evaluation logic into tools without running a full scripting engine. compute workflow action, and an asset-focus whiteboard mode.

   └──▷ GET THIS VERSION

   copy

   $ git clone --branch v4.1.0 https://github.com/intuitem/ciso-assistant-community.git
   # already have the repo? check out this version:
   $ git checkout v4.1.0

   • Adds user-creator builtin group to control which users can create new accounts.
   • Adds export of entity assessments to CSV and XLSX formats in the TPRMTPRMAssessing and monitoring the security risk an organization takes on through its vendors, suppliers and service providers. It covers the questionnaires, evidence and continuous checks behind letting a third party hold your data. module.
   • Adds MCP risk-review write tools with actor resolution for automated risk-review workflows.
   • Adds compute action for CEL arithmetic expressions in workflows.
   • Adds asset-focus secondary mode to the asset whiteboard for an asset-centric view.

   +2 more show less

   • Adds German email templates for localized user notifications.
   • Delivers multiple UI/UX improvements to the EBIOS RMEBIOS RMA French risk-management method published by ANSSI for analysing cyber threats and selecting countermeasures; tools use it to structure risk assessments that satisfy French and EU regulatory expectations. module.

   7 details in Everything

   • New compliance framework BSI C5 Criteria Catalogue 2026 framework (EN, DE)
7. v4.0.8 Sep 30, 2026 · issue 091

   Adds cross-domain whiteboard asset loading, inline control linking buttons, and custom audit scoring without framework cloning.

   └──▷ GET THIS VERSION

   copy

   $ git clone --branch v4.0.8 https://github.com/intuitem/ciso-assistant-community.git
   # already have the repo? check out this version:
   $ git checkout v4.0.8

   • Enables pulling assets from external domains on the whiteboard.
   • Adds create and select-existing buttons directly on linked-object tabs in applied controls, reducing navigation steps when associating controls.
   • Introduces a new way to set a custom score on an audit without cloning the framework.

   3 details in Everything

   • New compliance framework SCF 2026.3 framework
   • Updated compliance framework Essential Eight framework
8. v4.0.7 Sep 26, 2026 · issue 087

   CISO Assistant v4.0.7 adds in-app notifications, audit log download, risk trajectory, domain-level x-rays, and Mermaid diagram support.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠

   └──▷ GET THIS VERSION

   copy

   $ git clone --branch v4.0.7 https://github.com/intuitem/ciso-assistant-community.git
   # already have the repo? check out this version:
   $ git checkout v4.0.7

   └──▷ HOW TO FIND IT
   Download the full audit log to review who changed what and when — useful for compliance evidence or incident investigation.
   📍In the pro console, go to Audit Log and click the Download button to export the activity trail.
   Set an ETA date on multiple applied controls at once to keep remediation timelines visible across a programme.
   📍In Applied Controls, select the controls you want to update, open the batch actions menu, and choose Set ETA date.
   Embed a Mermaid architecture or threat-model diagram directly in a documentation field to keep visual context alongside control descriptions.
   📍In a markdown documentation field, insert a fenced code block with the mermaid language tag — e.g.: mermaid graph LR A[Asset] --> B[Control] B --> C[Risk]
   • Adds in-app notifications center for real-time alerts within the platform.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠
   • Adds downloadable audit log (pro) so teams can export a full activity trail.
   • Adds risk trajectory and projection view to track how risk posture changes over time.
   • Adds domain-level x-rays checks to surface compliance and control gaps at the domain scope.
   • Adds x-rays flagging for active controls that lack evidence, with a reworked x-rays page.

   +8 more show less

   • Adds Mermaid diagram support in markdown documentation fields.
   • Adds batch mode on applied controls to set an ETA date across multiple controls at once.
   • Adds real TTPTTPTactics, techniques and procedures, the goals, methods and specific behaviors used by an attacker. They describe how an attack works, rather than only the files or addresses it leaves behind. techniques exposed on EBIOS operational scenarios.
   • Adds support for applied controls on audit via the data wizard and CLI.
   • Adds more workflow enablers — documents, tasks, and validations — and improved AI blocks.
   • Allows users to redefine their own feature flags within the boundaries of their organisation.
   • Adds custom command/args, Qdrant image, and managed OIDCOIDCOpenID Connect, a sign-in protocol built on OAuth 2.0. An application uses identity information from a trusted provider instead of maintaining a separate password for each user. key options to the Helm chart.
   • Adds controls status column to the findings binder view.
   • Adds in-app notifications center for real-time alerts within the platform.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠
   • Adds downloadable audit log (pro) so teams can export a full activity trail.
   • Adds risk trajectory and projection view to track how risk posture changes over time.
   • Adds domain-level x-rays checks to surface compliance and control gaps at the domain scope.
   • Adds Mermaid diagram support in markdown documentation fields.

   8 more in Everything

9. v4.0.5 Sep 19, 2026 · issue 080

   CISO Assistant v4.0.5 adds MITRE ATT&CKMITRE ATT&CKA publicly maintained knowledge base of adversary tactics and techniques observed in real attacks, maintained by MITRE. Cyber tools use it as a common taxonomy to classify, map, and communicate threat behavior. for ICSICSIndustrial Control Systems — hardware and software that monitor and control physical processes like power grids, pipelines, and manufacturing lines, making them a target for cyber tools focused on operational technology environments./Mobile, OWASP Agentic Top 10OWASP Agentic Top 10A ranked list of the most critical risks specific to AI agent systems, maintained by OWASP, giving cyber tool builders a shared framework for prioritizing threats in autonomous, multi-step AI workflows., tabular mapping, mini graph explorer, and extended SSOSSOSingle sign-on, using one identity provider to sign in to multiple applications. It reduces separate passwords and centralizes account and access management. scopes.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠

   └──▷ GET THIS VERSION

   copy

   $ git clone --branch v4.0.5 https://github.com/intuitem/ciso-assistant-community.git
   # already have the repo? check out this version:
   $ git checkout v4.0.5

   • Supports additional OIDCOIDCOpenID Connect, a sign-in protocol built on OAuth 2.0. An application uses identity information from a trusted provider instead of maintaining a separate password for each user. scopes in SSO configuration.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠
   • Adds MITREMITREA US federally funded research and development center that maintains public frameworks—ATT&CK, CVE, D3FEND—that cyber tools use to classify threats, vulnerabilities, and defensive techniques in a common language. ATT&CKATT&CKA publicly maintained knowledge base by MITRE cataloguing adversary tactics, techniques, and procedures observed in real attacks, giving cyber tools a common taxonomy for classifying and correlating threat behavior. library coverage for ICS and mobile platforms.
   • Adds OWASPOWASPA nonprofit foundation that publishes open standards, guides, and ranked vulnerability lists—most famously the OWASP Top 10—giving cyber tools a vendor-neutral benchmark to test or report against. Top 10 for Agentic Applications 2026 as a library.
   • Adds a findings tab to the task detail view.
   • Enables picking existing findings when performing a requirement assessment.

   +6 more show less

   • Adds tabular mode for viewing mapping data.
   • Introduces a mini graph explorer and an experimental visual mode for domains management.
   • Extends the command palette with more capabilities and broader search coverage.
   • Adds alternate rendering modes for breakdown charts.
   • Adds proper API pagination support for Power BI integration.
   • Extends workflow enablers to cover evidences, tasks, and metrics use cases.
   • Supports additional OIDCOIDCOpenID Connect, a sign-in protocol built on OAuth 2.0. An application uses identity information from a trusted provider instead of maintaining a separate password for each user. scopes in SSO configuration.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠
   • Adds MITREMITREA US federally funded research and development center that maintains public frameworks—ATT&CK, CVE, D3FEND—that cyber tools use to classify threats, vulnerabilities, and defensive techniques in a common language. ATT&CKATT&CKA publicly maintained knowledge base by MITRE cataloguing adversary tactics, techniques, and procedures observed in real attacks, giving cyber tools a common taxonomy for classifying and correlating threat behavior. library coverage for ICS and mobile platforms.
   • Adds OWASPOWASPA nonprofit foundation that publishes open standards, guides, and ranked vulnerability lists—most famously the OWASP Top 10—giving cyber tools a vendor-neutral benchmark to test or report against. Top 10 for Agentic Applications 2026 as a library.
   • Enables picking existing findings when performing a requirement assessment.
   • Adds tabular mode for viewing mapping data.

   +1 more show less

   • Introduces a mini graph explorer and an experimental visual mode for domains management.

   5 more in Everything

10. powerbi-v1.1.0 Sep 19, 2026 · issue 080

    CISO Assistant Power BI connector gains proper API pagination and additional report dimensions.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠

    └──▷ GET THIS VERSION

    copy

    $ git clone --branch powerbi-v1.1.0 https://github.com/intuitem/ciso-assistant-community.git
    # already have the repo? check out this version:
    $ git checkout powerbi-v1.1.0

    └──▷ HOW TO FIND IT
    Connect Power BI Desktop to your CISO Assistant instance for the first time using the starter template.
    📍1. Install the connector per automation/powerbi/README.md and trust the signing certificate thumbprint AAB77C4E62D72D26F1E05AAA46457D90A653541E (see signing/trust-thumbprint.md). 2. Open CisoAssistant-starter.pbit in Power BI Desktop. 3. When prompted, enter your instance URL as the value for BaseUrl (e.g. https://your-instance.example.com). 4. Click Load — the connector will now paginate through the full API dataset automatically.
    • Adds proper API pagination to the Power BI connector, enabling full dataset retrieval across large CISO Assistant instances.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠
    • Expands available dimensions in the Power BI connector for richer reporting coverage.
    • Ships CisoAssistant-starter.pbit starter report template with every connector release, requiring only an instance URL entered as BaseUrl on first open.
    • Adds proper API pagination to the Power BI connector, enabling full dataset retrieval across large CISO Assistant instances.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠
    • Ships CisoAssistant-starter.pbit starter report template with every connector release, requiring only an instance URL entered as BaseUrl on first open.

    1 more in Everything

11. v4.0.3 Sep 13, 2026 · issue 074

    CISO Assistant v4.0.3 lets admins enforce a date format across all users.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠

    └──▷ GET THIS VERSION

    copy

    $ git clone --branch v4.0.3 https://github.com/intuitem/ciso-assistant-community.git
    # already have the repo? check out this version:
    $ git checkout v4.0.3

    • Adds admin ability to force a date format for all users across the instance.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠

    1 detail in Everything

12. v4.0.2 Sep 12, 2026 · issue 073

    CISO Assistant v4.0.2 adds AI-powered workflows, TPRMTPRMAssessing and monitoring the security risk an organization takes on through its vendors, suppliers and service providers. It covers the questionnaires, evidence and continuous checks behind letting a third party hold your data. domain export/import, date filters, quick-form requests, and German NIS2NIS2EU directive that expands mandatory cybersecurity requirements to more sectors and member states than its predecessor, giving cyber tools a compliance framework to map controls and reporting obligations against. translations.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠

    └──▷ GET THIS VERSION

    copy

    $ git clone --branch v4.0.2 https://github.com/intuitem/ciso-assistant-community.git
    # already have the repo? check out this version:
    $ git checkout v4.0.2

    • Adds AI call support to workflows, enabling automated AI-driven steps within CISO Assistant workflow definitions.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠
    • Carries the full TPRM ecosystem (third-party risk management data) through domain export/import operations.
    • Adds date filters across the platform for narrowing object lists by date ranges.
    • Adds a requests management system accessible through quick forms for streamlined intake.
    • Adds a context menu action to quickly add a custom-metric-sample directly from the UI.

    +5 more show less

    • Reworks the audit table-mode in the frontend with an updated layout and interaction model.
    • Unifies PDF report exports under a single new rendering engine with a consistent layout across all report types.
    • Supports importing applied controls and owners together with findings via the data-wizard.
    • Adds German NIS2 ENISAENISAThe European Union Agency for Cybersecurity, an EU body that publishes threat landscapes, guidelines, and standards to help member states and organisations raise their cyber defences. translations to the framework library.
    • Adds an is_published field controlled at the Folder level for publication state management.
    • Adds AI call support to workflows, enabling automated AI-driven steps within CISO Assistant workflow definitions.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠
    • Adds date filters across the platform for narrowing object lists by date ranges.
    • Adds a requests management system accessible through quick forms for streamlined intake.
    • Adds a context menu action to quickly add a custom-metric-sample directly from the UI.
    • Adds German NIS2 ENISAENISAThe European Union Agency for Cybersecurity, an EU body that publishes threat landscapes, guidelines, and standards to help member states and organisations raise their cyber defences. translations to the framework library.

    5 more in Everything

13. v4.0.1 Sep 5, 2026 · issue 066

    CISO Assistant v4.0.1 adds URL custom fields, reopenable requirement assignments, findings/TPRMTPRMAssessing and monitoring the security risk an organization takes on through its vendors, suppliers and service providers. It covers the questionnaires, evidence and continuous checks behind letting a third party hold your data. evolutions, and clickable compliance badges.

    └──▷ GET THIS VERSION

    copy

    $ git clone --branch v4.0.1 https://github.com/intuitem/ciso-assistant-community.git
    # already have the repo? check out this version:
    $ git checkout v4.0.1

    • Adds URL type for custom fields, enabling hyperlink values to be stored and displayed on any entity.
    • Adds the ability to reopen a requirement assessment's assignment after it has been submitted.
    • Introduces findings and TPRM (Third-Party Risk ManagementThird-Party Risk ManagementAssessing and monitoring the security risk an organization takes on through its vendors, suppliers and service providers. It covers the questionnaires, evidence and continuous checks behind letting a third party hold your data.) evolutions as a major feature epic.
    • Improves tasks and evidences with additional capabilities.
    • Makes badges clickable on compliance assessments for faster navigation.

    +1 more show less

    • Shows category prefix in control autocompletes for clearer control identification.
    • Adds URL type for custom fields, enabling hyperlink values to be stored and displayed on any entity.
    • Adds the ability to reopen a requirement assessment's assignment after it has been submitted.

    4 more in Everything

14. v3.21.4 Sep 1, 2026 · issue 062

    CISO Assistant v3.21.4 adds JITJITA runtime compilation strategy where code is translated from an intermediate form to native machine instructions at execution time, giving tools the speed of compiled code without sacrificing dynamic flexibility. SSOSSOSingle sign-on, using one identity provider to sign in to multiple applications. It reduces separate passwords and centralizes account and access management. provisioning, expanded workflow enablers, and updated Dutch translations.

    └──▷ GET THIS VERSION

    copy

    $ git clone --branch v3.21.4 https://github.com/intuitem/ciso-assistant-community.git
    # already have the repo? check out this version:
    $ git checkout v3.21.4

    • Adds Just-in-Time (JIT) provisioning for SSO: user accounts are automatically created on first SSO login, eliminating manual pre-provisioning.
    • Expands workflow capabilities with more enablers and sample workflows.
    • Adds updated Dutch (nl) translations for the UI.

    3 details in Everything

15. v3.21.3 Aug 26, 2026 · issue 058

    CISO Assistant v3.21.3 adds UNESCO AI maturity framework, expanded workflow object registry, and audit tree requirement filtering.

    └──▷ GET THIS VERSION

    copy

    $ git clone --branch v3.21.3 https://github.com/intuitem/ciso-assistant-community.git
    # already have the repo? check out this version:
    $ git checkout v3.21.3

    └──▷ HOW TO FIND IT
    Quickly surface audit gaps by filtering the audit tree to show only requirements that have no controls or evidences mapped.
    📍In an open audit, navigate to the Audit Tree view, then use the filter panel to enable Requirements without controls or evidences to isolate uncovered items.
    • Adds filtering on the audit tree to show only requirements without controls or evidences, making compliance gap identification faster.
    • Expands the workflow engine's read_objects registry to include requirements, risk objects, and validations, enabling workflows to act on a broader set of objects.
    • Enables the workflow engine to write objects, schedule actions by date, and detect bulk edits as triggers.
    • Adds the UNESCO AI Maturity Framework as a new library entry for AI governance assessments.

    4 details in Everything

16. v3.21.2 Aug 20, 2026 · issue 052

    CISO Assistant v3.21.2 adds ISO 27701-2025 support, manual score overrides, and per-template email toggles.

    └──▷ GET THIS VERSION

    copy

    $ git clone --branch v3.21.2 https://github.com/intuitem/ciso-assistant-community.git
    # already have the repo? check out this version:
    $ git checkout v3.21.2

    • Adds per-template toggle to disable individual outgoing emails in the mailing system, giving administrators fine-grained control over which notifications are sent.
    • Adds the ISO 27701-2025 framework outline to the library, enabling privacy information management assessments against the updated standard.
    • Enables manual override of question-driven scores, allowing assessors to adjust computed scores without being locked to automated answers.

    3 details in Everything

17. v3.21.1 Aug 17, 2026 · issue 048

    CISO Assistant v3.21.1 adds MCPMCPModel Context Protocol, a standard for connecting AI applications to external tools and data sources. A compatible server exposes capabilities an assistant can use through a common interface. HTTP transport, CyFun2025/ISO27001 mapping, TPRMTPRMAssessing and monitoring the security risk an organization takes on through its vendors, suppliers and service providers. It covers the questionnaires, evidence and continuous checks behind letting a third party hold your data. audit link modes, and a streamlined approval UI.

    └──▷ GET THIS VERSION

    copy

    $ git clone --branch v3.21.1 https://github.com/intuitem/ciso-assistant-community.git
    # already have the repo? check out this version:
    $ git checkout v3.21.1

    • Adds http transport support to the aggregated MCP (Model Context ProtocolModel Context ProtocolModel Context Protocol, a standard for connecting AI applications to external tools and data sources. A compatible server exposes capabilities an assistant can use through a common interface.) architecture, expanding AI coverage and reducing token usage on context.
    • Adds CyFun2025 and ISO27001 framework mapping to the library (lib).
    • Adds audit link mode options in the TPRM data wizard for entity configuration.
    • Adds an assignee null option to the evidences filters list, allowing filtering for unassigned evidence items.
    • Adds optional authors columns to assessments views.

    +3 more show less

    • Adds check_library_v2.py tool for library validation.
    • Conditionally enables incidents in analytics based on configuration.
    • Delivers a streamlined interface for approval management.

    8 details in Everything

18. v3.21.0 Aug 8, 2026 · issue 040

    CISO Assistant v3.21.0 adds TTPTTPTactics, techniques and procedures, the goals, methods and specific behaviors used by an attacker. They describe how an attack works, rather than only the files or addresses it leaves behind./threat modeling with MITRE ATLASMITRE ATLASA MITRE-maintained knowledge base of adversarial tactics and techniques targeting AI and machine learning systems, modelled on ATT&CK, giving cyber tools a structured taxonomy for AI-specific threat modelling., a visual workflow engine, focus-scoped permissions, and service account management.

    └──▷ GET THIS VERSION

    copy

    $ git clone --branch v3.21.0 https://github.com/intuitem/ciso-assistant-community.git
    # already have the repo? check out this version:
    $ git checkout v3.21.0

    • Introduces TTP support and threat modeling capabilities, including the MITREMITREA US federally funded research and development center that maintains public frameworks—ATT&CK, CVE, D3FEND—that cyber tools use to classify threats, vulnerabilities, and defensive techniques in a common language. ATLAS framework.
    • New visual workflow engine with a drag-and-drop builder for automating security processes.
    • Adds focus-mode with scoped permissions and enhanced user context controls.
    • Service account management (pro) for programmatic access.
    • Adds Cwb (NIS2NIS2EU directive that expands mandatory cybersecurity requirements to more sectors and member states than its predecessor, giving cyber tools a compliance framework to map controls and reporting obligations against.) Control Framework plus additions and updates to existing framework tools.

    +4 more show less

    • Adds plumber CI/CD hardening checks library.
    • Asset classes are now fully customizable and can render as a full hierarchical tree.
    • Adds status tracking to findings-assessments.
    • Adds progress percentage calculation based on status to documents.

    9 details in Everything

19. v3.20.8 Aug 4, 2026 · issue 036

    CISO Assistant v3.20.8 adds AI-driven risk assessment import via chat and ANSSI industrial cybersecurity library support.

    └──▷ GET THIS VERSION

    copy

    $ git clone --branch v3.20.8 https://github.com/intuitem/ciso-assistant-community.git
    # already have the repo? check out this version:
    $ git checkout v3.20.8

    • Adds support for importing risk assessments through the AI chat interface.
    • Adds the ANSSI 'la cybersécurité des systèmes industriels - mesures détaillées' framework library.
    • Updates Dutch (NL) and Ukrainian translations.

    3 details in Everything

20. v3.20.7 Aug 3, 2026 · issue 035

    CISO Assistant v3.20.7 adds richer AI chat context and lets you rename qualifications to risk categories.

    └──▷ GET THIS VERSION

    copy

    $ git clone --branch v3.20.7 https://github.com/intuitem/ciso-assistant-community.git
    # already have the repo? check out this version:
    $ git checkout v3.20.7

    • Allows renaming of qualifications to risk categories.
    • Adds more context to in-window AI chat sessions.

    2 details in Everything

21. v3.20.6 Aug 1, 2026 · issue 033
    └──▷ GET THIS VERSION

    copy

    $ git clone --branch v3.20.6 https://github.com/intuitem/ciso-assistant-community.git
    # already have the repo? check out this version:
    $ git checkout v3.20.6

    └──▷ BREAKING ON UPGRADE

    • !Old invalid Implementation Groups are pruned when updating a framework — existing mappings to invalid groups will be removed on framework update.
22. v3.20.5 Aug 1, 2026 · issue 032

    CISO Assistant v3.20.5 adds LPM/OIV metrics definitions, cybersecurity metrics translations, and expanded evidence file previews.

    └──▷ GET THIS VERSION

    copy

    $ git clone --branch v3.20.5 https://github.com/intuitem/ciso-assistant-community.git
    # already have the repo? check out this version:
    $ git checkout v3.20.5

    • Adds 10 LPM/OIV required metrics definitions to the library, supporting regulated French operators of vital importance.
    • Adds translations for core cybersecurity metrics.
    • Expands in-platform preview support to additional evidence file types.

    3 details in Everything

    └──▷ BREAKING ON UPGRADE

    • !Old invalid Implementation Groups are pruned when updating a framework — existing mappings to invalid groups will be removed on framework update.
23. v3.20.4 Jul 28, 2026 · issue 029

    CISO Assistant v3.20.4 adds full TPRMTPRMAssessing and monitoring the security risk an organization takes on through its vendors, suppliers and service providers. It covers the questionnaires, evidence and continuous checks behind letting a third party hold your data. domain export/import, evidence on exceptions, batch asset BIA, AI file uploads, and posture management enhancements.

    └──▷ GET THIS VERSION

    copy

    $ git clone --branch v3.20.4 https://github.com/intuitem/ciso-assistant-community.git
    # already have the repo? check out this version:
    $ git checkout v3.20.4

    • Includes the full Third-Party Risk ManagementThird-Party Risk ManagementAssessing and monitoring the security risk an organization takes on through its vendors, suppliers and service providers. It covers the questionnaires, evidence and continuous checks behind letting a third party hold your data. (TPRM) ecosystem in domain export/import operations.
    • Enriches the ENISAENISAThe European Union Agency for Cybersecurity, an EU body that publishes threat landscapes, guidelines, and standards to help member states and organisations raise their cyber defences. Cyber Resilience Assessment framework with recommended controls.
    • Enables batch-adding assets to Business Impact Analyses (BIA).
    • Supports attaching evidence files directly to security exceptions.
    • Adds more capabilities to posture management.

    +2 more show less

    • Enables file uploads in the AI chat for framework import and points to templates in the wizard.
    • Delivers multiple findings assessment and assets UX improvements.

    7 details in Everything

24. v3.20.3 Jul 24, 2026 · issue 025

    CISO Assistant v3.20.3 adds TISAXTISAXA vehicle-industry information-security assessment standard, maintained by the ENX Association, that lets automotive suppliers prove their data-handling practices to OEMs without each OEM running its own separate audit. v2027, ENISAENISAThe European Union Agency for Cybersecurity, an EU body that publishes threat landscapes, guidelines, and standards to help member states and organisations raise their cyber defences. Cyber Resiliency frameworks, a Power BI native connector, Slovenian UI, and custom fields on security exceptions.

    └──▷ GET THIS VERSION

    copy

    $ git clone --branch v3.20.3 https://github.com/intuitem/ciso-assistant-community.git
    # already have the repo? check out this version:
    $ git checkout v3.20.3

    • Adds TISAX v2027 framework library for automotive information security assessments.
    • Adds ENISA Cyber Resiliency Maturity Assessment Framework library.
    • Introduces a native Power BI connector for direct integration with CISO Assistant data.
    • Enables custom fields on security exceptions, extending the existing custom-fields capability to that object type.
    • Adds Slovenian (sl) language translation to the UI.

    5 details in Everything

25. powerbi-v1.0.1 Jul 23, 2026 · issue 024

    CISO Assistant gains a native Power BI connector for direct BI integration.

    └──▷ GET THIS VERSION

    copy

    $ git clone --branch powerbi-v1.0.1 https://github.com/intuitem/ciso-assistant-community.git
    # already have the repo? check out this version:
    $ git checkout powerbi-v1.0.1

26. v3.20.2 Jul 22, 2026 · issue 023

    CISO Assistant v3.20.2 adds full GDPRGDPREU regulation enacted in 2018 that governs how organizations collect, store, and process personal data of EU residents, giving cyber tools legal obligations around data handling and breach notification. processing register export/import and CyFun 2025 Excel import support.

    └──▷ GET THIS VERSION

    copy

    $ git clone --branch v3.20.2 https://github.com/intuitem/ciso-assistant-community.git
    # already have the repo? check out this version:
    $ git checkout v3.20.2

    • Adds full export/import support for GDPR processing records, enabling backup and migration of processing register data.
    • Supports importing CyFun 2025 assessments via Excel, extending the list of supported frameworks for ingestion.

    2 details in Everything

27. v3.20.0 Jul 21, 2026 · issue 022

    CISO Assistant v3.20.0 adds technical posture management, SSOSSOSingle sign-on, using one identity provider to sign in to multiple applications. It reduces separate passwords and centralizes account and access management. single logout, MCPMCPModel Context Protocol, a standard for connecting AI applications to external tools and data sources. A compatible server exposes capabilities an assistant can use through a common interface. maturity scores, domain export, and a library builder.

    └──▷ GET THIS VERSION

    copy

    $ git clone --branch v3.20.0 https://github.com/intuitem/ciso-assistant-community.git
    # already have the repo? check out this version:
    $ git checkout v3.20.0

    • New technical posture management capability for tracking and assessing technical security posture.
    • Implements Single Logout (SLOSLOA Service Level Objective is a target threshold for a system's reliability or performance, such as 99.9% uptime or sub-200ms latency, giving cyber tools a measurable contract to enforce or report against.) for both OIDCOIDCOpenID Connect, a sign-in protocol built on OAuth 2.0. An application uses identity information from a trusted provider instead of maintaining a separate password for each user. and SAMLSAMLA standard for passing signed identity assertions between a sign-in provider and an application. It lets a user sign in through their organization's identity provider. authentication providers.
    • MCP integration now exposes maturity scores, enabling AI-driven access to assessment data.
    • New CLI domain export capability for extracting domain data.
    • New in-product library builder with requirement weight support, enabling custom framework authoring.

    +4 more show less

    • Allows changing the domain of an EBIOS-RM study.
    • Domain managers can now change group members directly.
    • Adds ABDO 2019 framework to the built-in library.
    • Complete Czech localization added.

    9 details in Everything

28. v3.19.2 Jul 10, 2026 · issue 020

    CISO Assistant v3.19.2 adds asset sync for ServiceNow, reworked risk acceptance workflow, expanded documents management, and Slovak localization.

    └──▷ GET THIS VERSION

    copy

    $ git clone --branch v3.19.2 https://github.com/intuitem/ciso-assistant-community.git
    # already have the repo? check out this version:
    $ git checkout v3.19.2

    • Supports attaching evidences to data breach records.
    • Adds extra status options for findings tracking and exceptions.
    • Adds an autologin page capability.
    • Adds Slovak (sk) localization.
    • Adds more customization options for GDPRGDPREU regulation enacted in 2018 that governs how organizations collect, store, and process personal data of EU residents, giving cyber tools legal obligations around data handling and breach notification. Processings.

    +8 more show less

    • Supports Import/Export of Representatives via the Data Wizard.
    • Adds ServiceNow asset sync with schema caching via startup warming and manual refresh.
    • Adds task template import functionality to the Data Wizard and CLI.
    • Adds the NCA ECC-2:2024 (Essential Cybersecurity Controls) framework.
    • Expands document management capabilities (documents management epic).
    • Extends audit log coverage to settings changes and additional objects.
    • Reworks the risk acceptance workflow.
    • Allows column selection on nested action plans.

    13 details in Everything

29. v3.19.1 Jun 30, 2026 · issue 020

    CISO Assistant v3.19.1 adds applied control progress as a selectable column and multiple import improvements.

    └──▷ GET THIS VERSION

    copy

    $ git clone --branch v3.19.1 https://github.com/intuitem/ciso-assistant-community.git
    # already have the repo? check out this version:
    $ git checkout v3.19.1

    • Adds applied control progress as a selectable column in list views, surfacing remediation status at a glance.
    • Delivers multiple import improvements for loading controls and frameworks.

    2 details in Everything

30. v3.19.0 Jun 29, 2026 · issue 020

    CISO Assistant v3.19.0 adds SCIMSCIMA standard for creating, updating and removing user accounts and groups across applications. It helps an identity provider keep access in sync when people join, change roles or leave. provisioning, offline AI embeddingembeddingLists of numbers a model produces to represent the meaning of text, images or code, so similar items sit close together. They power semantic search and RAG., managed portals, and admin MFAMFAMulti-factor authentication, requiring proof from different categories, such as a password and a hardware key, to sign in. It reduces reliance on a password alone. reset

    └──▷ GET THIS VERSION

    copy

    $ git clone --branch v3.19.0 https://github.com/intuitem/ciso-assistant-community.git
    # already have the repo? check out this version:
    $ git checkout v3.19.0

    • Adds SCIM provisioning and IdPIdPA service that authenticates users and supplies identity information to other applications. It is the sign-in authority behind many single sign-on systems. groups mapping for automated user lifecycle management.
    • Pre-bakes embedding and rerankerrerankerA model that re-scores a first batch of search results against the query and reorders them, more accurately than the fast first-stage search. models into the image for fully offline AI assistant operation (expect larger image size).
    • Introduces managed portals feature.
    • Enables admins to reset MFA for other users.
    • Adds typical evidence and annotation fields to audit/framework Excel exports.

    +6 more show less

    • Allows manual implementation groups on dynamic frameworks.
    • Makes collection creation optional when starting new projects (PMBOK).
    • Allows admins to disable the partially compliant compliance option.
    • Helm chart gains CA certificate support, network policy configuration, and AI assistant support.
    • Completes Italian translation to 100%.
    • Increases OIDCOIDCOpenID Connect, a sign-in protocol built on OAuth 2.0. An application uses identity information from a trusted provider instead of maintaining a separate password for each user. state and nonce length for improved security posture.

    11 details in Everything

31. v3.18.3 Jun 22, 2026 · release notes

    Show evidence for domains directly in the UI and centralize field rendering.

    └──▷ GET THIS VERSION

    copy

    $ git clone --branch v3.18.3 https://github.com/intuitem/ciso-assistant-community.git
    # already have the repo? check out this version:
    $ git checkout v3.18.3

    └──▷ HOW TO FIND IT
    View all evidence linked to a specific compliance domain without leaving the domain context.
    📍Navigate to the Domain details page in the CISO Assistant web interface and locate the new Evidence tab or section.
    • Adds the ability to view associated evidence items directly within a domain's view.
    • Centralizes the rendering logic for folder and domain fields in ModelForm.svelte for consistent UX.

    2 details in Everything

    └──▷ BREAKING ON UPGRADE

    • !Hardened IAMIAMIdentity and Access Management — a framework of policies and services for controlling who can authenticate to systems and what resources they are authorized to use, letting cyber tools enforce least-privilege and audit access. checks on the integration and decomission fallback login endpoint may affect existing integrations that relied on permissive access.
32. v3.18.3 Jun 22, 2026 · issue 020

    CISO Assistant v3.18.3 adds evidence visibility within domains and centralized domain field rendering in forms.

    └──▷ GET THIS VERSION

    copy

    $ git clone --branch v3.18.3 https://github.com/intuitem/ciso-assistant-community.git
    # already have the repo? check out this version:
    $ git checkout v3.18.3

    • Displays evidence items within their domain view, making it easier to review evidence by organizational scope.
    • Centralizes folder/domain field rendering across model forms for a consistent UI experience.

    2 details in Everything

33. v3.18.2 Jun 20, 2026 · release notes

    CISO Assistant v3.18.2 adds dark mode UI, custom fields for Pro users, and evidence export to audit action plans.

    └──▷ GET THIS VERSION

    copy

    $ git clone --branch v3.18.2 https://github.com/intuitem/ciso-assistant-community.git
    # already have the repo? check out this version:
    $ git checkout v3.18.2

    • Adds dark mode toggle in the UI theme settings
    • Adds custom fields capability in the Pro edition for modeling additional attributes on entities
    • Adds evidences column/section to the audit action plan export output

    3 details in Everything

34. v3.18.1 Jun 15, 2026 · release notes

    CISO Assistant v3.18.1 adds mapping-from relationships and audit log forwarding

    └──▷ GET THIS VERSION

    copy

    $ git clone --branch v3.18.1 https://github.com/intuitem/ciso-assistant-community.git
    # already have the repo? check out this version:
    $ git checkout v3.18.1

    • Adds mapping from capability to allow frameworks to reference other frameworks as sources
    • Introduces audit log forwarding for pro subscriptions

    2 details in Everything

35. v3.18.0 Jun 14, 2026 · release notes

    CISO Assistant v3.18.0 adds CCC-1:2020 framework support, dynamic Jira field mappings, per-object audit trails, and minimal JSON logging.

    └──▷ GET THIS VERSION

    copy

    $ git clone --branch v3.18.0 https://github.com/intuitem/ciso-assistant-community.git
    # already have the repo? check out this version:
    $ git checkout v3.18.0

    • Add CCC-1:2020 (NCA Cloud Cybersecurity Controls - Saudi Arabia) framework
    • Add dynamic field/value mappings for Jira with auto-suggested defaults in integrations
    • Add audit trail per object in the Pro edition
    • Add minimal json logger on frontend and align default logs level

    4 details in Everything

    └──▷ BREAKING ON UPGRADE

    • !Dependencies management switched from poetry to uv. If you have local scripting or configuration relying on poetry, replace references to it with uv.
36. v3.17.3 Jun 9, 2026 · release notes

    CISO Assistant v3.17.3 adds NCNICC-1:2025 framework support and UI tweaks

    └──▷ GET THIS VERSION

    copy

    $ git clone --branch v3.17.3 https://github.com/intuitem/ciso-assistant-community.git
    # already have the repo? check out this version:
    $ git checkout v3.17.3

    • steps: Add NCNICC-1:2025 (NCA - Saudi Arabia) as a selectable framework in the tool
    • steps: View ID before Name in all forms with category moved to front section for applied controls

    2 details in Everything

37. v3.17.2 Jun 5, 2026 · release notes

    CISO Assistant v3.17.2 adds ABRO Framework support, MCPMCPModel Context Protocol, a standard for connecting AI applications to external tools and data sources. A compatible server exposes capabilities an assistant can use through a common interface. vulnerability CRUDCRUDThe four basic database operations — Create, Read, Update, Delete — used as shorthand for any system that manages persistent data records, giving cyber tools a standard model for interacting with stored information., cost breakdowns, and SSOSSOSingle sign-on, using one identity provider to sign in to multiple applications. It reduces separate passwords and centralizes account and access management. redirect handling

    └──▷ GET THIS VERSION

    copy

    $ git clone --branch v3.17.2 https://github.com/intuitem/ciso-assistant-community.git
    # already have the repo? check out this version:
    $ git checkout v3.17.2

    • feat(lib): ABRO Framework is now supported as a built-in framework library.
    • The MCP server now exposes vulnerability CRUD operations (create, read, update, delete) for vulnerabilities managed by the cyber tooling.
    • The MCP server adds support for querying asset classes. The MCP server also supports reading richer risk scenario data.
    • feat: tables columns selector adds a UI control allowing users to customize which columns are displayed in table views.
    • feat: show description for task’s occurrence adds the description field display to task occurrences in the UI.

    +4 more show less

    • feat: cost breakdown on action plan adds a cost breakdown view to the action plan interface.
    • feat: implement sso redirect handling enables SSO flows that return users to their originally requested URL after authentication.
    • feat(ui): add journey's preset filter adds a preset filter for journey in the library list UI.
    • feat: support 1-3 properties scale on assets allows assigning values on a 1-3 scale for up to three custom properties on asset objects.

    9 details in Everything

38. v3.17.1 Jun 3, 2026 · release notes

    CISO Assistant v3.17.1 adds Prometheus metrics endpoint, audit aggregation through ancestors, and configurable date format.

    └──▷ GET THIS VERSION

    copy

    $ git clone --branch v3.17.1 https://github.com/intuitem/ciso-assistant-community.git
    # already have the repo? check out this version:
    $ git checkout v3.17.1

    • Adds a /metrics endpoint for Prometheus metrics fetching
    • Enables audit aggregation through ancestors for inherited findings

    2 details in Everything

39. v3.17.0 May 30, 2026 · release notes

    CISO Assistant v3.17.0 adds OIDCOIDCOpenID Connect, a sign-in protocol built on OAuth 2.0. An application uses identity information from a trusted provider instead of maintaining a separate password for each user. strict state/nonce mode for tighter authentication security.

    └──▷ GET THIS VERSION

    copy

    $ git clone --branch v3.17.0 https://github.com/intuitem/ciso-assistant-community.git
    # already have the repo? check out this version:
    $ git checkout v3.17.0

    • Adds oidc.strict_state_nonce configuration option to enforce strict State and Nonce validation in OIDC integrations

    1 detail in Everything

40. v3.16.7 May 28, 2026 · release notes

    CISO Assistant v3.16.7 adds project management structure, xlsx analytics export, and per-node score scales.

    └──▷ GET THIS VERSION

    copy

    $ git clone --branch v3.16.7 https://github.com/intuitem/ciso-assistant-community.git
    # already have the repo? check out this version:
    $ git checkout v3.16.7

    • Introduces project management functionality to organize assessment scope
    • Adds xlsx export format for Analytics data to enable Power BI integration
    • Enables auditee mode by default via feature flags
    • Enables advanced analytics by default via feature flags
    • Allows adding justification when an approver checks the risk acceptance

    +1 more show less

    • Supports score scale configuration at the requirement node level

    6 details in Everything

    └──▷ BREAKING ON UPGRADE

    • !Upgrades psycopg2 to psycopg3, requiring a database driver migration
41. v3.16.6 May 23, 2026 · release notes

    Adds framework-driven reporting across domains and analytics to applied controls

    └──▷ GET THIS VERSION

    copy

    $ git clone --branch v3.16.6 https://github.com/intuitem/ciso-assistant-community.git
    # already have the repo? check out this version:
    $ git checkout v3.16.6

    • feat: framework-driven reporting across domains - New capability to generate reports spanning multiple compliance frameworks simultaneously.

    1 detail in Everything

42. v3.16.5 May 19, 2026 · release notes

    CISO Assistant v3.16.5 adds BIA/follow-up support in Perimeters and NCSC CAF v4.0 framework coverage

    └──▷ GET THIS VERSION

    copy

    $ git clone --branch v3.16.5 https://github.com/intuitem/ciso-assistant-community.git
    # already have the repo? check out this version:
    $ git checkout v3.16.5

    • Perimeter objects now include Business Impact Assessment (BIA) data and follow-up tracking
    • Adds support for the NCSC Cyber Assessment Framework (CAF) version 4.0

    2 details in Everything

43. v3.16.3 May 16, 2026 · release notes

    CISO Assistant v3.16.3 adds RACI/RASCI/RAPID matrix, EBIOS RMEBIOS RMA French risk-management method published by ANSSI for analysing cyber threats and selecting countermeasures; tools use it to structure risk assessments that satisfy French and EU regulatory expectations./Egerie import, AI Defense Matrix, KSA PDPL framework, and Estonian UI.

    └──▷ GET THIS VERSION

    copy

    $ git clone --branch v3.16.3 https://github.com/intuitem/ciso-assistant-community.git
    # already have the repo? check out this version:
    $ git checkout v3.16.3

    • Adds support for responsibility matrix types RACI, RASCI, and RAPID for task and control ownership mapping.
    • Supports importing EBIOS RM studies in Egerie format.
    • Adds the AI Defense Matrix framework to the built-in library.
    • Adds KSA's PDPL (Personal Data Protection Law) framework to the built-in library.
    • Adds Estonian language support to the UI.

    +4 more show less

    • Adds label support on tasks for categorization and filtering.
    • Introduces an export modal in the UI to provide context and improve discoverability of export options.
    • Adds slider inputs for number and single-choice fields in the framework builder.
    • Internationalizes the framework builder UI.

    9 details in Everything

44. v3.16.2 May 11, 2026 · release notes

    Adds asset creation wizard, customer questionnaire prefillprefillThe first phase of inference, where the model reads the whole prompt in parallel before producing its first token. It drives time-to-first-token; decode is the token-by-token phase after it. wizard, and folder tree writable permission handling

    └──▷ GET THIS VERSION

    copy

    $ git clone --branch v3.16.2 https://github.com/intuitem/ciso-assistant-community.git
    # already have the repo? check out this version:
    $ git checkout v3.16.2

    └──▷ HOW TO FIND IT
    Guide users through creating and linking assets via the new UI mode.
    📍In the UI, use the new Create Asset wizard to define assets and link them to frameworks.
    Automate customer questionnaire data entry using the specialized prefill wizard.
    📍In the UI, select the Customer Questionnaire Prefill Wizard to map internal data to external responses.
    • Adds feat(exp): UI mode to create and link assets for guided asset setup
    • Adds feat(exp): specialized wizard for customer questionnaire prefill to accelerate compliance responses
    • Adds feat: add new record consumers and enhance data import commands with detailed help descriptions to clarify available CLI actions
    • Adds feat: add writable permission handling to folder tree selection to enforce access controls during UI navigation

    4 details in Everything

45. v3.16.1 May 3, 2026 · release notes

    CISO Assistant v3.16.1 adds Azure Blob Storage support and a new journeys editor with respondent mode for third parties

    └──▷ GET THIS VERSION

    copy

    $ git clone --branch v3.16.1 https://github.com/intuitem/ciso-assistant-community.git
    # already have the repo? check out this version:
    $ git checkout v3.16.1

    • Adds Azure Blob Storage support as an alternative storage backend to S3.
    • Introduces the journeys editor for creating assessment workflows.
    • Enables respondent mode for third-party assessments, including auto-generated questions for respondents.

    3 details in Everything

46. v3.16.0 Apr 25, 2026 · release notes

    CISO Assistant v3.16 adds incident action plans, risk scenario cancellation, applied control merging, and data wizard attributes.

    └──▷ GET THIS VERSION

    copy

    $ git clone --branch v3.16.0 https://github.com/intuitem/ciso-assistant-community.git
    # already have the repo? check out this version:
    $ git checkout v3.16.0

    └──▷ HOW TO FIND IT
    Allow tracking remediation efforts for security incidents.
    📍In the Incident detail view, initiate a new Action Plan.
    Export assets including business function context in Data Wizard.
    📍In Data Wizard exports, select the Asset.is_business_function attribute.
    Deploy CISO Assistant with custom volume mounts and node affinity via Helm.
    📍Configure extraVolumes and affinity in the Helm values file.
    • Adds Action plan for incidents feature to track remediation steps
    • Adds cancelled status for risk scenario to track abandoned risks
    • Adds merge applied controls capability in the UI
    • Adds Asset.is_business_function attribute in Data Wizard exports
    • Adds detected_at and due_date support during vulnerability import via wizard

    +12 more show less

    • Adds exception in the past entry capability for compliance exceptions
    • Adds button to reset filters on table and clear out cache in UI
    • Adds custom dashboard on the analytics' extra tab for admins
    • Adds Context menu for vulnerabilities to quickly toggle severity and status
    • Adds description column to findings table
    • Adds journeys presets can support implementation groups and generic pages capability
    • Adds Règles OIV - Secteur Transport Aérien (2016) framework library entry
    • Adds Cadre de Conformité Cyber France (3CF) v3.1 framework library entry
    • Adds loi marocaine n° 09-08 relative à la protection des données personnelles (CNDP) framework library entry
    • Adds enriched NIST CSF 2.0 with recommendations in the library
    • Adds Claude skill to prepare mappings integration
    • Adds extra volumes and affinity config options in Helm chart

    17 details in Everything

47. v3.15.9 Apr 16, 2026 · release notes

    CISO Assistant v3.15.9 adds a --name flag for CLI assessments, Cyfun audit export, and links in task emails

    └──▷ GET THIS VERSION

    copy

    $ git clone --branch v3.15.9 https://github.com/intuitem/ciso-assistant-community.git
    # already have the repo? check out this version:
    $ git checkout v3.15.9

    • Adds --name flag to the CLI assessment commands to name assessments during creation
    • Adds support for exporting audits in Cyfun format via the existing export UI/API
    • Adds links and detailed task list variables to task email templates sent to users
    • Adds a link attribute to the exception model to associate related references with exceptions

    4 details in Everything

48. v3.15.8 Apr 14, 2026 · release notes

    CISO Assistant v3.15.8 adds TPRMTPRMAssessing and monitoring the security risk an organization takes on through its vendors, suppliers and service providers. It covers the questionnaires, evidence and continuous checks behind letting a third party hold your data. exports, DORA subcontracting chain handling in ROI, and a new average of averages scoring logic.

    └──▷ GET THIS VERSION

    copy

    $ git clone --branch v3.15.8 https://github.com/intuitem/ciso-assistant-community.git
    # already have the repo? check out this version:
    $ git checkout v3.15.8

    • Adds TPRM (Third-Party Risk ManagementThird-Party Risk ManagementAssessing and monitoring the security risk an organization takes on through its vendors, suppliers and service providers. It covers the questionnaires, evidence and continuous checks behind letting a third party hold your data.) export capability
    • Enables handling of subcontracting chains in ROI exports for DORA compliance
    • Implements an average of averages scoring approach to match Cyfun 2025 logic

    3 details in Everything

49. v3.15.6 Apr 11, 2026 · release notes

    CISO Assistant v3.15.6 adds batch label actions for applied-controls and findings, a new DGSSI framework, EUDIRF HLRs support, EBiOS-RM light mode, and timeline visualization

    └──▷ GET THIS VERSION

    copy

    $ git clone --branch v3.15.6 https://github.com/intuitem/ciso-assistant-community.git
    # already have the repo? check out this version:
    $ git checkout v3.15.6

    └──▷ HOW TO FIND IT
    Batch update labels on multiple applied-controls or findings in the UI.
    📍In the CISO Assistant web interface, select multiple items and apply label actions via the batch menu.
    Enable dark/light theme toggle for Ebios-RM analysis views.
    📍Access the Ebios-RM module in the UI and switch to light mode via the view settings or toggle.
    View compliance timelines for your frameworks with improved performance.
    📍Navigate to the timeline visualization section in the CISO Assistant UI to view and interact with new enhanced rendering of your compliance progress.
    • Supports batch actions on labels for applied-controls and findings
    • Adds DGSSI Exigences de Qualification de Services Cloud framework (Morocco, arrêté 3-17-25)
    • Adds support for French National Authority for Health certification for quality of care
    • Adds EUDI Wallet ARF HLRs in the library
    • Adds new timeline visualization with better performance and UX

    5 details in Everything

50. v3.15.3 Apr 7, 2026 · release notes

    CISO Assistant v3.15.3 adds security key authentication (FIDO2FIDO2The open standard behind passkeys and hardware security keys, where a website checks a signature from the user's device instead of a password. Because the key is bound to the site, phishing pages cannot use it.), orphan control identification, and NIST CSFNIST CSFThe NIST Cybersecurity Framework, a set of outcomes for managing cybersecurity risk. Organizations use it to describe their current posture, priorities and improvement goals. 2.0 support

    └──▷ GET THIS VERSION

    copy

    $ git clone --branch v3.15.3 https://github.com/intuitem/ciso-assistant-community.git
    # already have the repo? check out this version:
    $ git checkout v3.15.3

    • Add ANSHospiConnect HOPEN2 Program Library to available framework libraries
    • Enable security keys (FIDO2, fingerprint) as a second authentication factor
    • Identify orphan controls in the control set

    3 details in Everything

51. v3.15.2 Apr 4, 2026 · release notes

    CISO Assistant v3.15.2 adds DORA incidents reporting and vulnerability data to the MCPMCPModel Context Protocol, a standard for connecting AI applications to external tools and data sources. A compatible server exposes capabilities an assistant can use through a common interface. server.

    └──▷ GET THIS VERSION

    copy

    $ git clone --branch v3.15.2 https://github.com/intuitem/ciso-assistant-community.git
    # already have the repo? check out this version:
    $ git checkout v3.15.2

    • Adds dora incidents reporting capability for regulatory compliance workflows
    • Adds vulnerabilities capabilities to the mcp server for external tool integration

    2 details in Everything

52. v3.15.1 Apr 3, 2026 · release notes

    Adds degraded status for applied controls and a dedicated kanban view.

    └──▷ GET THIS VERSION

    copy

    $ git clone --branch v3.15.1 https://github.com/intuitem/ciso-assistant-community.git
    # already have the repo? check out this version:
    $ git checkout v3.15.1

    └──▷ HOW TO FIND IT
    View and manage applied controls in a board layout.
    📍In the console, go to Applied Controls and switch to the Kanban view
    Mark an applied control as having partial or reduced effectiveness.
    📍Set the status of an applied_control to degraded
53. v3.15.0 Mar 29, 2026 · release notes

    CISO Assistant v3.15.0 adds SoA generation, chat mode, batch GDPRGDPREU regulation enacted in 2018 that governs how organizations collect, store, and process personal data of EU residents, giving cyber tools legal obligations around data handling and breach notification. inputs, and PASSI support

    └──▷ GET THIS VERSION

    copy

    $ git clone --branch v3.15.0 https://github.com/intuitem/ciso-assistant-community.git
    # already have the repo? check out this version:
    $ git checkout v3.15.0

    • SoA generation UX added to streamline Statement of Applicability creation
    • Chat mode (epic) launched for interactive query capabilities
    • Batch input operations added for GDPR personal data fields
    • PASSI framework support introduced via the library component
    • Applied controls can now be synced directly to reference controls

    +3 more show less

    • Score toggling now supports batch selection and average-of-averages calculation
    • Requirements tree in EBIOS RMEBIOS RMA French risk-management method published by ANSSI for analysing cyber threats and selecting countermeasures; tools use it to structure risk assessments that satisfy French and EU regulatory expectations. report now supports expand/collapse interaction
    • Control suggestions now allow direct selection of controls

    8 details in Everything

54. v3.14.6 Mar 24, 2026 · release notes

    CISO Assistant v3.14.6 adds vulnerability import via the data wizard and a back button in the stakeholder view.

    └──▷ GET THIS VERSION

    copy

    $ git clone --branch v3.14.6 https://github.com/intuitem/ciso-assistant-community.git
    # already have the repo? check out this version:
    $ git checkout v3.14.6

    └──▷ HOW TO FIND IT
    Import vulnerability data into CISO Assistant using the newly added data wizard feature.
    📍Go to Data Wizard › Vulnerabilities and upload your CSV file
    Navigate back from the detailed stakeholder view to the previous workshop step.
    📍In the stakeholder view, click the back button to return to workshop 3
55. v3.14.5 Mar 23, 2026 · release notes

    CISO Assistant v3.14.5 adds universal fuzzy search, a visual risk matrix editor, and Korean language support

    └──▷ GET THIS VERSION

    copy

    $ git clone --branch v3.14.5 https://github.com/intuitem/ciso-assistant-community.git
    # already have the repo? check out this version:
    $ git checkout v3.14.5

    • Adds universal search with fuzzy search for finding assets, controls, and risks across the entire platform.
    • Introduces a visual editor for risk matrix allowing drag-and-drop configuration of likelihood and impact levels.
    • Adds Korean (ko) as a supported interface language.

    3 details in Everything

56. v3.14.4 Mar 20, 2026 · release notes

    CISO Assistant v3.14.4 persists table filters to browser localStorage

    └──▷ GET THIS VERSION

    copy

    $ git clone --branch v3.14.4 https://github.com/intuitem/ciso-assistant-community.git
    # already have the repo? check out this version:
    $ git checkout v3.14.4

    └──▷ HOW TO FIND IT
    Retain applied column and status filters across page reloads or browser restarts without re-selecting them.
    📍Open any data table in CISO Assistant and apply your preferred filters; they are now automatically saved to localStorage.
57. v3.14.3 Mar 20, 2026 · release notes

    CISO Assistant v3.14.3 adds markdown policy editing, SMTPSMTPThe application-layer protocol used to send email between servers and from clients to servers; cyber tools use it to relay alerts, phishing simulations, or exfiltrated data over standard mail infrastructure. TLS 1.2 forcing, and UX improvements.

    └──▷ GET THIS VERSION

    copy

    $ git clone --branch v3.14.3 https://github.com/intuitem/ciso-assistant-community.git
    # already have the repo? check out this version:
    $ git checkout v3.14.3

    • feat(oidc): deep search for email in nested IdPIdPA service that authenticates users and supplies identity information to other applications. It is the sign-in authority behind many single sign-on systems. token claims to improve authentication reliability.

    1 detail in Everything

58. v3.14.1 Mar 18, 2026 · release notes

    CISO Assistant v3.14.1 adds cost summaries on action plans, asset-based filtering for measures, ReCyF library support, and SSOSSOSingle sign-on, using one identity provider to sign in to multiple applications. It reduces separate passwords and centralizes account and access management. token-via-cookie delivery.

    └──▷ GET THIS VERSION

    copy

    $ git clone --branch v3.14.1 https://github.com/intuitem/ciso-assistant-community.git
    # already have the repo? check out this version:
    $ git checkout v3.14.1

    • Sends SSO tokens via cookie instead of URL, reducing token-leakage exposure in browser history and server logs.
    • Adds cost summary view on action plans (with CRQ IAMIAMIdentity and Access Management — a framework of policies and services for controlling who can authenticate to systems and what resources they are authorized to use, letting cyber tools enforce least-privilege and audit access. alignment) to surface financial impact of remediation work.
    • Adds filter by asset capability in the measures view to scope security measures to a specific asset.
    • Shows a UI indicator when an ID field will be auto-generated if left blank, clarifying object-creation behaviour.

    4 details in Everything

59. v3.14.0 Mar 14, 2026 · release notes

    CISO Assistant v3.14.0 adds DORA NBB-compliant exports and custom report/email templates

    └──▷ GET THIS VERSION

    copy

    $ git clone --branch v3.14.0 https://github.com/intuitem/ciso-assistant-community.git
    # already have the repo? check out this version:
    $ git checkout v3.14.0

    • Adds NBB-compliant export format for DORA ROI to meet regulatory specifications.
    • Enables customization of email notifications and Word report templates in the Pro tier.

    2 details in Everything

60. v3.13.6 Mar 11, 2026 · release notes

    CISO Assistant v3.13.6 extends folder selection and search to all folder fields

    └──▷ GET THIS VERSION

    copy

    $ git clone --branch v3.13.6 https://github.com/intuitem/ciso-assistant-community.git
    # already have the repo? check out this version:
    $ git checkout v3.13.6

    └──▷ HOW TO FIND IT
    Use the global folder picker to quickly filter or select assets by their assigned folder without navigating deep into hierarchies.
    📍Open any folder field selector and start typing the folder name to search and filter available options across the entire application.
61. v3.13.5 Mar 10, 2026 · release notes

    CISO Assistant v3.13.5 adds default language admin settings, ref_id to audit action plans, and currency expansion.

    └──▷ GET THIS VERSION

    copy

    $ git clone --branch v3.13.5 https://github.com/intuitem/ciso-assistant-community.git
    # already have the repo? check out this version:
    $ git checkout v3.13.5

    • admin can set a default language and optionally force it on users
    • ref_id added to audit action plan

    2 details in Everything

62. v3.13.4 Mar 8, 2026 · release notes

    Adds owner field support to Applied Controls bulk import wizard

    └──▷ GET THIS VERSION

    copy

    $ git clone --branch v3.13.4 https://github.com/intuitem/ciso-assistant-community.git
    # already have the repo? check out this version:
    $ git checkout v3.13.4

63. v3.13.2 Mar 6, 2026 · release notes

    New AWS S3 identity token support, AWS_LOCATION env var, BI data wizard section, and CISA CPG 2.0 framework coverage.

    └──▷ GET THIS VERSION

    copy

    $ git clone --branch v3.13.2 https://github.com/intuitem/ciso-assistant-community.git
    # already have the repo? check out this version:
    $ git checkout v3.13.2

    • AWS_WEB_IDENTITY_TOKEN_FILE, AWS_S3_REGION_NAME, and AWS_S3_ROLE_ARN environment variables for AWS web identity S3 authentication
    • AWS_LOCATION environment variable to configure the object-storage location for deployments
    • Business impact analysis section in the data wizard for importing business context data

    3 details in Everything

64. v3.13.1 Mar 3, 2026 · release notes

    CISO Assistant v3.13.1 adds MonAideCyber v2 support, requirement assessment comments, and auditor workflows.

    └──▷ GET THIS VERSION

    copy

    $ git clone --branch v3.13.1 https://github.com/intuitem/ciso-assistant-community.git
    # already have the repo? check out this version:
    $ git checkout v3.13.1

    • Adds the ANSSSI - MonAideCyber Questionnaire (v2) framework to enable compliance mapping for this specific French cybersecurity aid program
    • Adds the ability to include comments on individual requirements assessments, allowing auditors to provide context alongside their answers
    • Introduces a new auditor/respondent workflow with notifications, separating the roles of those who perform audits from those who respond to them
    • Adds a boolean flag on risk assessments and audits to request autosync, controlling whether changes trigger immediate synchronization
    • Implements cleaner layout for the audit toolbox UI component for improved usability during active audits

    5 details in Everything

65. v3.13.0 Mar 2, 2026 · release notes

    CISO Assistant v3.13.0 adds MFAMFAMulti-factor authentication, requiring proof from different categories, such as a password and a hardware key, to sign in. It reduces reliance on a password alone. enforcement for admins, searchable folder list in Focus Mode, and advanced audit analytics.

    └──▷ GET THIS VERSION

    copy

    $ git clone --branch v3.13.0 https://github.com/intuitem/ciso-assistant-community.git
    # already have the repo? check out this version:
    $ git checkout v3.13.0

    • Adds admin ability to force users to set up MFA
    • Adds advanced analytics page for audits

    2 details in Everything

66. v3.12.6 Feb 26, 2026 · release notes

    CISO Assistant v3.12.6 adds M2M visibility checks and expands validation coverage to processings, exceptions, accreditations, and contracts.

    └──▷ GET THIS VERSION

    copy

    $ git clone --branch v3.12.6 https://github.com/intuitem/ciso-assistant-community.git
    # already have the repo? check out this version:
    $ git checkout v3.12.6

    • Adds M2M visibility check in BaseModelSerializer to enforce multi-model access controls
    • Expands validations to cover processings, exceptions, accreditations and contracts

    2 details in Everything

67. v3.12.5 Feb 24, 2026 · release notes

    CISO Assistant v3.12.5 adds IAMIAMIdentity and Access Management — a framework of policies and services for controlling who can authenticate to systems and what resources they are authorized to use, letting cyber tools enforce least-privilege and audit access. group creation flag, applied_controls in evidences table, ITIL 4 library, chart annotations, and more wizard fields

    └──▷ GET THIS VERSION

    copy

    $ git clone --branch v3.12.5 https://github.com/intuitem/ciso-assistant-community.git
    # already have the repo? check out this version:
    $ git checkout v3.12.5

    • Adds --create-iam-groups flag to the CLI for creating IAM groups
    • Includes applied_controls field in the evidences data table
    • Adds new ITIL 4 Management Practices library to the framework catalog
    • Adds optional ServiceAccount support with annotations in chart configuration
    • Expands available fields on the data wizard interface

    5 details in Everything

68. v3.12.4 Feb 22, 2026 · release notes

    CISO Assistant v3.12.4 adds campaign feature flag, risk scenario filters, and data wizard conflict strategy improvements.

    └──▷ GET THIS VERSION

    copy

    $ git clone --branch v3.12.4 https://github.com/intuitem/ciso-assistant-community.git
    # already have the repo? check out this version:
    $ git checkout v3.12.4

    • feature_flags.campaigns (and associated UI/behavior) added as a feature flag to control campaign functionality
    • Adds labels and qualifications filter options on risk scenarios in the Data Wizard / risk management workflow
    • Improves conflict management strategy on data wizard for Pro users, generalizing how conflicts are handled

    3 details in Everything

69. v3.12.3 Feb 18, 2026 · release notes

    Improved context management for the MCPMCPModel Context Protocol, a standard for connecting AI applications to external tools and data sources. A compatible server exposes capabilities an assistant can use through a common interface. integration when handling many audits.

    └──▷ GET THIS VERSION

    copy

    $ git clone --branch v3.12.3 https://github.com/intuitem/ciso-assistant-community.git
    # already have the repo? check out this version:
    $ git checkout v3.12.3

70. v3.12.2 Feb 17, 2026 · release notes

    CISO Assistant v3.12.2 adds respondent mode lock cases and requirement node implementation groups updates

    └──▷ GET THIS VERSION

    copy

    $ git clone --branch v3.12.2 https://github.com/intuitem/ciso-assistant-community.git
    # already have the repo? check out this version:
    $ git checkout v3.12.2

    • Adds feat: allow requirement node implementation groups update to enable updating implementation groups on requirement nodes.

    1 detail in Everything

71. v3.12.1 Feb 16, 2026 · release notes

    CISO Assistant v3.12.1 adds incident labels, findings assessment progress, Moroccan Law mapping, and findings-threats linking.

    └──▷ GET THIS VERSION

    copy

    $ git clone --branch v3.12.1 https://github.com/intuitem/ciso-assistant-community.git
    # already have the repo? check out this version:
    $ git checkout v3.12.1

    • Adds labels field on incidents to categorize and filter security events
    • Adds progress tracking for findings assessments in the UI
    • Adds bidirectional mapping between Moroccan Law 05-20 and ISO 27001:2022
    • Adds many-to-many relationship between findings and threats
    • Generalizes the pick existing pattern across UI components

    5 details in Everything

72. v3.12.0 Feb 13, 2026 · release notes

    CISO Assistant v3.12.0 introduces batch table actions, partial requirement assignments, and serializer-level access control.

    └──▷ GET THIS VERSION

    copy

    $ git clone --branch v3.12.0 https://github.com/intuitem/ciso-assistant-community.git
    # already have the repo? check out this version:
    $ git checkout v3.12.0

    └──▷ HOW TO FIND IT
    Perform bulk operations on multiple items at once via the table interface.
    📍Select multiple rows in any table and use the new Batch actions dropdown menu to apply changes simultaneously.
    Assign a specific requirement to only one team member within a group.
    📍Edit a requirement and use the Partial assignment option to select a single user or team instead of the entire group.
    • Adds batch actions on tables for bulk operations
    • Enables partial assignment of requirements to a specific user or team instead of whole assignments
    • Implements serializer-level access control enforcement for finer-grained data visibility

    3 details in Everything

73. v3.11.5 Feb 13, 2026 · release notes

    Adds ISO/IEC 27001:2022 to DNSSI 2023 mapping library and license parameters in make_config.py

    └──▷ GET THIS VERSION

    copy

    $ git clone --branch v3.11.5 https://github.com/intuitem/ciso-assistant-community.git
    # already have the repo? check out this version:
    $ git checkout v3.11.5

74. v3.11.4 Feb 11, 2026 · release notes

    Adds save-and-next workflow for requirement assessments, a new mapping library for Moroccan Law 05-20, and task template links in notifications.

    └──▷ GET THIS VERSION

    copy

    $ git clone --branch v3.11.4 https://github.com/intuitem/ciso-assistant-community.git
    # already have the repo? check out this version:
    $ git checkout v3.11.4

    └──▷ HOW TO FIND IT
    Navigate through a long set of requirements without losing progress at each step.
    📍In the Requirement Assessment view, click the new Save and Next button to persist your answer and advance to the next control.
    Map existing ISO 27001 controls to Moroccan regulatory requirements automatically.
    📍Use the new mapping library feature during framework alignment to apply ISO/IEC 27001:2022 → Moroccan Law 05-20 mappings.
    Ensure assignees can immediately access the required documentation from their email.
    📍Check task template assignment mail notification emails; they now contain direct links to the relevant task templates.
    • Adds feat: save and next button on a requirement assessment to streamline multi-step compliance reviews
    • Adds ISO/IEC 27001:2022 → Moroccan Law 05-20 mapping library for automated control alignment in regional assessments
    • Adds links to task templates in task template assignment mail notification for faster onboarding

    3 details in Everything

75. v3.11.3 Feb 10, 2026 · release notes

    Adds reference controls for CyFun2025 and support for the Moroccan cybersecurity law framework.

    └──▷ GET THIS VERSION

    copy

    $ git clone --branch v3.11.3 https://github.com/intuitem/ciso-assistant-community.git
    # already have the repo? check out this version:
    $ git checkout v3.11.3

    └──▷ HOW TO FIND IT
    Select the new Moroccan framework for a new assessment in the CISO Assistant service.
    📍1. In the console, go to Frameworks. 2. Click Create new framework. 3. Select Moroccan cybersecurity law from the list of available frameworks.
    • Adds reference controls to the CyFun2025 standard via the new pull #3389
    • Adds Moroccan cybersecurity law framework as a supported compliance framework

    2 details in Everything

76. v3.11.0 Feb 3, 2026 · release notes

    CISO Assistant v3.11.0 adds the RBI framework and improves library loading UX

    └──▷ GET THIS VERSION

    copy

    $ git clone --branch v3.11.0 https://github.com/intuitem/ciso-assistant-community.git
    # already have the repo? check out this version:
    $ git checkout v3.11.0

    • Adds RBI framework to supported compliance frameworks for risk assessment
    • Adds a user-facing spinner message indicating that demo data is currently loading

    2 details in Everything

77. v3.10.5 Feb 2, 2026 · release notes

    CISO Assistant v3.10.5 adds Excel library import, perimeters optionality, and CLI object import

    └──▷ GET THIS VERSION

    copy

    $ git clone --branch v3.10.5 https://github.com/intuitem/ciso-assistant-community.git
    # already have the repo? check out this version:
    $ git checkout v3.10.5

    • Adds Excel (.xlsx.xlsxThe file format used by Microsoft Excel for spreadsheets, based on the Open XML standard. Cyber tools use it to ingest or export structured tabular data in a format analysts already work with.) file support to the library import wizard in the UI
    • Adds risk_scenario, residual_risk and implementation_status fields to the issue management API endpoints

    2 details in Everything

78. v3.10.4 Jan 27, 2026 · release notes

    CISO Assistant v3.10.4 adds manager-level review of user assignments, SUM/AVG audit score aggregation, tab titles, and a BIO2 library.

    └──▷ GET THIS VERSION

    copy

    $ git clone --branch v3.10.4 https://github.com/intuitem/ciso-assistant-community.git
    # already have the repo? check out this version:
    $ git checkout v3.10.4

    • Adds SUM or Average as options for audit score aggregation via the new UI control
    • Enables managers to review other users' assignments through the 'review other users assignments' feature in PRO tier
    • Adds dynamic tab titles to the UX interface
    • Includes the new BIO2 library (lib)

    4 details in Everything

    └──▷ BREAKING ON UPGRADE

    • !The fix!: multiple improvements and simplifications on GDPR module indicates a breaking change in the GDPRGDPREU regulation enacted in 2018 that governs how organizations collect, store, and process personal data of EU residents, giving cyber tools legal obligations around data handling and breach notification. module logic, potentially resetting legal basis values to defaults.
79. v3.10.3 Jan 23, 2026 · release notes

    CISO Assistant v3.10.3 adds domain focus mode and a kanban view for applied controls with table filter support.

    └──▷ GET THIS VERSION

    copy

    $ git clone --branch v3.10.3 https://github.com/intuitem/ciso-assistant-community.git
    # already have the repo? check out this version:
    $ git checkout v3.10.3

    └──▷ HOW TO FIND IT
    Restrict all listed objects to a specific domain in the interface.
    📍In the console, go to the main view and enable domain focus mode for the target domain
    Visualize applied controls as cards while keeping current table filters active.
    📍In the console, go to the applied controls view and switch to kanban mode
    • Adds domain focus mode to filter UI objects by a specific domain
    • Introduces kanban mode for applied controls that respects existing table filters

    2 details in Everything

80. v3.10.2 Jan 21, 2026 · release notes

    Adds CIS Controls v8 and IAMIAMIdentity and Access Management — a framework of policies and services for controlling who can authenticate to systems and what resources they are authorized to use, letting cyber tools enforce least-privilege and audit access. cache, enhances assignments and incident filtering in CISO Assistant v3.10.2

    └──▷ GET THIS VERSION

    copy

    $ git clone --branch v3.10.2 https://github.com/intuitem/ciso-assistant-community.git
    # already have the repo? check out this version:
    $ git checkout v3.10.2

    • feat(tool) adds CIS Controls v8 to NIST CSFNIST CSFThe NIST Cybersecurity Framework, a set of outcomes for managing cybersecurity risk. Organizations use it to describe their current posture, priorities and improvement goals. 2.0 & ISO27001:2022 mapping tools
    • feat adds cache for IAM operations
    • feat expands my assignments page to support teams-related assignments
    • feat allows incidents with identical names within the same domain if they have different ref_ids

    4 details in Everything

81. v3.10.1 Jan 20, 2026 · release notes

    Adds quick filter for updatable libraries and refactors actor visibility rules

    └──▷ GET THIS VERSION

    copy

    $ git clone --branch v3.10.1 https://github.com/intuitem/ciso-assistant-community.git
    # already have the repo? check out this version:
    $ git checkout v3.10.1

    • Migrates additional relations from User to Actor type for better granular access control

    1 detail in Everything

82. v3.10.0 Jan 19, 2026 · release notes

    New clica backup/restore command, EBIOS RMEBIOS RMA French risk-management method published by ANSSI for analysing cyber threats and selecting countermeasures; tools use it to structure risk assessments that satisfy French and EU regulatory expectations. Excel import/export, MCPMCPModel Context Protocol, a standard for connecting AI applications to external tools and data sources. A compatible server exposes capabilities an assistant can use through a common interface. support for TPRMTPRMAssessing and monitoring the security risk an organization takes on through its vendors, suppliers and service providers. It covers the questionnaires, evidence and continuous checks behind letting a third party hold your data. and risk assessment skills

    └──▷ GET THIS VERSION

    copy

    $ git clone --branch v3.10.0 https://github.com/intuitem/ciso-assistant-community.git
    # already have the repo? check out this version:
    $ git checkout v3.10.0

    • Adds clica CLI command for full backup/restore operations
    • Enables exporting and importing EBIOS RM data via Excel files with the new beta feature
    • Expands the MCP server to support management of TPRM objects
    • Adds a new AI skill for basic risk assessment on the MCP server
    • Supports Microsoft Cloud Security Benchmark in the library

    5 details in Everything

83. v3.9.2 Jan 10, 2026 · release notes

    CISO Assistant v3.9.2 adds Estonian E-ITS framework support, simplified Chinese translation, and optional enclave visibility in the org tree.

    └──▷ GET THIS VERSION

    copy

    $ git clone --branch v3.9.2 https://github.com/intuitem/ciso-assistant-community.git
    # already have the repo? check out this version:
    $ git checkout v3.9.2

    └──▷ HOW TO FIND IT
    Use the new Estonian E-ITS framework for compliance mapping instead of previous frameworks.
    📍Select Estonian E-ITS from the framework dropdown in the dashboard.
    Switch the application interface to simplified Chinese.
    📍Navigate to Settings › Language and select Chinese (Simplified).
    Hide cloud or external enclaves from the organisation hierarchy view for clarity.
    📍In the Organisation tree view, toggle the Show/Hide Enclaves switch.
    • Supports the Estonian E-ITS framework
    • Adds simplified Chinese (zh-hans) translation
    • Enables toggling enclave visibility on the organisation tree view

    3 details in Everything

84. v3.9.1 Jan 2, 2026 · release notes

    CISO Assistant v3.9.1 adds CI/CD test for enterprise backup/restore and improves audit performance.

    └──▷ GET THIS VERSION

    copy

    $ git clone --branch v3.9.1 https://github.com/intuitem/ciso-assistant-community.git
    # already have the repo? check out this version:
    $ git checkout v3.9.1

    • Adds ci/cd test for enterprise backup/restore in community edition to validate recovery workflows
    • Improves audit perf for faster analysis cycles

    2 details in Everything

85. v3.9.0 Dec 30, 2025 · release notes

    CISO Assistant v3.9.0 adds ServiceNow integration, ISO-objective-to-custom-metric linking, and extended audit result visibility controls.

    └──▷ GET THIS VERSION

    copy

    $ git clone --branch v3.9.0 https://github.com/intuitem/ciso-assistant-community.git
    # already have the repo? check out this version:
    $ git checkout v3.9.0

    • Adds ServiceNow integration for bi-directional workflow connectivity between CISO Assistant and ServiceNow.
    • Supports extended audit result output and an extra flag to control the visibility of progress in audit views.
    • Links ISO objectives to custom metrics, enabling traceability from compliance objectives to measurable indicators.
    • Improves metric instances table with enhanced unit management.

    4 details in Everything

86. v3.8.1 Dec 30, 2025 · release notes

    CISO Assistant v3.8.1 adds security exception observations, EBios RM strategic scenario filtering, and ARMARMA family of RISC processor architectures designed by Arm Holdings and licensed to chip makers worldwide; tools target it to run natively on mobile, embedded, and increasingly server and desktop hardware. Excel import support.

    └──▷ GET THIS VERSION

    copy

    $ git clone --branch v3.8.1 https://github.com/intuitem/ciso-assistant-community.git
    # already have the repo? check out this version:
    $ git checkout v3.8.1

    └──▷ HOW TO FIND IT
    Document the rationale behind a security exception decision in the UI
    📍1. Navigate to the Security Exceptions view. 2. Open or create an exception record. 3. Locate the new observation text field and enter your rationale.
    Filter an EBIOS RMEBIOS RMA French risk-management method published by ANSSI for analysing cyber threats and selecting countermeasures; tools use it to structure risk assessments that satisfy French and EU regulatory expectations. analysis to examine risk treatment for a specific threat
    📍1. Open your existing EBIOS RM study. 2. In the Strategic Scenario section, use the new control panel to select a specific feared event. 3. The view will update to show only controls and impacts relevant to that event.
    Import an existing risk management study from an Excel file (Pro feature)
    📍1. Go to EBIOS RM › Studies. 2. Click Import. 3. Select your ARM Excel format file. 4. Confirm the import to populate the study with risks and controls.
    • Adds an observation field to security exceptions for documenting rationale
    • Enables focusing on specific feared events within EBIOS RM strategic scenarios
    • Adds pro-only support for importing EBIOS RM studies from ARM Excel format

    3 details in Everything

87. v3.8.0 Dec 20, 2025 · release notes

    CISO Assistant v3.8.0 adds custom KPIs/KRIs, task export to XLSX, and a unified library model view.

    └──▷ GET THIS VERSION

    copy

    $ git clone --branch v3.8.0 https://github.com/intuitem/ciso-assistant-community.git
    # already have the repo? check out this version:
    $ git checkout v3.8.0

    └──▷ HOW TO FIND IT
    Export a task list to XLSX for sharing progress with stakeholders outside the platform.
    📍In the Tasks view, click Export and select XLSX to download the task list as a spreadsheet.
    • Adds custom KPI and KRI definitions, enabling teams to track bespoke key performance and risk indicators.
    • Exports tasks as XLSX spreadsheets for offline reporting and stakeholder distribution.
    • Unifies library model tables into a single consolidated view across frameworks.

    3 details in Everything

88. v3.7.10 Dec 17, 2025 · release notes

    CISO Assistant v3.7.10 adds ISO 42001-2023, India's DPDPA 2023, and SCF mappings as new framework support.

    └──▷ GET THIS VERSION

    copy

    $ git clone --branch v3.7.10 https://github.com/intuitem/ciso-assistant-community.git
    # already have the repo? check out this version:
    $ git checkout v3.7.10

    • feat(lib): outline for ISO 42001-2023
    • feat(lib): add India's DPDPA 2023
    • feat(lib): add SCF mappings and other associated fixes

    3 details in Everything

89. v3.7.8 Dec 13, 2025 · release notes

    Adds domain import wizard, applied controls table view, processing export, MCPMCPModel Context Protocol, a standard for connecting AI applications to external tools and data sources. A compatible server exposes capabilities an assistant can use through a common interface. server tasks/audits, ref_id in tasks review, and risk matrix switching.

    └──▷ GET THIS VERSION

    copy

    $ git clone --branch v3.7.8 https://github.com/intuitem/ciso-assistant-community.git
    # already have the repo? check out this version:
    $ git checkout v3.7.8

    └──▷ HOW TO FIND IT
    Configure or inspect domain imports using the new wizard functionality through the UI.
    📍Go to Domains › Import Wizard in the main navigation.
    • Adds import wizard for domains to streamline bulk domain ingestion.
    • Enables viewing applied controls in a sortable, filterable table mode instead of card views.
    • Introduces processing export capability for exporting processing activities data.
    • Exposes MCP server capacities for interacting with tasks and audits programmatically.
    • Adds ref_id field to tasks displayed on the aggregated tasks review screen.

    +1 more show less

    • Allows switching between different risk matrices directly within risk assessments and EBIOS-RM studies.

    6 details in Everything

90. v3.7.7 Dec 11, 2025 · release notes

    CISO Assistant v3.7.7 adds policy validations and improves incident tracking

    └──▷ GET THIS VERSION

    copy

    $ git clone --branch v3.7.7 https://github.com/intuitem/ciso-assistant-community.git
    # already have the repo? check out this version:
    $ git checkout v3.7.7

    └──▷ HOW TO FIND IT
    Enforce validation rules on your compliance policies within the application interface.
    📍Navigate to Policies in the UI and configure the new validation settings for a specific policy.
    Utilize the enhanced incident tracking features to manage security events more effectively.
    📍Go to Incidents in the UI and use the improved tracking interface to log and update incidents.
    • Adds support for validations on policies
    • Improves incidents tracking capabilities

    2 details in Everything

91. v3.7.6 Dec 10, 2025 · release notes

    CISO Assistant v3.7.6 adds a pre-delete sanity check to prevent accidental data loss.

    └──▷ GET THIS VERSION

    copy

    $ git clone --branch v3.7.6 https://github.com/intuitem/ciso-assistant-community.git
    # already have the repo? check out this version:
    $ git checkout v3.7.6

    • Adds a sanity_check phase before deleting items in the UI

    1 detail in Everything

92. v3.7.5 Dec 5, 2025 · release notes

    CISO Assistant v3.7.5 adds evidence support in processes, domain-type filtering, and a CSFCSFThe NIST Cybersecurity Framework, a set of outcomes for managing cybersecurity risk. Organizations use it to describe their current posture, priorities and improvement goals. function switch context menu

    └──▷ GET THIS VERSION

    copy

    $ git clone --branch v3.7.5 https://github.com/intuitem/ciso-assistant-community.git
    # already have the repo? check out this version:
    $ git checkout v3.7.5

    • Adds the ability to attach evidences directly to processings
    • Adds the domain_type column to the domains table with filtering support
    • Adds a context menu to switch the CSF function for an applied control

    3 details in Everything

93. v3.7.4 Dec 3, 2025 · release notes

    CISO Assistant v3.7.4 adds reverse links from assets to controls and risk scenarios, plus IAMIAMIdentity and Access Management — a framework of policies and services for controlling who can authenticate to systems and what resources they are authorized to use, letting cyber tools enforce least-privilege and audit access./CBQ/PMBOOK role permissions.

    └──▷ GET THIS VERSION

    copy

    $ git clone --branch v3.7.4 https://github.com/intuitem/ciso-assistant-community.git
    # already have the repo? check out this version:
    $ git checkout v3.7.4

    • Adds setting to enable/disable the warning on external links in the application settings
    • Adds reverse link to controls on assets, allowing navigation from an asset directly to its associated controls
    • Adds reverse links to risk scenarios on assets, enabling direct access to risk scenarios linked to a specific asset
    • Adds iam, crq and pmbok permissions to the roles configuration
    • Adds more attributes to risk scenarios in the data model

    5 details in Everything

94. v3.7.3 Dec 1, 2025 · release notes

    CISO Assistant v3.7.3 introduces a new UI for managing feature flags

    └──▷ GET THIS VERSION

    copy

    $ git clone --branch v3.7.3 https://github.com/intuitem/ciso-assistant-community.git
    # already have the repo? check out this version:
    $ git checkout v3.7.3

    • feat: new UI for feature flags by @melinoix in https://github.com/intuitem/ciso-assistant-community/pull/2978

    1 detail in Everything

95. v3.7.2 Nov 29, 2025 · release notes

    Adds admin control for user self-validation flows and CHF currency support

    └──▷ GET THIS VERSION

    copy

    $ git clone --branch v3.7.2 https://github.com/intuitem/ciso-assistant-community.git
    # already have the repo? check out this version:
    $ git checkout v3.7.2

    └──▷ HOW TO FIND IT
    Enable self-validation workflows for team members in the admin panel.
    📍Navigate to Admin › Settings › Workflow permissions and enable Allow user self-validations.
    • Admins can allow users to create self-validation workflows via the settings UI

    1 detail in Everything

96. v3.7.1 Nov 28, 2025 · release notes

    Adds outgoing webhooks for event notification, allows filtering past task occurrences, and makes ref_id editable for attack pathsattack pathsA possible sequence of steps an attacker could take to reach a valuable target. It connects weaknesses, permissions and reachable systems rather than treating each finding separately.

    └──▷ GET THIS VERSION

    copy

    $ git clone --branch v3.7.1 https://github.com/intuitem/ciso-assistant-community.git
    # already have the repo? check out this version:
    $ git checkout v3.7.1

    • feat(epic): outgoing webhooks adds the ability to send events via outbound webhooks
    • feat: be able to filter past task occurences and have it as default behaviour adds a filter for past occurrences with it enabled by default
    • feat(ref_id editable) ref_id is now editable for attack paths, allowing direct modification of the reference ID in the UI
    • Shows creation date in the exceptions list to help identify when an exception was granted

    4 details in Everything

    └──▷ BREAKING ON UPGRADE

    • !Task occurrences are now linked to evidence revisions instead of the evidence itself, requiring a migration of previous work via the UI.
97. v3.7.0 Nov 22, 2025 · release notes

    CISO Assistant v3.7.0 adds ANSSI AD checklist framework, bidirectional asset-exception linking, XLSX exports, and batch create scratchpad

    └──▷ GET THIS VERSION

    copy

    $ git clone --branch v3.7.0 https://github.com/intuitem/ciso-assistant-community.git
    # already have the repo? check out this version:
    $ git checkout v3.7.0

    └──▷ USE IT
    Prevent infinite loops in mapping graphs by setting the traversal limit
    yaml copy

    mapping.max_depth: 10

    • mapping.max_depth config key to control mapping relationship depth.
    • Bidirectional linking between assets and security exceptions.

    2 details in Everything

98. v3.6.3 Nov 20, 2025 · release notes

    Adds expiry date column to users list and removes header on questionnaire views from entity assessments.

    └──▷ GET THIS VERSION

    copy

    $ git clone --branch v3.6.3 https://github.com/intuitem/ciso-assistant-community.git
    # already have the repo? check out this version:
    $ git checkout v3.6.3

    • Adds expiry_date field display to the user management list view
    • Removes the header overlay when viewing a questionnaire directly from an entity assessment page

    2 details in Everything

99. v3.6.2 Nov 19, 2025 · release notes

    Sync EBIOS RMEBIOS RMA French risk-management method published by ANSSI for analysing cyber threats and selecting countermeasures; tools use it to structure risk assessments that satisfy French and EU regulatory expectations. studies to ISO 27005 and auto-generate workshop 5 risk descriptions.

    └──▷ GET THIS VERSION

    copy

    $ git clone --branch v3.6.2 https://github.com/intuitem/ciso-assistant-community.git
    # already have the repo? check out this version:
    $ git checkout v3.6.2

    • Adds capability to sync EBIOS RM studies with the resulting ISO 27005 framework
    • Adds auto-generation of risk scenario descriptions during workshop 5 analysis creation

    2 details in Everything

100. v3.6.0 Nov 15, 2025 · release notes

     New contracts management, data-wizard imports for entities/solutions/contracts, and DORA ROI reporting concepts

     └──▷ GET THIS VERSION

     copy

     $ git clone --branch v3.6.0 https://github.com/intuitem/ciso-assistant-community.git
     # already have the repo? check out this version:
     $ git checkout v3.6.0

     • Adds contracts management capability for tracking vendor agreements
     • Expands data-wizard to support importing entities, solutions, and contracts via bulk upload
     • Introduces foundational data structures and reports for DORA ROI analysis in third-party assessments

     3 details in Everything

101. v3.5.3 Nov 9, 2025 · release notes

     Adds PDIS framework support and audit log object coverage.

     └──▷ GET THIS VERSION

     copy

     $ git clone --branch v3.5.3 https://github.com/intuitem/ciso-assistant-community.git
     # already have the repo? check out this version:
     $ git checkout v3.5.3

     • tools wrapper for token optimization added to the API
     • PDIS framework added as a new importable standard
     • Audit logs now record previously missing objects

     3 details in Everything

102. v3.5.2 Nov 6, 2025 · release notes

     v3.5.2 adds priority to findings, quantitative risk assessment conversion, and framework mapping visualization

     └──▷ GET THIS VERSION

     copy

     $ git clone --branch v3.5.2 https://github.com/intuitem/ciso-assistant-community.git
     # already have the repo? check out this version:
     $ git checkout v3.5.2

     • findings objects now include a priority field, enabling prioritized remediation workflows.
     • Added a UI view for Framework mappings viz to visualize relationships between frameworks.

     2 details in Everything

103. v3.5.1 Nov 1, 2025 · release notes

     CISO Assistant v3.5.1 adds CRQ module via MCPMCPModel Context Protocol, a standard for connecting AI applications to external tools and data sources. A compatible server exposes capabilities an assistant can use through a common interface. protocol, reference controls/threats in data wizard, and markdown justification for risk scenarios.

     └──▷ GET THIS VERSION

     copy

     $ git clone --branch v3.5.1 https://github.com/intuitem/ciso-assistant-community.git
     # already have the repo? check out this version:
     $ git checkout v3.5.1

     └──▷ HOW TO FIND IT
     Interact with CISO Assistant's CRQ module programmatically via MCP.
     📍# MCP protocol interaction details would be defined by the MCP specification and server configuration.
     Use the data wizard to import or define reference controls and associated threats.
     📍Navigate to Data Wizard in the UI and select options to add reference controls and threats.
     Write rich text justifications for risk scenarios using markdown syntax.
     📍In the risk scenario editor, enter justification text with markdown formatting (e.g., bold, *italic*, lists).
     • Adds support for the CRQ module through the MCP protocol
     • Allows adding reference controls and threats through the data wizard
     • Increases the justification length limit for risk scenarios and enables markdown formatting

     3 details in Everything

104. v3.5.0 Oct 31, 2025 · release notes

     CISO Assistant v3.5.0 adds JIRA integration, clone-instance CLI command, MCPMCPModel Context Protocol, a standard for connecting AI applications to external tools and data sources. A compatible server exposes capabilities an assistant can use through a common interface. capabilities, and UI enhancements.

     └──▷ GET THIS VERSION

     copy

     $ git clone --branch v3.5.0 https://github.com/intuitem/ciso-assistant-community.git
     # already have the repo? check out this version:
     $ git checkout v3.5.0

     • Adds clone-instance Django command to duplicate a CISO Assistant instance
     • Adds JIRA integration for syncing applied controls and risks with Atlassian projects
     • Expands Model Context ProtocolModel Context ProtocolModel Context Protocol, a standard for connecting AI applications to external tools and data sources. A compatible server exposes capabilities an assistant can use through a common interface. (MCP) server capabilities
     • Adds markdown support in incident observation fields
     • Adds implementation group column in requirement assessments views

     +3 more show less

     • Includes ref_id on applied controls export and threats selection
     • Indicates attached evidence directly within incident observation entries
     • Improves audit details page loading performance

     8 details in Everything

105. v3.4.1 Oct 27, 2025 · release notes

     CISO Assistant v3.4.1 adds audit comparison capability and a new cloud sovereignty framework with weighted average calculations

     └──▷ GET THIS VERSION

     copy

     $ git clone --branch v3.4.1 https://github.com/intuitem/ciso-assistant-community.git
     # already have the repo? check out this version:
     $ git checkout v3.4.1

     • Adds the ability to compare audits side-by-side for gap analysis and progress tracking.
     • Introduces a new cloud_sovereignty framework and an implementation of weighted_average calculation logic.

     2 details in Everything

106. v3.4.0 Oct 25, 2025 · release notes

     CISO Assistant v3.4.0 introduces dynamic questionnaires, a mapping builder toolbox, and SCF framework support.

     └──▷ GET THIS VERSION

     copy

     $ git clone --branch v3.4.0 https://github.com/intuitem/ciso-assistant-community.git
     # already have the repo? check out this version:
     $ git checkout v3.4.0

     • dynamic questionnaires allow assessments to adapt based on prior answers, reducing noise and guiding users through relevant controls
     • new experimental toolbox for building and managing mappings between frameworks becomes available to assist with cross-framework translation workflows
     • adds SSOSSOSingle sign-on, using one identity provider to sign in to multiple applications. It reduces separate passwords and centralizes account and access management. authentication request signature support to ensure integrity of identity provideridentity providerA service that authenticates users and supplies identity information to other applications. It is the sign-in authority behind many single sign-on systems. requests during federated login flows
     • new SCF 2025.2.2 Framework is now available as a selectable standard for compliance assessments alongside the updated SCF 2024.2

     4 details in Everything

107. v3.3.1 Oct 22, 2025 · release notes

     Adds domain field to the campaign form for perimeters

     └──▷ GET THIS VERSION

     copy

     $ git clone --branch v3.3.1 https://github.com/intuitem/ciso-assistant-community.git
     # already have the repo? check out this version:
     $ git checkout v3.3.1

     └──▷ HOW TO FIND IT
     Limit a risk assessment campaign to a specific business unit or asset class by selecting its domain during creation.
     📍In the CISO Assistant UI, go to Campaigns › Create New. In the Perimeter section, use the new dropdown to select the desired domain before saving.
108. v3.3.0 Oct 18, 2025 · release notes

     CISO Assistant v3.3.0 adds Cyfun 2025 framework support, BIA combined report, markdown for task observations, and Kafka SSLSSLA cryptographic protocol for encrypting network connections, now deprecated in favor of TLS but whose name persists colloquially. Cyber tools reference it when handling HTTPS or other encrypted-channel inspection and termination./TLS capability.

     └──▷ GET THIS VERSION

     copy

     $ git clone --branch v3.3.0 https://github.com/intuitem/ciso-assistant-community.git
     # already have the repo? check out this version:
     $ git checkout v3.3.0

     • Adds a BIA combined report view
     • Enables markdown formatting in task_observation fields
     • Supports SSL/TLS for communication between dispatcher and Kafka broker

     3 details in Everything

109. v3.2.4 Oct 14, 2025 · release notes

     CISO Assistant v3.2.4 adds direct input of support assets on primary assets with link preservation.

     └──▷ GET THIS VERSION

     copy

     $ git clone --branch v3.2.4 https://github.com/intuitem/ciso-assistant-community.git
     # already have the repo? check out this version:
     $ git checkout v3.2.4

     • Enables inputting support assets directly on primary assets while preserving the links between them.

     1 detail in Everything

110. v3.2.0 Oct 10, 2025 · release notes

     CISO Assistant v3.2.0 adds vulnerability visualisation, EBIOS RMEBIOS RMA French risk-management method published by ANSSI for analysing cyber threats and selecting countermeasures; tools use it to structure risk assessments that satisfy French and EU regulatory expectations. study reports, CIS v8 controls, folder permissions, and richer dashboards.

     └──▷ GET THIS VERSION

     copy

     $ git clone --branch v3.2.0 https://github.com/intuitem/ciso-assistant-community.git
     # already have the repo? check out this version:
     $ git checkout v3.2.0

     • Adds asset owner column to the assets list view.
     • Adds full-path display to the UserGroup model table.
     • Adds backup and instance version compatibility check to prevent applying a backup from a mismatched version.
     • Adds import of elementary actions through the data wizard.
     • Adds calendar heatmap component to surface activity over time.

     +11 more show less

     • Adds vulnerabilities visualisation view.
     • Adds EBIOS RM study report generation and resolves entity relationship inconsistencies.
     • Adds management of more entity relationships in EBIOS RM studies.
     • Adds user-level permissions scoped to individual folders.
     • Adds owner column to the evidences table.
     • Adds label support for domains.
     • Adds flash mode for action plans on each applied-controls section to highlight pending items.
     • Improves governance, risk, and operations dashboards with richer data views.
     • Improves GDPRGDPREU regulation enacted in 2018 that governs how organizations collect, store, and process personal data of EU residents, giving cyber tools legal obligations around data handling and breach notification. dashboard with additional data points.
     • Improves X-Ray issue aggregation for readability and adds more detection rules.
     • Allows unselecting a previously chosen answer to a question in assessments.

     16 details in Everything

     └──▷ BREAKING ON UPGRADE

     • !v3.1.0 must be applied before upgrading to v3.2.0; skipping that version will cause a failed upgrade.
111. v3.1.0 Oct 4, 2025 · release notes

     CISO Assistant v3.1.0 adds data breach tracking, risk scenario/exception/incident CSV export, PMBOK support, and new filters.

     └──▷ GET THIS VERSION

     copy

     $ git clone --branch v3.1.0 https://github.com/intuitem/ciso-assistant-community.git
     # already have the repo? check out this version:
     $ git checkout v3.1.0

     • Adds data breach tracking capability for security incidents
     • Enables exporting risk scenarios, exceptions, and incidents tables to CSV format
     • Introduces PMBOK framework support with accreditation (homologations) tracking
     • Adds assigned_to filter for filtering tasks by assignee
     • Adds not exploitable and unaffected options to vulnerability status

     +8 more show less

     • Adds severity filter and status filter to the vulnerabilities view
     • Adds operations metrics section to the Analytics dashboard
     • Adds due date column to the ISO objectives table
     • Enables HTML export of audits with inlined CSS for offline viewing
     • Adds table of content generation in audit table mode
     • Adds flash mode visualization for applied controls
     • Enhances Graph Explorer interface capabilities
     • Supports INFO severity level across objects that utilize severity metrics

     13 details in Everything

112. v3.0.6 Sep 26, 2025 · release notes

     Adds managing GDPRGDPREU regulation enacted in 2018 that governs how organizations collect, store, and process personal data of EU residents, giving cyber tools legal obligations around data handling and breach notification. rights requests and their visibility in my-assignments to CISO Assistant v3.0.6

     └──▷ GET THIS VERSION

     copy

     $ git clone --branch v3.0.6 https://github.com/intuitem/ciso-assistant-community.git
     # already have the repo? check out this version:
     $ git checkout v3.0.6

     └──▷ HOW TO FIND IT
     Review all outstanding GDPR rights requests assigned to your current profile.
     📍Navigate to the My Assignments view in the CISO Assistant UI.
     Process a specific GDPR rights request linked to a framework control.
     📍Open a GDPR Framework detail page and use the Rights Requests tab to manage status.
     • feat: managing GDPR rights requests enables handling data subject access and deletion requests directly within the platform
     • feat: add ISO objectives and GDPR requests to my-assignments surfaces relevant compliance tasks in the user's personal assignment view

     2 details in Everything

113. v3.0.5 Sep 25, 2025 · release notes

     CISO Assistant v3.0.5 adds user expiry management, context menu evidence status changes, and incident report generation.

     └──▷ GET THIS VERSION

     copy

     $ git clone --branch v3.0.5 https://github.com/intuitem/ciso-assistant-community.git
     # already have the repo? check out this version:
     $ git checkout v3.0.5

     └──▷ HOW TO FIND IT
     Set an expiration date for a specific user account to automate access revocation.
     📍In the console, go to Users › Edit User and set the Expiry Date field
     Quickly change an evidence's status without opening its full details page.
     📍In the Evidence list, right-click the row and select Switch Status from the context menu
     Generate a formatted incident report for external sharing or archival.
     📍In the console, go to Incidents › Select Incident › Export and choose PDF or Markdown
     • manage users expiry date allows setting expiration dates for user accounts
     • context menu on evidences enables switching the status directly from the list view
     • evidences review feature integrated into the audit workflow for evidence validation
     • incident report generation supports output to PDF and Markdown formats
     • risk assessment CSV and PDF exports now include a strength of knowledge column/field

     5 details in Everything

114. v3.0.4 Sep 23, 2025 · release notes

     CISO Assistant v3.0.4 adds Svelte DataGrid to the Risk section and links incidents to third-party entities via UI.

     └──▷ GET THIS VERSION

     copy

     $ git clone --branch v3.0.4 https://github.com/intuitem/ciso-assistant-community.git
     # already have the repo? check out this version:
     $ git checkout v3.0.4

     • Introduces a new Svelte DataGrid component for displaying risk-related metrics in the risk interface section
     • Adds the capability to link security incidents directly to third-party entities (vendors) within the application interface

     2 details in Everything

115. v3.0.3 Sep 20, 2025 · release notes

     CISO Assistant v3.0.3 adds findings export (Excel, PDF, MD), new filters for TaskTemplate occurrences, and MFAMFAMulti-factor authentication, requiring proof from different categories, such as a password and a hardware key, to sign in. It reduces reliance on a password alone. identification capabilities.

     └──▷ GET THIS VERSION

     copy

     $ git clone --branch v3.0.3 https://github.com/intuitem/ciso-assistant-community.git
     # already have the repo? check out this version:
     $ git checkout v3.0.3

     └──▷ HOW TO FIND IT
     Export audit findings to a spreadsheet for offline review or reporting.
     📍Use the export option in the findings view and select Excel as the format.
     Filter TaskTemplates to see only those recurring in a specific time window.
     📍Apply last_occurrence and next_occurrence filters in the TaskTemplate query interface.
     Identify users who have not enabled Multi-Factor Authentication for security auditing.
     📍Use the user identification feature to filter or list users based on MFA status.
     • Adds export feature supporting Excel, PDF, and Markdown formats for findings data
     • Adds last_occurrence and next_occurrence filters to TaskTemplate queries
     • Enables identification of users with or without Multi-Factor Authentication (MFA) enabled

     3 details in Everything

116. v3.0.2 Sep 15, 2025 · release notes

     CISO Assistant v3.0.2 adds bulk re-triggering of all CRQ simulations at once.

     └──▷ GET THIS VERSION

     copy

     $ git clone --branch v3.0.2 https://github.com/intuitem/ciso-assistant-community.git
     # already have the repo? check out this version:
     $ git checkout v3.0.2

     └──▷ HOW TO FIND IT
     When you need to re-run the entire set of control remediation queries (CRQ) simulations simultaneously, typically after updating underlying data or dependencies.
     📍Steps: Navigate to the CRQ section in the CISO Assistant UI and select the option to re-trigger all simulations.
117. v3.0.1 Sep 14, 2025 · release notes

     CISO Assistant v3.0.1 moves compliance average progress by framework to the main analytics view.

     └──▷ GET THIS VERSION

     copy

     $ git clone --branch v3.0.1 https://github.com/intuitem/ciso-assistant-community.git
     # already have the repo? check out this version:
     $ git checkout v3.0.1

118. v3.0.0 Sep 13, 2025 · release notes

     CISO Assistant v3.0 adds the Cyber Risk Quantification module and custom qualifications to risk profiles.

     └──▷ GET THIS VERSION

     copy

     $ git clone --branch v3.0.0 https://github.com/intuitem/ciso-assistant-community.git
     # already have the repo? check out this version:
     $ git checkout v3.0.0

     └──▷ HOW TO FIND IT
     Configure custom qualification tags for assets or users within the risk assessment workflow
     📍Navigate to Risk › Assessment › Profiles and enable custom qualifications
     Start quantifying cyber risk exposure using the new engine introduced in v3.0
     📍Open the Cyber Risk Quantification module from the main dashboard
     Filter audit logs to view only entries where a specific condition is met
     📍In Audit Logs, use the Filter dropdown to select fields and values
     • Adds the Cyber Risk Quantification module (epic) for cost-structure-based risk analysis
     • Introduces custom qualifications for configuring user or asset risk profiles
     • Enables filtering the audit logs table directly via UI controls
     • Allows filtering risk assessments by null status in the UI
     • Expands analytics cards with new summary metrics and enhancements

     +1 more show less

     • Displays full folder paths in the user groups dropdown menu

     6 details in Everything

     └──▷ BREAKING ON UPGRADE

     • !The applied_controls cost structure has evolved to a more advanced object, requiring schema migration for existing data
119. v2.9.2 Sep 5, 2025 · release notes

     CISO Assistant v2.9.2 adds risk assessment-to-action sync and a feature flag for Terminologies control

     └──▷ GET THIS VERSION

     copy

     $ git clone --branch v2.9.2 https://github.com/intuitem/ciso-assistant-community.git
     # already have the repo? check out this version:
     $ git checkout v2.9.2

     • feat: control Terminologies entry by a feature flag enables toggling the Terminologies module independently of the main release
     • feat: risk assessment sync to actions automatically links risk assessment outcomes to actionable tasks within the platform

     2 details in Everything

120. v2.9.1 Aug 30, 2025 · release notes

     CISO Assistant v2.9.1 introduces custom roles terminology model and CLI PATPATA personal access token, a credential used by scripts and integrations instead of a user's password. Its permissions and expiry depend on the service issuing it. authentication

     └──▷ GET THIS VERSION

     copy

     $ git clone --branch v2.9.1 https://github.com/intuitem/ciso-assistant-community.git
     # already have the repo? check out this version:
     $ git checkout v2.9.1

     └──▷ TRY IT
     Authenticate CISO Assistant CLI via personal access tokenpersonal access tokenA personal access token, a credential used by scripts and integrations instead of a user's password. Its permissions and expiry depend on the service issuing it.
     copy

     $ ciso-assistant --pat <your_pat_token> scan

     Import a risk analysis dataset using the data wizard feature (pro)
     📍In the console, go to Data › Wizard and select Import Risk Analysis
     Filter audit logs by specific business domains in the audit-logs table UI
     📍In the console, go to Audit Logs and use the domains filter dropdown to select target areas
     • audit-logs table gains domains column and filters
     • CLI now accepts --pat flag for personal access tokenaccess tokenA credential that authorizes a client to use a service or API. It usually has limited permissions and a lifetime; anyone holding it may be able to use those permissions. auth
     • Risk analysis import supported in data wizard (pro)
     • Controls prioritization view adds impact vs effort review columns (pro)
     • Terminology model introduces custom risk origins

     5 details in Everything

     └──▷ BREAKING ON UPGRADE

     • !CLI authentication now requires the new --pat token flow; existing password-based or default sessions may no longer work
121. v2.9.0 Aug 28, 2025 · release notes

     CISO Assistant v2.9.0 adds threat/reference control imports, risk qualification charts, API score/status support, and new UI controls.

     └──▷ GET THIS VERSION

     copy

     $ git clone --branch v2.9.0 https://github.com/intuitem/ciso-assistant-community.git
     # already have the repo? check out this version:
     $ git checkout v2.9.0

     • Adds import capability for threats and reference controls in the UI
     • Shows risk scenario qualifications via a bar chart in the UI
     • Displays answered questions within an audit view
     • Adds a No redirect save button (renaming the existing save action) in create/edit modals
     • Displays the full path to domains in drop-down menus

     +2 more show less

     • Adds score and status parameters to the update_requirement API endpoint
     • Provides NIST SP-800-53 Rev5 to ISO 27001:2022 mapping library coverage

     7 details in Everything

122. v2.8.2 Aug 24, 2025 · release notes

     CISO Assistant v2.8.2 adds findings table filters, improved flash mode layout, and email notification coverage.

     └──▷ GET THIS VERSION

     copy

     $ git clone --branch v2.8.2 https://github.com/intuitem/ciso-assistant-community.git
     # already have the repo? check out this version:
     $ git checkout v2.8.2

     • Adds filters for the findings table to narrow down results
     • Implements autolocking for deprecated assessments and due audits within campaigns or third parties review
     • Covers more email notifications with expanded coverage
     • Improves flash mode layout with annotation, better overflow and navigation
     • Indicates the risk matrix on a risk assessment to remind definitions

     5 details in Everything

123. v2.8.1 Aug 22, 2025 · release notes

     CISO Assistant v2.8.1 adds Objectives/Issues support, assessment locking, and UI enhancements for applied controls and third parties.

     └──▷ GET THIS VERSION

     copy

     $ git clone --branch v2.8.1 https://github.com/intuitem/ciso-assistant-community.git
     # already have the repo? check out this version:
     $ git checkout v2.8.1

     └──▷ HOW TO FIND IT
     Define new Objectives or Issues in the cyber tooling to track strategic goals and risks.
     📍Use the platform UI to create new Objectives and Issues entities under your framework.
     Lock an active assessment to prevent further modifications once final.
     📍Navigate to the Assessment view and select the lock option for the desired assessment.
     • Objectives and Issues concepts added to the platform
     • Assessments can now be locked via a new feature
     • Applied controls tables and filters improved with new capability
     • Third parties table enhanced with new UI features

     4 details in Everything

124. v2.8.0 Aug 15, 2025 · release notes

     Adds markdown rendering for description/observation fields, observation fields on controls/assets/findings, and audit search by framework name.

     └──▷ GET THIS VERSION

     copy

     $ git clone --branch v2.8.0 https://github.com/intuitem/ciso-assistant-community.git
     # already have the repo? check out this version:
     $ git checkout v2.8.0

     • Add observation field to applied control, asset and finding
     • Tasks are included as a sub-item of applied controls with an external link

     2 details in Everything

125. v2.7.13 Aug 9, 2025 · release notes

     Adds findings trackers and per-findings visibility in My Assignments, plus applied controls details on reference control pages.

     └──▷ GET THIS VERSION

     copy

     $ git clone --branch v2.7.13 https://github.com/intuitem/ciso-assistant-community.git
     # already have the repo? check out this version:
     $ git checkout v2.7.13

     └──▷ HOW TO FIND IT
     Track and monitor individual findings directly within your personal assignment dashboard.
     📍In the console, go to My Assignments and look for the new findings trackers and expanded finding details.
     See exactly which controls are applied by inspecting a reference control's detail view.
     📍Navigate to any reference control in the tool; the details section now lists all attached applied controls.
     • Adds findings trackers and individual findings to My Assignments view
     • Enables viewing all applied controls attached to a reference control on its details page
     • Loads the x-rays page in non-blocking mode for improved responsiveness

     3 details in Everything

126. v2.7.12 Aug 6, 2025 · release notes

     CISO Assistant v2.7.12 adds Turkish translation and an experimental priority review matrix via UI steps.

     └──▷ GET THIS VERSION

     copy

     $ git clone --branch v2.7.12 https://github.com/intuitem/ciso-assistant-community.git
     # already have the repo? check out this version:
     $ git checkout v2.7.12

     • Adds 'experimental priority review matrix' to the applied controls context menu

     1 detail in Everything

127. v2.7.11 Jul 31, 2025 · release notes

     CISO Assistant v2.7.11 adds extra filters on requirements assessments via API.

     └──▷ GET THIS VERSION

     copy

     $ git clone --branch v2.7.11 https://github.com/intuitem/ciso-assistant-community.git
     # already have the repo? check out this version:
     $ git checkout v2.7.11

128. v2.7.10 Jul 30, 2025 · release notes

     Adds Prometheus metrics exporter and enhanced table filters to CISO Assistant v2.7.10

     └──▷ GET THIS VERSION

     copy

     $ git clone --branch v2.7.10 https://github.com/intuitem/ciso-assistant-community.git
     # already have the repo? check out this version:
     $ git checkout v2.7.10

     └──▷ TRY IT
     Monitor CISO Assistant instance health via Prometheus for alerting dashboards.
     copy

     $ curl http://localhost:8080/metrics

     Filter multiple objects tables by status or type to quickly locate specific items.
     📍Use the new filter dropdowns in the multiple objects view (e.g., Frameworks, Controls).
     • Add prometheus metrics endpoint for exposing instance health and performance data.
     • Add multi-object table filters to refine search results across frameworks, controls, and assets.

     2 details in Everything

129. v2.7.9 Jul 29, 2025 · release notes

     CISO Assistant v2.7.9 adds an observation field to user objects and a new Moroccan cybersecurity risk matrix.

     └──▷ GET THIS VERSION

     copy

     $ git clone --branch v2.7.9 https://github.com/intuitem/ciso-assistant-community.git
     # already have the repo? check out this version:
     $ git checkout v2.7.9

     • Adds observation field to User objects for capturing additional context on team members
     • Adds the Moroccan Law 05-20 risk matrix as a new built-in framework option

     2 details in Everything

130. v2.7.8 Jul 28, 2025 · release notes

     CISO Assistant v2.7.8 adds EBIOS RMEBIOS RMA French risk-management method published by ANSSI for analysing cyber threats and selecting countermeasures; tools use it to structure risk assessments that satisfy French and EU regulatory expectations. context menu selection, risk appetite support, xlsx risk action plan export, and dual score propagation.

     └──▷ GET THIS VERSION

     copy

     $ git clone --branch v2.7.8 https://github.com/intuitem/ciso-assistant-community.git
     # already have the repo? check out this version:
     $ git checkout v2.7.8

     └──▷ HOW TO FIND IT
     Generate a spreadsheet of planned mitigation actions for stakeholder review or integration with other planning tools.
     📍In the Risk Management view, click Export and select Risk Action Plan (XLSX) as the format.
     • Add EBIOS RM selection is now available via the context menu for easier framework association
     • Added support for the risk appetite concept to model organizational tolerance levels
     • Parent nodes now retain dual scores when propagated (excluding root nodes) for more granular risk visibility

     3 details in Everything

131. v2.7.7 Jul 21, 2025 · release notes

     CISO Assistant v2.7.7 adds NIST SP 800-82 Annex F, audit creation dates, and incident time pre-fill.

     └──▷ GET THIS VERSION

     copy

     $ git clone --branch v2.7.7 https://github.com/intuitem/ciso-assistant-community.git
     # already have the repo? check out this version:
     $ git checkout v2.7.7

     • Adds NIST SP 800-82 Annex F as a new framework available for audits.
     • Presets incident reporting time to now automatically when opening the incident reporting form.
     • Includes creation date on audit records.
     • Updates prepare_framework_v2.py tool to be more user-friendly for framework preparation workflows.

     4 details in Everything

132. v2.7.3 Jul 15, 2025 · release notes

     CISO Assistant v2.7.3 adds default assignee for perimeters

     └──▷ GET THIS VERSION

     copy

     $ git clone --branch v2.7.3 https://github.com/intuitem/ciso-assistant-community.git
     # already have the repo? check out this version:
     $ git checkout v2.7.3

133. v2.7.2 Jul 12, 2025 · release notes

     Adds inherent risk management, assets for feared events, EBIOS RMEBIOS RMA French risk-management method published by ANSSI for analysing cyber threats and selecting countermeasures; tools use it to structure risk assessments that satisfy French and EU regulatory expectations. graph support, and a YAML-to-Excel converter

     └──▷ GET THIS VERSION

     copy

     $ git clone --branch v2.7.2 https://github.com/intuitem/ciso-assistant-community.git
     # already have the repo? check out this version:
     $ git checkout v2.7.2

     └──▷ TRY IT
     Convert a framework definition from YAML to Excel format.
     copy

     $ python convert_framework_yaml_to_excel.py <input_file.yaml> <output_file.xlsx>

     • manage_inherent_risk allows managing inherent risk levels.
     • convert_framework_yaml_to_excel.py provides a new tool to convert framework definitions from YAML to Excel format.

     2 details in Everything

134. v2.7.0 Jul 5, 2025 · release notes

     CISO Assistant v2.7.0 adds OIDCOIDCOpenID Connect, a sign-in protocol built on OAuth 2.0. An application uses identity information from a trusted provider instead of maintaining a separate password for each user. authentication, audit campaigns, mapping tools, and new framework updates.

     └──▷ GET THIS VERSION

     copy

     $ git clone --branch v2.7.0 https://github.com/intuitem/ciso-assistant-community.git
     # already have the repo? check out this version:
     $ git checkout v2.7.0

     • Adds OIDC authentication support for user login
     • Enables management of audit campaigns via the UI
     • Adds prepare_mapping_v2.py and updated prepare_framework_v2.py CLI tools for library preparation
     • Adds Adobe CCF v5 mappings to the built-in libraries
     • Adds ISO 27001:2022 framework in Spanish (ES)

     +1 more show less

     • Updates table mode with minor adjustments and pagination persistence

     6 details in Everything

135. v2.6.5 Jul 2, 2025 · release notes

     CISO Assistant v2.6.5 adds Greek UI translation, NIS2NIS2EU directive that expands mandatory cybersecurity requirements to more sectors and member states than its predecessor, giving cyber tools a compliance framework to map controls and reporting obligations against. framework mappings, and raises the default file upload limit to 25 MB.

     └──▷ GET THIS VERSION

     copy

     $ git clone --branch v2.6.5 https://github.com/intuitem/ciso-assistant-community.git
     # already have the repo? check out this version:
     $ git checkout v2.6.5

     • Increases default maximum file upload size to 25 MB.
     • Adds Greek language translation to the UI.
     • Adds NIS2 framework mappings to the library.

     3 details in Everything

136. v2.6.3 Jun 30, 2025 · release notes

     Allows editing the SR/OV couple of strategic scenarios in CISO Assistant v2.6.3

     └──▷ GET THIS VERSION

     copy

     $ git clone --branch v2.6.3 https://github.com/intuitem/ciso-assistant-community.git
     # already have the repo? check out this version:
     $ git checkout v2.6.3

     └──▷ HOW TO FIND IT
     Update the strategic risk or organizational value linked to a scenario via the UI.
     📍In the Strategic Scenarios view, select a scenario and use the edit form to modify the SR/OV couple.
     • Edit the SR (Strategic Risk) / OV (Organizational Value) pair for existing strategic scenarios

     1 detail in Everything

137. v2.6.2 Jun 28, 2025 · release notes

     CISO Assistant v2.6.2 adds Cisco CCF v3.0 mappings, keeps implementation scores on audit Excel export, and displays user groups in the users list.

     └──▷ GET THIS VERSION

     copy

     $ git clone --branch v2.6.2 https://github.com/intuitem/ciso-assistant-community.git
     # already have the repo? check out this version:
     $ git checkout v2.6.2

     • Adds Cisco CCF v3.0 mappings for framework coverage
     • Keeps both implementation and documentation scores on audit Excel export

     2 details in Everything

138. v2.6.1 Jun 25, 2025 · release notes

     Adds Ebios RM badge for risk assessments in CISO Assistant v2.6.1

     └──▷ GET THIS VERSION

     copy

     $ git clone --branch v2.6.1 https://github.com/intuitem/ciso-assistant-community.git
     # already have the repo? check out this version:
     $ git checkout v2.6.1

     • Risks created from Ebios RM studies now display a dedicated ebios-rm badge.

     1 detail in Everything

139. v2.6.0 Jun 24, 2025 · release notes

     CISO Assistant v2.6.0 adds Post-Quantum CryptographyPost-Quantum CryptographyCryptography designed to stay secure against a large quantum computer, which could break today's RSA and elliptic-curve keys. NIST standardized the first algorithms in 2024 as ML-KEM, ML-DSA and SLH-DSA. framework support and a new API endpoint to update requirements.

     └──▷ GET THIS VERSION

     copy

     $ git clone --branch v2.6.0 https://github.com/intuitem/ciso-assistant-community.git
     # already have the repo? check out this version:
     $ git checkout v2.6.0

     • Adds the Post-Quantum Cryptography (PQC) Migration Roadmap (May 2025) as a new supported cyber tooling framework
     • Adds a new API endpoint to update requirements, implemented via Prefect integration

     2 details in Everything

140. v2.5.11 Jun 14, 2025 · release notes

     CISO Assistant v2.5.11 adds NIST CSFNIST CSFThe NIST Cybersecurity Framework, a set of outcomes for managing cybersecurity risk. Organizations use it to describe their current posture, priorities and improvement goals. v2↔ISO 27001:2022 mapping, NIST SP-800-66 Rev2 mappings, FINMA 2023/01 framework, and evidence attachments in follow-ups.

     └──▷ GET THIS VERSION

     copy

     $ git clone --branch v2.5.11 https://github.com/intuitem/ciso-assistant-community.git
     # already have the repo? check out this version:
     $ git checkout v2.5.11

     • Adds NIST CSFCSFThe NIST Cybersecurity Framework, a set of outcomes for managing cybersecurity risk. Organizations use it to describe their current posture, priorities and improvement goals. v2 to ISO 27001:2022 cross-framework mapping to the library.
     • Adds NIST SP-800-66 Rev2 mappings and mapping tools to the library.
     • Adds FINMA 2023/01 framework and framework tool to the library.
     • Supports attaching evidence directly within follow-up items.

     4 details in Everything

141. v2.5.10 Jun 8, 2025 · release notes

     CISO Assistant v2.5.10 adds Cisco CCF v3.0 support, global evidence in compliance assessments, and OWASPOWASPA nonprofit foundation that publishes open standards, guides, and ranked vulnerability lists—most famously the OWASP Top 10—giving cyber tools a vendor-neutral benchmark to test or report against. ASVS 5.0.0.

     └──▷ GET THIS VERSION

     copy

     $ git clone --branch v2.5.10 https://github.com/intuitem/ciso-assistant-community.git
     # already have the repo? check out this version:
     $ git checkout v2.5.10

     • Adds Cisco CCF v3.0 Framework + Framework Tool for new compliance coverage

     1 detail in Everything

142. v2.5.9 Jun 1, 2025 · release notes

     CISO Assistant v2.5.9 adds PATPATA personal access token, a credential used by scripts and integrations instead of a user's password. Its permissions and expiry depend on the service issuing it. authentication for MCPMCPModel Context Protocol, a standard for connecting AI applications to external tools and data sources. A compatible server exposes capabilities an assistant can use through a common interface. server and multi-set requirement mapping.

     └──▷ GET THIS VERSION

     copy

     $ git clone --branch v2.5.9 https://github.com/intuitem/ciso-assistant-community.git
     # already have the repo? check out this version:
     $ git checkout v2.5.9

     • MCP server authentication switches to Personal Access Token (PAT) based validation
     • Handle multiple requirement mapping sets within libraries simultaneously
     • New mapping suggestion feature to assist with library mappings

     3 details in Everything

143. v2.5.8 May 23, 2025 · release notes

     CISO Assistant v2.5.8 introduces Personal Access Tokens, Enterprise audit logs UI, and a Data Wizard.

     └──▷ GET THIS VERSION

     copy

     $ git clone --branch v2.5.8 https://github.com/intuitem/ciso-assistant-community.git
     # already have the repo? check out this version:
     $ git checkout v2.5.8

     └──▷ HOW TO FIND IT
     Navigate the UI to access the new audit logs page for tracking user activity.
     📍In the Enterprise Edition console, go to Administration › Audit Logs.
     • Personal access tokensPersonal access tokensA personal access token, a credential used by scripts and integrations instead of a user's password. Its permissions and expiry depend on the service issuing it. (PATsPATsA personal access token, a credential used by scripts and integrations instead of a user's password. Its permissions and expiry depend on the service issuing it.) allow authenticating to the API without a user session.
     • Audit logs UI in the Enterprise Edition provides visibility into system actions.
     • Data wizard in Enterprise Edition simplifies initial data population.
     • NIST SP-800-66 Rev.2 framework structure is updated for compliance mapping.

     4 details in Everything

144. v2.5.7 May 22, 2025 · release notes

     Adds ETA/due dates to findings, typical evidence in table mode, and external links to incidents

     └──▷ GET THIS VERSION

     copy

     $ git clone --branch v2.5.7 https://github.com/intuitem/ciso-assistant-community.git
     # already have the repo? check out this version:
     $ git checkout v2.5.7

     • Includes eta and due date fields on findings to track remediation timelines
     • Displays typical evidence as additional information when viewing controls in table mode
     • Enables adding an external link to an incident record

     3 details in Everything

145. v2.5.6 May 21, 2025 · release notes

     Adds reporting timestamp and detection channel fields to incidents; improves BunkerWeb integration.

     └──▷ GET THIS VERSION

     copy

     $ git clone --branch v2.5.6 https://github.com/intuitem/ciso-assistant-community.git
     # already have the repo? check out this version:
     $ git checkout v2.5.6

     └──▷ HOW TO FIND IT
     Configure BunkerWeb deployment settings via the UI.
     📍Navigate to Deployment › BunkerWeb in the settings panel.
     • Adds reporting_timestamp and detection_channel fields to incident records
     • Improve bunkerweb integration

     2 details in Everything

146. v2.5.5 May 17, 2025 · release notes

     CISO Assistant v2.5.5 adds ANSSI framework pack and persistent filter UI state

     └──▷ GET THIS VERSION

     copy

     $ git clone --branch v2.5.5 https://github.com/intuitem/ciso-assistant-community.git
     # already have the repo? check out this version:
     $ git checkout v2.5.5

     └──▷ HOW TO FIND IT
     Include ANSSI guidelines in your compliance scope for a new assessment
     📍In the Frameworks section, select ANSSI from the available packs to add it to your organization's library
     Keep complex filter settings (e.g., status or owner) when navigating pagination in audits
     📍Apply filters on an audit list view; refresh the page to confirm your selections remain active without re-entering them
     • packs/annsi: new framework pack for ANSSI standards
     • UI filters now persist their state across page loads

     2 details in Everything

147. v2.5.4 May 13, 2025 · release notes

     CISO Assistant v2.5.4 adds incidents table filtering, a 5-level security objective scale, and new Excel export formatting.

     └──▷ GET THIS VERSION

     copy

     $ git clone --branch v2.5.4 https://github.com/intuitem/ciso-assistant-community.git
     # already have the repo? check out this version:
     $ git checkout v2.5.4

     • Adds filter capabilities to the incidents table for targeted viewing
     • Introduces a 5-level scale for defining security objectives
     • Enables a new Excel format for data exports via updated lib tooling

     3 details in Everything

148. v2.5.3 May 12, 2025 · release notes

     CISO Assistant v2.5.3 adds asset class support and qualification on BIA thresholds

     └──▷ GET THIS VERSION

     copy

     $ git clone --branch v2.5.3 https://github.com/intuitem/ciso-assistant-community.git
     # already have the repo? check out this version:
     $ git checkout v2.5.3

     • Adds support for asset classes to organize and categorize assets within the platform
     • Enables qualification (tags/labels) on Business Impact Analysis (BIA) thresholds to better contextualize risk scores

     2 details in Everything

149. v2.5.2 May 10, 2025 · release notes

     CISO Assistant v2.5.2 adds users list import via the data wizard

     └──▷ GET THIS VERSION

     copy

     $ git clone --branch v2.5.2 https://github.com/intuitem/ciso-assistant-community.git
     # already have the repo? check out this version:
     $ git checkout v2.5.2

     └──▷ HOW TO FIND IT
     Bulk upload a CSV or Excel file containing user data (username, email, role) to provision accounts in CISO Assistant.
     📍In the web UI, go to Data › Data Wizard and select Users as the entity type to import
150. v2.5.0 May 9, 2025 · release notes

     CISO Assistant v2.5.0 adds feature flags management, business impact analysis, and Bunkerweb deployment support

     └──▷ GET THIS VERSION

     copy

     $ git clone --branch v2.5.0 https://github.com/intuitem/ciso-assistant-community.git
     # already have the repo? check out this version:
     $ git checkout v2.5.0

     • feature flags management for runtime configuration of capabilities
     • business impact analysis (bia) module to evaluate organizational risk from disruptions
     • Automatic disabling of local password authentication when SSOSSOSingle sign-on, using one identity provider to sign in to multiple applications. It reduces separate passwords and centralizes account and access management. is enabled
     • Context menu in the UI for quicker access to actions without navigating main menus
     • Support for Bunkerweb as a deployment proxy alongside existing Caddy and Traefik options

     5 details in Everything

151. v2.4.6 May 3, 2025 · release notes

     CISO Assistant v2.4.6 adds pivot capability to risk matrices and syncs requirement assessment status.

     └──▷ GET THIS VERSION

     copy

     $ git clone --branch v2.4.6 https://github.com/intuitem/ciso-assistant-community.git
     # already have the repo? check out this version:
     $ git checkout v2.4.6

     • Adds pivot functionality to risk matrices for dynamic data analysis
     • Adds automatic sync between requirement assessment and applied controls status

     2 details in Everything

152. v2.4.5 Apr 30, 2025 · release notes

     CISO Assistant v2.4.5 adds IGI 1300 framework support and task date management

     └──▷ GET THIS VERSION

     copy

     $ git clone --branch v2.4.5 https://github.com/intuitem/ciso-assistant-community.git
     # already have the repo? check out this version:
     $ git checkout v2.4.5

     • Adds IGI 1300 to supported frameworks, enabling compliance assessments against this standard

     1 detail in Everything

153. v2.4.4 Apr 26, 2025 · release notes

     CISO Assistant v2.4.4 adds ref_id search support, Hungarian translation, and new threat/control models.

     └──▷ GET THIS VERSION

     copy

     $ git clone --branch v2.4.4 https://github.com/intuitem/ciso-assistant-community.git
     # already have the repo? check out this version:
     $ git checkout v2.4.4

     └──▷ HOW TO FIND IT
     Quickly locate a specific control or framework section by its ID rather than scanning through lists.
     📍In the top navigation search bar, type ref_id:FR-C41 to filter results directly.
     • Enable ref_id lookup in the search bar to find frameworks or controls by their unique identifier
     • Add Hungarian as a selectable language option in the application's localization settings
     • Include OWASPOWASPA nonprofit foundation that publishes open standards, guides, and ranked vulnerability lists—most famously the OWASP Top 10—giving cyber tools a vendor-neutral benchmark to test or report against. Multi-Agentic System threats within the built-in threat library for new assessment coverage
     • Add PSSIE du Benin model support to the framework catalog for regional compliance assessments
     • Enhance Ebios RM graph visualization with improved rendering and navigation capabilities

     5 details in Everything

154. v2.4.3 Apr 24, 2025 · release notes

     CISO Assistant v2.4.3 adds Kafka messaging, S3 attachment storage, AI test generation, and token timeouts

     └──▷ GET THIS VERSION

     copy

     $ git clone --branch v2.4.3 https://github.com/intuitem/ciso-assistant-community.git
     # already have the repo? check out this version:
     $ git checkout v2.4.3

     • Adds feat: kafka message dispatcher for event-driven architecture via Kafka
     • Enables storing attachments in Amazon S3 with the new S3 deployment feature
     • Introduces AI-powered test generator capabilities for automated security testing
     • Supports absolute timeout configuration for access tokensaccess tokensA credential that authorizes a client to use a service or API. It usually has limited permissions and a lifetime; anyone holding it may be able to use those permissions. to improve session security

     4 details in Everything

155. v2.4.1 Apr 22, 2025 · release notes

     CISO Assistant v2.4.1 adds Italian Cybersecurity Framework support, domain analytics, and circle packing for audit threat visualization.

     └──▷ GET THIS VERSION

     copy

     $ git clone --branch v2.4.1 https://github.com/intuitem/ciso-assistant-community.git
     # already have the repo? check out this version:
     $ git checkout v2.4.1

     • Adds the Italian Cybersecurity Framework as a supported compliance framework.
     • Adds domain analytics view for cross-domain risk and compliance insights.
     • Uses circle packing visualization for audit potential threats and improves the Tree chart.

     3 details in Everything

156. v2.4.0 Apr 16, 2025 · release notes

     CISO Assistant v2.4.0 adds periodic task scheduling, Helm deployment annotations, Annex A controls for SoA, and applied controls import support

     └──▷ GET THIS VERSION

     copy

     $ git clone --branch v2.4.0 https://github.com/intuitem/ciso-assistant-community.git
     # already have the repo? check out this version:
     $ git checkout v2.4.0

     • Adds tasks management with periodic schedule for automated recurring workflows
     • Adds annotations option to deployments and pods via Helm chart for helm releases
     • Includes annex A controls in the Statement of Applicability (SoA) export
     • Supports applied controls category during data import

     4 details in Everything

157. v2.3.8 Apr 15, 2025 · release notes

     Adds visual analysis of EBIOS RMEBIOS RMA French risk-management method published by ANSSI for analysing cyber threats and selecting countermeasures; tools use it to structure risk assessments that satisfy French and EU regulatory expectations. in ebios study page

     └──▷ GET THIS VERSION

     copy

     $ git clone --branch v2.3.8 https://github.com/intuitem/ciso-assistant-community.git
     # already have the repo? check out this version:
     $ git checkout v2.3.8

     └──▷ HOW TO FIND IT
     Use the new visual interface to review and validate risk assessments during an EBIOS RM study.
     📍Navigate to the ebios study page in the CISO Assistant UI to view the risk analysis visuals.
158. v2.3.7 Apr 14, 2025 · release notes

     CISO Assistant v2.3.7 adds action plan CSV export, applied control impact field, and MCPMCPModel Context Protocol, a standard for connecting AI applications to external tools and data sources. A compatible server exposes capabilities an assistant can use through a common interface. POC integration

     └──▷ GET THIS VERSION

     copy

     $ git clone --branch v2.3.7 https://github.com/intuitem/ciso-assistant-community.git
     # already have the repo? check out this version:
     $ git checkout v2.3.7

     └──▷ HOW TO FIND IT
     Export your audit action items to a CSV file for external review.
     📍In the Audit view, locate the Action Plan section and select Export to CSV.
     Add risk impact data to a newly created applied control during an Ebios RM study.
     📍In the Stakeholders or Applied Controls view, edit the control and populate the impact field.
     Begin a strategic scenario analysis by selecting an asset directly from the Ebios study interface.
     📍Navigate to the Ebios Study page, click Select Asset, and choose from the available list.
     • MCP implementation POC enables Model Context ProtocolModel Context ProtocolModel Context Protocol, a standard for connecting AI applications to external tools and data sources. A compatible server exposes capabilities an assistant can use through a common interface. integration for external tool interaction
     • Audit's action plan can now be exported to csv format via the UI
     • Applied controls now support an impact field for risk scoring refinement
     • Added swift cscf v2025 outline to supported frameworks in the library
     • Ebios RM activities allow pre-selection with switch selected to true behavior

     +3 more show less

     • Strategic scenarios support reuse of ro/to (Responsible Officer/To Be) couples
     • Stakeholders detail view displays related applied controls
     • Asset selection is now available directly within the ebios study page

     8 details in Everything

159. v2.3.5 Apr 6, 2025 · release notes

     v2.3.5 adds labels to evidences for better categorization.

     └──▷ GET THIS VERSION

     copy

     $ git clone --branch v2.3.5 https://github.com/intuitem/ciso-assistant-community.git
     # already have the repo? check out this version:
     $ git checkout v2.3.5

     • Adds labels to evidences.

     1 detail in Everything

160. v2.3.4 Apr 6, 2025 · release notes

     Adds ANSSI recommandations-relatives-ladministration-securisee-des-si, APRA CPS-234, and cps-234 frameworks to CISO Assistant

     └──▷ GET THIS VERSION

     copy

     $ git clone --branch v2.3.4 https://github.com/intuitem/ciso-assistant-community.git
     # already have the repo? check out this version:
     $ git checkout v2.3.4

     • Adds recommandations-relatives-ladministration-securisee-des-si (ANSSI) standard to the library for mapping controls and evidence
     • Adds APRA CPS-234 framework to the library for regulatory compliance management
     • Adds cps-230 framework to the library for regulatory compliance management

     3 details in Everything

161. v2.3.1 Mar 30, 2025 · release notes

     CISO Assistant v2.3.1 adds a new Quick Start flow for Edition Enterprise

     └──▷ GET THIS VERSION

     copy

     $ git clone --branch v2.3.1 https://github.com/intuitem/ciso-assistant-community.git
     # already have the repo? check out this version:
     $ git checkout v2.3.1

     └──▷ HOW TO FIND IT
     New users can access the guided onboarding flow for Edition Enterprise.
     📍In the console, look for the new Quick Start option in the EE dashboard.
     • feat: add quick start to EE

     1 detail in Everything

162. v2.3.0 Mar 29, 2025 · release notes

     CISO Assistant v2.3.0 adds major incident management, PCI DSSPCI DSSThe Payment Card Industry Data Security Standard, security requirements for protecting payment account data. It covers organizations that store, process or transmit that data and relevant service providers. FR referentiel, GDPRGDPREU regulation enacted in 2018 that governs how organizations collect, store, and process personal data of EU residents, giving cyber tools legal obligations around data handling and breach notification. Processings register, and asset linkage

     └──▷ GET THIS VERSION

     copy

     $ git clone --branch v2.3.0 https://github.com/intuitem/ciso-assistant-community.git
     # already have the repo? check out this version:
     $ git checkout v2.3.0

     • Adds incident management timeline and ux improvements for tracking cyber incidents over time
     • Adds support for the PCI DSS FR referential in compliance assessments
     • Introduces the GDPR Processings register for mapping processing activities
     • Enables linking solutions to assets within the tool's data model
     • Enables linking assets to applied controls for better dependency mapping

     +1 more show less

     • Adds a quickstart button to accelerate initial setup workflows

     6 details in Everything

163. v2.2.13 Mar 24, 2025 · release notes

     CISO Assistant v2.2.13 adds Google SAIF framework, findings follow-up data visualisation, and labels for threats and controls.

     └──▷ GET THIS VERSION

     copy

     $ git clone --branch v2.2.13 https://github.com/intuitem/ciso-assistant-community.git
     # already have the repo? check out this version:
     $ git checkout v2.2.13

     • Adds the Google SAIF framework to the library for use in assessments.
     • Adds label support for threats, reference controls, and applied controls.

     2 details in Everything

164. v2.2.12 Mar 22, 2025 · release notes

     New TPRMTPRMAssessing and monitoring the security risk an organization takes on through its vendors, suppliers and service providers. It covers the questionnaires, evidence and continuous checks behind letting a third party hold your data. dashboard, filtering assets and findings by labels, CIS KubernetesCIS KubernetesHardening benchmarks published by the Center for Internet Security for Kubernetes clusters, giving cyber tools a concrete, versioned checklist of configuration checks to run and report against. benchmark, Danish locale

     └──▷ GET THIS VERSION

     copy

     $ git clone --branch v2.2.12 https://github.com/intuitem/ciso-assistant-community.git
     # already have the repo? check out this version:
     $ git checkout v2.2.12

     └──▷ TRY IT
     Enable TLS for the Helm ingress controller when deploying CISO Assistant.
     copy

     $ helm install ciso-assistant intuitem/ciso-assistant --set ingress.tls.enabled=true

     • Adds inherited and own related fields to the applied control detail view for better provenanceprovenanceEvidence recording where a software artifact came from and how it was built, including its source and build process. It helps a consumer check that the artifact matches a trusted build. tracking
     • Adds ingress.tls.enabled Helm chart flag to explicitly enable TLS ingress configuration
     • Adds filtering against labels on assets and findings, allowing queries like asset.label:production
     • Adds new TPRM dashboard under the third-party risk management module
     • Adds CIS benchmark for Kubernetes hardening to the library of controls

     +1 more show less

     • Adds support for Danish language localization (da_DK)

     6 details in Everything

     └──▷ BREAKING ON UPGRADE

     • !Assets links in the UI are renamed to reflect supported by terminology, which may require updates to bookmarks or automated scrapers targeting those specific anchors.
165. v2.2.10 Mar 17, 2025 · release notes

     v2.2.10 simplifies the links view on the assets graph in the UI.

     └──▷ GET THIS VERSION

     copy

     $ git clone --branch v2.2.10 https://github.com/intuitem/ciso-assistant-community.git
     # already have the repo? check out this version:
     $ git checkout v2.2.10

166. v2.2.9 Mar 15, 2025 · release notes

     CISO Assistant v2.2.9 adds perimeters and findings batch import support

     └──▷ GET THIS VERSION

     copy

     $ git clone --branch v2.2.9 https://github.com/intuitem/ciso-assistant-community.git
     # already have the repo? check out this version:
     $ git checkout v2.2.9

167. v2.2.8 Mar 13, 2025 · release notes

     CISO Assistant v2.2.8 adds requirement inspection and a backend auditlog API; no breaking changes

     └──▷ GET THIS VERSION

     copy

     $ git clone --branch v2.2.8 https://github.com/intuitem/ciso-assistant-community.git
     # already have the repo? check out this version:
     $ git checkout v2.2.8

     • inspect feature: allows inspecting individual requirements within the application.
     • Adds a GET /api/auditlog/ endpoint to retrieve audit logs from the backend.

     2 details in Everything

168. v2.2.6 Mar 7, 2025 · release notes

     CISO Assistant v2.2.6 adds SSOSSOSingle sign-on, using one identity provider to sign in to multiple applications. It reduces separate passwords and centralizes account and access management. email attribute mapping fallback

     └──▷ GET THIS VERSION

     copy

     $ git clone --branch v2.2.6 https://github.com/intuitem/ciso-assistant-community.git
     # already have the repo? check out this version:
     $ git checkout v2.2.6

     • Adds sso fallback to use the email attribute when nameID does not contain an email address.

     1 detail in Everything

169. v2.2.5 Mar 5, 2025 · release notes

     Adds canary releases and parametric Gunicorn binding port to CISO Assistant v2.2.5.

     └──▷ GET THIS VERSION

     copy

     $ git clone --branch v2.2.5 https://github.com/intuitem/ciso-assistant-community.git
     # already have the repo? check out this version:
     $ git checkout v2.2.5

     • gunicorn binding port is now parametric via configuration or environment variable

     1 detail in Everything

170. v2.2.4 Feb 28, 2025 · release notes

     Adds audit asset management and requirement linking in action plans

     └──▷ GET THIS VERSION

     copy

     $ git clone --branch v2.2.4 https://github.com/intuitem/ciso-assistant-community.git
     # already have the repo? check out this version:
     $ git checkout v2.2.4

     └──▷ HOW TO FIND IT
     Attach an infrastructure asset to a specific audit scope via the UI
     📍In the Audit view, create or edit an audit and use the Assets section to add existing assets
     Link a compliance requirement to a remediation task in an action plan
     📍In the Action Plan view, edit an item and use the Requirements field to select linked requirements
     View the hierarchy of assets under a parent entity during an audit
     📍Navigate to Assets › Details for a parent asset and scroll to the Children section
     • Adds ability to attach assets to audits, enabling asset-based audit planning
     • Enables linking specific requirements directly to action plan items for traceability
     • Shows child assets within the detailed view of a parent asset

     3 details in Everything

171. v2.2.3 Feb 27, 2025 · release notes

     CISO Assistant v2.2.3 adds Docker compose config builder, evidence selection in table mode, findings implementation, and full controls list on word reports

     └──▷ GET THIS VERSION

     copy

     $ git clone --branch v2.2.3 https://github.com/intuitem/ciso-assistant-community.git
     # already have the repo? check out this version:
     $ git checkout v2.2.3

     • Adds config builder for Docker Compose to generate service configuration files.
     • Enables evidence selection in table mode for bulk handling of assessment artifacts.
     • Implements findings as a new capability within the platform.
     • Adds full controls list support when exporting reports in Word format.

     4 details in Everything

172. v2.2.2 Feb 22, 2025 · release notes

     CISO Assistant v2.2.2 adds asset ref_ids, compliance status filtering, deprecation tasks, and Helm external secrets support

     └──▷ GET THIS VERSION

     copy

     $ git clone --branch v2.2.2 https://github.com/intuitem/ciso-assistant-community.git
     # already have the repo? check out this version:
     $ git checkout v2.2.2

     • Adds ref_id field to assets for unique identification
     • Enables filtering by status/result in the compliance assessment page
     • Introduces a deprecation task with common send notification mail capability
     • Allows Helm chart secrets to be provided via external secret
     • Parses and supports EBIOS RMEBIOS RMA French risk-management method published by ANSSI for analysing cyber threats and selecting countermeasures; tools use it to structure risk assessments that satisfy French and EU regulatory expectations. v3.1 framework labels

     5 details in Everything

173. v2.2.0 Feb 14, 2025 · release notes

     New security exceptions model and guided first-login modal

     └──▷ GET THIS VERSION

     copy

     $ git clone --branch v2.2.0 https://github.com/intuitem/ciso-assistant-community.git
     # already have the repo? check out this version:
     $ git checkout v2.2.0

     • security_exceptions feature adds the ability to manage security exceptions within the tool

     1 detail in Everything

174. v2.1.3 Feb 3, 2025 · release notes

     CISO Assistant v2.1.3 adds risk acceptance drafts and applied controls progress tracking

     └──▷ GET THIS VERSION

     copy

     $ git clone --branch v2.1.3 https://github.com/intuitem/ciso-assistant-community.git
     # already have the repo? check out this version:
     $ git checkout v2.1.3

     • Adds the ability to create a draft for risk acceptances
     • Adds a progress field on applied controls

     2 details in Everything

175. v2.1.2 Jan 29, 2025 · release notes

     Adds BSI elementary threats library, risk scenario filtering, and extra environment variables for CISO Assistant v2.1.2

     └──▷ GET THIS VERSION

     copy

     $ git clone --branch v2.1.2 https://github.com/intuitem/ciso-assistant-community.git
     # already have the repo? check out this version:
     $ git checkout v2.1.2

     • feat: expose extra env variables enables flexible infrastructure tuning via new environment variables.
     • feat: add a filter on current and residual risk levels on risk scenarios allows filtering risk scenarios by risk level.
     • feat(lib): add library for BSI elementary threats (german and english) adds support for the BSI elementary threats framework in both German and English.

     3 details in Everything

176. v2.1.0 Jan 27, 2025 · release notes

     Adds task runner with huey and new settings for mail notifications

     └──▷ GET THIS VERSION

     copy

     $ git clone --branch v2.1.0 https://github.com/intuitem/ciso-assistant-community.git
     # already have the repo? check out this version:
     $ git checkout v2.1.0

     • Adds task_runner with huey for asynchronous tasks management requiring a new container
     • Adds extra settings to enable mail notifications and matrix aggregation

     2 details in Everything

177. v2.0.12 Jan 24, 2025 · release notes

     CISO Assistant v2.0.12 adds mitre d3fend data, parametric ebios radar, and domain import lib loading

     └──▷ GET THIS VERSION

     copy

     $ git clone --branch v2.0.12 https://github.com/intuitem/ciso-assistant-community.git
     # already have the repo? check out this version:
     $ git checkout v2.0.12

     • feat(lib): mitre d3fend integration available
     • Parametric ebios radar support added via feat: parametric ebios radar
     • Automatic loading of required libraries during domain import enabled by feat: allow automatic loading of required libraries when performing a domain import

     3 details in Everything

178. v2.0.10 Jan 22, 2025 · release notes

     CISO Assistant v2.0.10 adds CSV export for assets and Helm chart support

     └──▷ GET THIS VERSION

     copy

     $ git clone --branch v2.0.10 https://github.com/intuitem/ciso-assistant-community.git
     # already have the repo? check out this version:
     $ git checkout v2.0.10

     • Adds a new production-ready Helm chart for Kubernetes deployment via pull #1224
     • Adds CSV export capability for assets to pull #1392
     • Adds warning for credentials when importing a backup in pull #1387
     • Adds cyclic check on parent_folder to prevent circular references in pull #1388
     • Adds ability to filter loaded libraries by updatable status and displays their count in pull #1396

     5 details in Everything

179. v2.0.9 Jan 20, 2025 · release notes

     CISO Assistant v2.0.9 adds is_third_party column to user list and maturity scoring/translations to Word export.

     └──▷ GET THIS VERSION

     copy

     $ git clone --branch v2.0.9 https://github.com/intuitem/ciso-assistant-community.git
     # already have the repo? check out this version:
     $ git checkout v2.0.9

     └──▷ HOW TO FIND IT
     Quickly filter or identify external partners/vendors within the user management interface.
     📍Navigate to User Management in the UI; the new is_third_party column indicates vendor status.
     Generate an assessment report with maturity levels and proper language handling.
     📍In Export settings, select Word format; the output now includes maturity scores and respects i18n/fallback rules.
     • Adds is_third_party column in user list to distinguish third-party vendors from internal users
     • Adds maturity scoring to the Word export, including support for managed internationalization (i18n) with English fallback

     2 details in Everything

180. v2.0.8 Jan 18, 2025 · release notes

     Adds domain export/import, documentation maturity assessments, and a guided tour UI flow

     └──▷ GET THIS VERSION

     copy

     $ git clone --branch v2.0.8 https://github.com/intuitem/ciso-assistant-community.git
     # already have the repo? check out this version:
     $ git checkout v2.0.8

     • Adds feat: export/import domain to move full domains with objects in pro version
     • Adds support for documentation maturity assessment in audit configuration
     • Adds a new guided tour feature accessible from the more button near the user email

     3 details in Everything

     └──▷ BREAKING ON UPGRADE

     • !The Business Value field is removed from Assets; information is now only available in the detail view.
181. v2.0.7 Jan 14, 2025 · release notes

     CISO Assistant v2.0.7 adds SOC2SOC2An auditing framework from the American Institute of CPAs that certifies a service organization's controls around security, availability, and data handling, giving buyers assurance that a vendor meets baseline trust criteria. 2022 library support, a new documentation score metric, and fixes lang choice persistence

     └──▷ GET THIS VERSION

     copy

     $ git clone --branch v2.0.7 https://github.com/intuitem/ciso-assistant-community.git
     # already have the repo? check out this version:
     $ git checkout v2.0.7

     • Adds soc2 rev 2022 as a separate library for compliance assessments
     • Introduces a new documentation score metric for control evaluation coverage

     2 details in Everything

182. v2.0.6 Jan 11, 2025 · release notes

     CISO Assistant v2.0.6 adds score column to table mode, library publication dates, and question-only requirements

     └──▷ GET THIS VERSION

     copy

     $ git clone --branch v2.0.6 https://github.com/intuitem/ciso-assistant-community.git
     # already have the repo? check out this version:
     $ git checkout v2.0.6

     └──▷ HOW TO FIND IT
     View risk scores directly in the assessment table instead of hovering for details.
     📍In the Console, navigate to Assessments › [Your Assessment] and switch view mode to Table to see the new Score column.
     Check when a specific compliance library was officially published.
     📍In the Console, go to Libraries and select a framework; the publication date is now displayed in the library details header.
     Create requirements that are just yes/no questions without needing control mappings.
     📍In the Console, go to Requirements › New Requirement and define it as a question-only type during creation.
     • Adds score column to assessments rendered in table mode
     • Displays the date of publication for a library in the UI
     • Supports requirements that consist solely of questions (no mapping needed)

     3 details in Everything

183. v2.0.4 Jan 4, 2025 · release notes

     CISO Assistant v2.0.4 adds required stakeholder category field and new OWASPOWASPA nonprofit foundation that publishes open standards, guides, and ranked vulnerability lists—most famously the OWASP Top 10—giving cyber tools a vendor-neutral benchmark to test or report against. LLMLLMA large language model, a neural network trained on large amounts of text to recognize patterns and generate language. Applications use it for tasks such as answering, summarizing and writing code. governance checklist

     └──▷ GET THIS VERSION

     copy

     $ git clone --branch v2.0.4 https://github.com/intuitem/ciso-assistant-community.git
     # already have the repo? check out this version:
     $ git checkout v2.0.4

     • New LLM Governance framework section with OWASP's checklist for AI application security.

     1 detail in Everything

     └──▷ BREAKING ON UPGRADE

     • !Creating or editing a stakeholder without setting stakeholder.category will fail validation.
184. v2.0.3 Dec 30, 2024 · release notes

     CISO Assistant v2.0.3 updates EBIOS Risk Manager roles and permissions.

     └──▷ GET THIS VERSION

     copy

     $ git clone --branch v2.0.3 https://github.com/intuitem/ciso-assistant-community.git
     # already have the repo? check out this version:
     $ git checkout v2.0.3

185. v2.0.0 Dec 28, 2024 · release notes

     CISO Assistant v2.0 adds impact/economy/stakeholder radars for EBIOS RMEBIOS RMA French risk-management method published by ANSSI for analysing cyber threats and selecting countermeasures; tools use it to structure risk assessments that satisfy French and EU regulatory expectations. studies, a priority review matrix, and an audit table progress tracker.

     └──▷ GET THIS VERSION

     copy

     $ git clone --branch v2.0.0 https://github.com/intuitem/ciso-assistant-community.git
     # already have the repo? check out this version:
     $ git checkout v2.0.0

     • Adds impact graph visualization for EBIOS RM risk scenarios
     • Adds ebios stakeholders radar to visualize stakeholder perspectives in EBIOS RM studies
     • Adds 'eco radar ebios study' to display ecological impact within the EBIOS framework
     • Adds priority review matrix (PRO feature) for assessing and prioritizing risks
     • Adds audit table progress indicator to track compliance audit completion status

     +6 more show less

     • Integrates new breadcrumbs with command palette for improved UI navigation
     • Adds ability to disable EBIOS RM steps
     • Adds support for CA 733 in risk assessment PDF exports
     • Adds mapping from Adobe CCF v5 to ISO 27001: 2022
     • Enables internationalization of CSFCSFThe NIST Cybersecurity Framework, a set of outcomes for managing cybersecurity risk. Organizations use it to describe their current posture, priorities and improvement goals. functions with French translation support
     • Applies RBACRBACRole-based access control, where permissions are assigned to roles such as reader or administrator and users receive those roles. It makes access easier to manage than individual permission lists. to global settings management

     11 details in Everything

186. v1.9.31 Dec 22, 2024 · release notes

     Adds strategic scenario modeling and SSOSSOSingle sign-on, using one identity provider to sign in to multiple applications. It reduces separate passwords and centralizes account and access management. column to user view in CISO Assistant v1.9.31

     └──▷ GET THIS VERSION

     copy

     $ git clone --branch v1.9.31 https://github.com/intuitem/ciso-assistant-community.git
     # already have the repo? check out this version:
     $ git checkout v1.9.31

     • Add explicit strategic scenarios for risk analysis
     • Display name and ref_id columns in attack pathsattack pathsA possible sequence of steps an attacker could take to reach a valuable target. It connects weaknesses, permissions and reachable systems rather than treating each finding separately. model table
     • Added SSO column to user view table

     3 details in Everything

187. v1.9.29 Dec 16, 2024 · release notes

     CISO Assistant v1.9.29 adds keyboard shortcuts for Edit views and simplified audit action plans.

     └──▷ GET THIS VERSION

     copy

     $ git clone --branch v1.9.29 https://github.com/intuitem/ciso-assistant-community.git
     # already have the repo? check out this version:
     $ git checkout v1.9.29

     • Adds more keyboard shortcuts for Edit mode in detail views including flash and table modes
     • Simplifies the audit action plan interface to improve usability

     2 details in Everything

188. v1.9.28 Dec 16, 2024 · release notes

     v1.9.28 introduces multi-parent asset support for disaster recovery objectives, CNIL data security guides, Cmd+K command palette, and enhanced table mode UX.

     └──▷ GET THIS VERSION

     copy

     $ git clone --branch v1.9.28 https://github.com/intuitem/ciso-assistant-community.git
     # already have the repo? check out this version:
     $ git checkout v1.9.28

     └──▷ HOW TO FIND IT
     Open the command palette for quick navigation without using a mouse.
     📍Press Cmd+K (or Ctrl+K) to open the interface.
     • Adds support for multiple parent assets in disaster recovery objectives
     • Adds cmd-k command palette interface

     2 details in Everything

189. v1.9.22 Dec 9, 2024 · release notes

     Adds ANSSI hygiene guide content, Word export format, and dependency loading enhancements

     └──▷ GET THIS VERSION

     copy

     $ git clone --branch v1.9.22 https://github.com/intuitem/ciso-assistant-community.git
     # already have the repo? check out this version:
     $ git checkout v1.9.22

     • detailed ANSSI hygiene guide available in the knowledge base
     • Exports to Microsoft Word (word export) as a new report format
     • Imports dependencies and updates them automatically on load

     3 details in Everything

190. v1.9.19 Dec 5, 2024 · release notes

     CISO Assistant v1.9.19 adds applied control duplication and priority fields to policies and action plans.

     └──▷ GET THIS VERSION

     copy

     $ git clone --branch v1.9.19 https://github.com/intuitem/ciso-assistant-community.git
     # already have the repo? check out this version:
     $ git checkout v1.9.19

     └──▷ HOW TO FIND IT
     Duplicate an existing applied control to quickly set up similar controls without manual re-entry.
     📍In the Cyber Tool's UI, navigate to Applied Controls and use the duplicate action on an existing entry.
     Sort policies by urgency in the main list view to prioritize remediation efforts.
     📍Click the priority column header in the Policies list view.
     Manage action plans by viewing and sorting them by priority level.
     📍View the Action Plan model tables where the new priority field is now available for each entry.
     • Adds applied controls duplication feature allowing users to copy existing applied controls
     • Adds priority field to policies list view for sorting and filtering capabilities
     • Adds priority field to action plan model tables for workflow management

     3 details in Everything

191. v1.9.18 Dec 2, 2024 · release notes

     CISO Assistant v1.9.18 adds SAMA framework support, CLI risk assessment import, and extra metrics.

     └──▷ GET THIS VERSION

     copy

     $ git clone --branch v1.9.18 https://github.com/intuitem/ciso-assistant-community.git
     # already have the repo? check out this version:
     $ git checkout v1.9.18

     • Adds sama frameworks to the available compliance catalog
     • Adds CLI capability to import risk assessments
     • Adds extra metrics for risk reporting

     3 details in Everything

192. v1.9.17 Nov 29, 2024 · release notes

     CISO Assistant v1.9.17 adds ref IDs to risk scenarios and editable objects, persistent URL filters, toast license notifications, clickable metrics, EBIOS RMEBIOS RMA French risk-management method published by ANSSI for analysing cyber threats and selecting countermeasures; tools use it to structure risk assessments that satisfy French and EU regulatory expectations. support, Huey background tasks, and mapping inference improvements.

     └──▷ GET THIS VERSION

     copy

     $ git clone --branch v1.9.17 https://github.com/intuitem/ciso-assistant-community.git
     # already have the repo? check out this version:
     $ git checkout v1.9.17

     • Adds a ref_id field to Risk Scenario objects (PR #1078)
     • Adds a ref_id field to all editable objects in the data model (PR #1044)
     • Adds a labels field on Assets and fixes asset creation via forms (PR #1094)
     • Adds persistent URL parameters for applied filters so they survive refreshes (PR #1074)
     • Adds an EBIOS RM matrix visualization (PR #1098)

     +5 more show less

     • Enables Huey background task worker support (PR #1088)
     • Improves mapping inference with additional information (PR #1070)
     • Adds a toast notification on login when the license is nearing expiration (PR #981)
     • Makes metrics clickable in the UI (PR #1093)
     • Excludes third-party users from editors count (PR #1100)

     10 details in Everything

193. v1.9.15 Nov 22, 2024 · release notes

     CISO Assistant v1.9.15 adds disk usage tracking, priority to applied controls, and security objective enrichment for assets

     └──▷ GET THIS VERSION

     copy

     $ git clone --branch v1.9.15 https://github.com/intuitem/ciso-assistant-community.git
     # already have the repo? check out this version:
     $ git checkout v1.9.15

     • priority field added to Applied controls model
     • Assets enriched to support security_objectives, rto, and mtd attributes
     • Disk usage metrics now tracked in monitoring

     3 details in Everything

     └──▷ BREAKING ON UPGRADE

     • !maturity field removed from model (useless field)
194. v1.9.14 Nov 19, 2024 · release notes

     CISO Assistant v1.9.14 adds asset ownership tracking, disk usage metrics, and document management.

     └──▷ GET THIS VERSION

     copy

     $ git clone --branch v1.9.14 https://github.com/intuitem/ciso-assistant-community.git
     # already have the repo? check out this version:
     $ git checkout v1.9.14

     └──▷ HOW TO FIND IT
     When/why you'd use this — the value or use case.
     📍In the Assets view, open an asset's details and enter owner information in the Owner(s) field.
     Monitor system health via the new disk usage reporting feature.
     📍Check the dashboard or system status section for disk usage metrics.
     • Adds the ability to assign owner(s) to assets
     • Adds disk usage metrics/reporting
     • Adds the ability to add missing documents

     3 details in Everything

195. v1.9.13 Nov 19, 2024 · release notes

     Adds ability to remove custom logos/favicons and fixes SVG logo handling in CISO Assistant v1.9.13

     └──▷ GET THIS VERSION

     copy

     $ git clone --branch v1.9.13 https://github.com/intuitem/ciso-assistant-community.git
     # already have the repo? check out this version:
     $ git checkout v1.9.13

     • Make it possible to remove custom logo or favicon.
     • Recommend setting groups after user creation.

     2 details in Everything

196. v1.9.10 Nov 7, 2024 · release notes

     Adds provider filtering for threats in CISO Assistant v1.9.10

     └──▷ GET THIS VERSION

     copy

     $ git clone --branch v1.9.10 https://github.com/intuitem/ciso-assistant-community.git
     # already have the repo? check out this version:
     $ git checkout v1.9.10

     └──▷ HOW TO FIND IT
     Filter threats by a specific provider in the UI or API
     📍In the console, go to Threats and use the provider filter field.
197. v1.9.9 Nov 7, 2024 · release notes

     Adds stacked bars for audits analytics and distinct querysets for my-assignments.

     └──▷ GET THIS VERSION

     copy

     $ git clone --branch v1.9.9 https://github.com/intuitem/ciso-assistant-community.git
     # already have the repo? check out this version:
     $ git checkout v1.9.9

     • distinct queryset optimization for my-assignments ensures each assignment appears only once

     1 detail in Everything

198. v1.9.8 Nov 5, 2024 · release notes

     CISO Assistant v1.9.8 adds TOTPTOTPA one-time password algorithm (RFC 6238) that generates short-lived codes from a shared secret and the current time, giving cyber tools phishing-resistant second-factor authentication without a server round-trip.-based MFAMFAMulti-factor authentication, requiring proof from different categories, such as a password and a hardware key, to sign in. It reduces reliance on a password alone. and a new My Assignments page with Flash mode keyboard shortcut.

     └──▷ GET THIS VERSION

     copy

     $ git clone --branch v1.9.8 https://github.com/intuitem/ciso-assistant-community.git
     # already have the repo? check out this version:
     $ git checkout v1.9.8

     • Adds TOTP (Time-based One-Time Password) support for multi-factor authenticationmulti-factor authenticationMulti-factor authentication, requiring proof from different categories, such as a password and a hardware key, to sign in. It reduces reliance on a password alone..
     • Adds a My Assignments page giving users a dedicated view of their assigned tasks.

     2 details in Everything

199. v1.9.7 Nov 4, 2024 · release notes

     CISO Assistant v1.9.7 adds RNSI ALGERIE 2020 compliance, new mapping integrations, and API improvements

     └──▷ GET THIS VERSION

     copy

     $ git clone --branch v1.9.7 https://github.com/intuitem/ciso-assistant-community.git
     # already have the repo? check out this version:
     $ git checkout v1.9.7

     • Adds RNSI ALGERIE 2020 as a supported compliance framework for cyber tooling assessments.
     • Introduces ISO 27001 <--> SecNumCloud correspondences to enable mapping between these frameworks.
     • Updates the MITRE ATT&CKMITRE ATT&CKA publicly maintained knowledge base of adversary tactics and techniques observed in real attacks, maintained by MITRE. Cyber tools use it as a common taxonomy to classify, map, and communicate threat behavior. coverage to version 16, enhancing threat modeling capabilities.
     • Provides a new API endpoint to retrieve requirements per compliance assessment for programmatic access.

     4 details in Everything

200. v1.9.6 Oct 31, 2024 · release notes

     CISO Assistant v1.9.6 adds an Assets graph view and dynamic label support

     └──▷ GET THIS VERSION

     copy

     $ git clone --branch v1.9.6 https://github.com/intuitem/ciso-assistant-community.git
     # already have the repo? check out this version:
     $ git checkout v1.9.6

     └──▷ HOW TO FIND IT
     Visualize asset dependencies and relationships within the platform.
     📍In the console, navigate to the Assets section and select Assets graph from the view options.
     Assign new attributes to an asset without pre-defining a static label schema.
     📍Open an asset's details panel and use the dynamic input field to add a label on the fly.
     • Adds Assets graph as a new visualization for asset relationships.
     • Enables adding labels dynamically to assets via UI controls.

     2 details in Everything

201. v1.9.5 Oct 29, 2024 · release notes

     Adds Graph explorer beta for mapping crosswalks, plus a Helm chart and the Clausier de sécurité

     └──▷ GET THIS VERSION

     copy

     $ git clone --branch v1.9.5 https://github.com/intuitem/ciso-assistant-community.git
     # already have the repo? check out this version:
     $ git checkout v1.9.5

     └──▷ TRY IT
     Deploy CISO Assistant to Kubernetes using the official Helm chart introduced in this release.
     copy

     $ helm install ciso-assistant intuitem/ciso-assistant

     • Helm chart added for CISO Assistant deployment
     • New Clausier de sécurité included in the tool

     2 details in Everything

202. v1.9.4 Oct 26, 2024 · release notes

     CISO Assistant v1.9.4 adds license expiration management and log upload artifacts.

     └──▷ GET THIS VERSION

     copy

     $ git clone --branch v1.9.4 https://github.com/intuitem/ciso-assistant-community.git
     # already have the repo? check out this version:
     $ git checkout v1.9.4

     └──▷ HOW TO FIND IT
     Check your current seat count and license expiry date directly in the status section.
     📍Navigate to the dashboard status area to view seats and expiry date fields.
     • Add add seats and expiry date in status to display subscription lifecycle details
     • Enable Upload backend logs as artifacts for audit trail persistence

     2 details in Everything

203. v1.9.3 Oct 18, 2024 · release notes

     CISO Assistant v1.9.3 adds a global analyst user group for permission management.

     └──▷ GET THIS VERSION

     copy

     $ git clone --branch v1.9.3 https://github.com/intuitem/ciso-assistant-community.git
     # already have the repo? check out this version:
     $ git checkout v1.9.3

204. v1.9.2 Oct 16, 2024 · release notes

     CISO Assistant v1.9.2 adds provider filtering for reference controls and an audit question reset button

     └──▷ GET THIS VERSION

     copy

     $ git clone --branch v1.9.2 https://github.com/intuitem/ciso-assistant-community.git
     # already have the repo? check out this version:
     $ git checkout v1.9.2

     └──▷ HOW TO FIND IT
     Scope the reference controls view to only show controls derived from a specific provider like NIST or ISO.
     📍Navigate to the Reference Controls tab in CISO Assistant and apply the Provider filter.
     Clear a submitted answer during an audit assessment to re-evaluate or correct the response without restarting the entire question.
     📍Open the Audit questionnaire for the relevant entity, locate the answered question, and click the reset button displayed next to it.
     • Adds a filter on provider in the reference controls tab to scope reference controls by their source
     • Adds a reset button to questions in Audits to quickly clear answers without manual deletion

     2 details in Everything

205. v1.9.1 Oct 15, 2024 · release notes

     CISO Assistant v1.9.1 adds Tunisia BSI cloud standards, enterprise login logo toggle, and scope filtering for applied controls.

     └──▷ GET THIS VERSION

     copy

     $ git clone --branch v1.9.1 https://github.com/intuitem/ciso-assistant-community.git
     # already have the repo? check out this version:
     $ git checkout v1.9.1

     • Adds Ca_467_hide_logo config option to hide the logo on the login page for the enterprise version
     • Adds folder scope filtering in applied controls, evidences, threats, and assets select menus
     • Adds import library button to mappings
     • Adds 'Référentiel d’Audit de la Sécurité des Systèmes d’Information (TUNISIE)' standard
     • Adds Mindeststandard-des-BSI-zur-Nutzung-externer-Cloud-Dienste standard

     5 details in Everything

206. v1.9.0 Oct 13, 2024 · release notes

     CISO Assistant v1.9.0 introduces seat limits, CLI attachment upload, and experimental insights

     └──▷ GET THIS VERSION

     copy

     $ git clone --branch v1.9.0 https://github.com/intuitem/ciso-assistant-community.git
     # already have the repo? check out this version:
     $ git checkout v1.9.0

     • Implements hard limits on user seats (CA-470) to control maximum active users
     • Introduces an Experimental Insights feature in the UI for data visibility
     • Supports viewing CMMC framework questions within the application interface

     3 details in Everything

207. v1.8.11 Oct 4, 2024 · release notes

     Adds library content type filter and fixes domain tree display in requirement assessments.

     └──▷ GET THIS VERSION

     copy

     $ git clone --branch v1.8.11 https://github.com/intuitem/ciso-assistant-community.git
     # already have the repo? check out this version:
     $ git checkout v1.8.11

208. v1.8.10 Sep 30, 2024 · release notes

     CISO Assistant v1.8.10 adds a CLI, BSI C5 framework support, and paginated library listing.

     └──▷ GET THIS VERSION

     copy

     $ git clone --branch v1.8.10 https://github.com/intuitem/ciso-assistant-community.git
     # already have the repo? check out this version:
     $ git checkout v1.8.10

     • CLI: basic implementation for a new command-line interface
     • Adds BSI C5 framework support to the list of available compliance frameworks
     • Library listing now paginates results via API response instead of loading all items at once

     3 details in Everything

209. v1.8.9 Sep 28, 2024 · release notes

     CISO Assistant v1.8.9 adds Adobe CCF support and audit UI controls

     └──▷ GET THIS VERSION

     copy

     $ git clone --branch v1.8.9 https://github.com/intuitem/ciso-assistant-community.git
     # already have the repo? check out this version:
     $ git checkout v1.8.9

     • add toggle to show hide non assessable items in audit
     • Feature to auto create suggested controls from an audit

     2 details in Everything

210. v1.8.1 Sep 17, 2024 · release notes

     CISO Assistant v1.8.1 adds ESRS framework support, TPRMTPRMAssessing and monitoring the security risk an organization takes on through its vendors, suppliers and service providers. It covers the questionnaires, evidence and continuous checks behind letting a third party hold your data. enclave paradigm, cost fields for applied controls, and folder attachment to assessments.

     └──▷ GET THIS VERSION

     copy

     $ git clone --branch v1.8.1 https://github.com/intuitem/ciso-assistant-community.git
     # already have the repo? check out this version:
     $ git checkout v1.8.1

     • cost field added to applied_controls model
     • Support for ESRS (CSRD standards) frameworks
     • New enclave paradigm available in TPRM implementation
     • Ability to attach folders to assessments

     4 details in Everything

211. v1.7.5 Sep 7, 2024 · release notes

     Adds Hindi and Urdu language support to CISO Assistant

     └──▷ GET THIS VERSION

     copy

     $ git clone --branch v1.7.5 https://github.com/intuitem/ciso-assistant-community.git
     # already have the repo? check out this version:
     $ git checkout v1.7.5

     └──▷ HOW TO FIND IT
     Switch the CISO Assistant UI language to Hindi or Urdu via the user profile settings.
     📍In the top-right menu, select Settings › Profile › Language › Hindi (or Urdu)
     • Adds Hindi and Urdu localization strings for the web interface

     1 detail in Everything

212. v1.7.2 Sep 5, 2024 · release notes

     CISO Assistant v1.7.2 adds CSV export for Audits and Controls, plus a new inspect mode menu item.

     └──▷ GET THIS VERSION

     copy

     $ git clone --branch v1.7.2 https://github.com/intuitem/ciso-assistant-community.git
     # already have the repo? check out this version:
     $ git checkout v1.7.2

     └──▷ HOW TO FIND IT
     Export audit data to CSV for offline analysis or reporting.
     📍In the Audits view, use the Export option and select CSV format
     Export control definitions to CSV for sharing with external parties.
     📍In the Controls view, use the Export option and select CSV format
     Explore the hierarchical structure of your assets via the new menu item.
     📍Open the Extra menu in the UI and click inspect to view domains and projects.
     • Adds CSV export capability for Audits in the UI
     • Adds CSV export capability for Controls in the UI
     • Adds inspect submenu under the Extra menu to view tree of domains and projects

     3 details in Everything

213. v1.7.1 Aug 30, 2024 · release notes

     CISO Assistant v1.7.1 adds framework implementation group descriptions and SSOSSOSingle sign-on, using one identity provider to sign in to multiple applications. It reduces separate passwords and centralizes account and access management. configuration without a metadata URL.

     └──▷ GET THIS VERSION

     copy

     $ git clone --branch v1.7.1 https://github.com/intuitem/ciso-assistant-community.git
     # already have the repo? check out this version:
     $ git checkout v1.7.1

     • Shows description of implementation groups in framework detail view
     • Adds ability to configure Single Sign-On (SSO) without providing a metadata URL

     2 details in Everything

214. v1.7.0 Aug 30, 2024 · release notes

     CISO Assistant v1.7.0 adds impact qualification, ICT minimal standard and K ISMS-P controls, plus new homepage.

     └──▷ GET THIS VERSION

     copy

     $ git clone --branch v1.7.0 https://github.com/intuitem/ciso-assistant-community.git
     # already have the repo? check out this version:
     $ git checkout v1.7.0

     └──▷ HOW TO FIND IT
     Apply impact qualification when assessing risk during an audit.
     📍In the Audit workspace, select a risk scenario and open the assessment form to find the new impact qualification dropdown field.
     View analytics with the new experimental homepage layout.
     📍Click the Analytics tab in the main navigation sidebar to load the experimental homepage view.
     • Adds impact qualification option to assess risk scenarios
     • Adds ICT minimal standard framework support for control mapping
     • Adds K ISMS-P framework support for compliance requirements
     • Adds experimental analytics homepage accessible in the UI

     4 details in Everything

215. v1.6.7 Aug 21, 2024 · release notes

     Adds NZISM and ENS-decreto frameworks to CISO Assistant

     └──▷ GET THIS VERSION

     copy

     $ git clone --branch v1.6.7 https://github.com/intuitem/ciso-assistant-community.git
     # already have the repo? check out this version:
     $ git checkout v1.6.7

     └──▷ HOW TO FIND IT
     Start using the NZISM standard for your compliance assessments.
     📍In CISO Assistant, select NZISM from the framework list when creating a new assessment.
     Assess your environment against the ENS-decreto regulations.
     📍In CISO Assistant, select ENS-decreto from the framework list when creating a new assessment.
     • Creates NZISM Framework support via community contribution.
     • Adds ENS-decreto framework support.

     2 details in Everything

216. v1.6.5 Aug 14, 2024 · release notes

     Adds GL integration for costs, PART-IS framework support, and RTS DORA coverage on JET/OVS/TPLT.

     └──▷ GET THIS VERSION

     copy

     $ git clone --branch v1.6.5 https://github.com/intuitem/ciso-assistant-community.git
     # already have the repo? check out this version:
     $ git checkout v1.6.5

     • Add GL on costs and losses

     1 detail in Everything

217. v1.6.4 Aug 5, 2024 · release notes

     CISO Assistant v1.6.4 adds CJIS 5.9.5 framework support, NIS1 FR rules, and expanded GDPRGDPREU regulation enacted in 2018 that governs how organizations collect, store, and process personal data of EU residents, giving cyber tools legal obligations around data handling and breach notification. translations.

     └──▷ GET THIS VERSION

     copy

     $ git clone --branch v1.6.4 https://github.com/intuitem/ciso-assistant-community.git
     # already have the repo? check out this version:
     $ git checkout v1.6.4

     • Adds new version of the CJIS framework (5.9.5) for compliance assessments
     • Adds proper integration of NIS1 rules for France (FR)

     2 details in Everything

218. v1.6.3 Jul 27, 2024 · release notes

     Adds multilanguage library support and ISO 27005 Annex A 5x5 risk matrix.

     └──▷ GET THIS VERSION

     copy

     $ git clone --branch v1.6.3 https://github.com/intuitem/ciso-assistant-community.git
     # already have the repo? check out this version:
     $ git checkout v1.6.3

     • Supports multilanguage libraries
     • Adds 5x5 matrix from ISO 27005 Annex A

     2 details in Everything

219. v1.6.2 Jul 19, 2024 · release notes

     CISO Assistant v1.6.2 adds PSSIE and DNSSI (Morocco) frameworks plus score/observation fields in audit reports.

     └──▷ GET THIS VERSION

     copy

     $ git clone --branch v1.6.2 https://github.com/intuitem/ciso-assistant-community.git
     # already have the repo? check out this version:
     $ git checkout v1.6.2

     • PSSIE framework support for security assessments
     • DNSSI (Maroc) framework support
     • Audit report now includes score and observation fields

     3 details in Everything

220. v1.6.1 Jul 15, 2024 · release notes

     Adds NCSC Cyber Essential requirements for IT infrastructure and a new requirement assessment view page.

     └──▷ GET THIS VERSION

     copy

     $ git clone --branch v1.6.1 https://github.com/intuitem/ciso-assistant-community.git
     # already have the repo? check out this version:
     $ git checkout v1.6.1

     └──▷ HOW TO FIND IT
     Start the new workflow for mapping IT infrastructure to NCSC Cyber Essential standards.
     📍In the console, go to Requirements › Add Requirement and select 'Cyber essential requirements for IT infrastruture by NCSC'
     Open the dedicated interface for evaluating compliance against specific requirements.
     📍In the console, navigate to the new Requirement Assessment View page
221. v1.6.0 Jul 10, 2024 · release notes

     Adds framework mapping and audit cloning capabilities to CISO Assistant.

     └──▷ GET THIS VERSION

     copy

     $ git clone --branch v1.6.0 https://github.com/intuitem/ciso-assistant-community.git
     # already have the repo? check out this version:
     $ git checkout v1.6.0

     • Adds the ability to map frameworks together via the new mapping frameworks feature
     • Enables cloning audits within or between projects as a consequence of the mapping feature
     • Improves filtering logic in the frontend

     3 details in Everything

222. v1.5.4 Jul 6, 2024 · release notes

     CISO Assistant v1.5.4 adds filters to tables, CCPA regulation support, CAIQ mapping to CCM, and risk scenario owners.

     └──▷ GET THIS VERSION

     copy

     $ git clone --branch v1.5.4 https://github.com/intuitem/ciso-assistant-community.git
     # already have the repo? check out this version:
     $ git checkout v1.5.4

     • Adds ⭐-prefixed filters to tables for data filtering
     • Adds support for the CCPA Regulations framework
     • Adds CAIQ mappings to the CCM framework
     • Adds risk scenario owner capability to risk scenarios

     4 details in Everything

223. v1.5.3 Jul 1, 2024 · release notes

     CISO Assistant v1.5.3 adds support for CRA resolution annexes, SCF 2024-2, and NCSC CAF frameworks.

     └──▷ GET THIS VERSION

     copy

     $ git clone --branch v1.5.3 https://github.com/intuitem/ciso-assistant-community.git
     # already have the repo? check out this version:
     $ git checkout v1.5.3

     • Adds support for SCF 2024-2 framework
     • Adds support for NCSC CAF framework

     2 details in Everything

224. v1.5.1 Jun 24, 2024 · release notes

     CISO Assistant v1.5.1 adds optional include_non_assessable to API and supports Polish locale.

     └──▷ GET THIS VERSION

     copy

     $ git clone --branch v1.5.1 https://github.com/intuitem/ciso-assistant-community.git
     # already have the repo? check out this version:
     $ git checkout v1.5.1

     └──▷ TRY IT
     Retrieve all requirement assessments, including those not yet assessed, by passing the new parameter.
     copy

     $ GET /api/compliance_assessments/{id}/requirement_assessments?include_non_assessable=true

     • Add include_non_assessable parameter to ComplianceAssessment.get_requirement_assessments API
     • Add Polish language support (Locale/activate Polish)

     2 details in Everything

225. v1.5.0 Jun 22, 2024 · release notes

     CISO Assistant v1.5.0 adds SSOSSOSingle sign-on, using one identity provider to sign in to multiple applications. It reduces separate passwords and centralizes account and access management./SAMLSAMLA standard for passing signed identity assertions between a sign-in provider and an application. It lets a user sign in through their organization's identity provider. support, new frameworks (RTS, CJIS, OTCC), and CCM helper

     └──▷ GET THIS VERSION

     copy

     $ git clone --branch v1.5.0 https://github.com/intuitem/ciso-assistant-community.git
     # already have the repo? check out this version:
     $ git checkout v1.5.0

     • Add support for SSO and SAML authentication
     • Add ANSSI Recommandations pour la protection des systèmes d'information essentiels framework
     • Add RTS framework
     • Add CJIS framework
     • Add OTCC framework

     5 details in Everything

226. v1.4.2 Jun 11, 2024 · release notes

     Adds new Docker Compose variant to expose the API on remote servers

     └──▷ GET THIS VERSION

     copy

     $ git clone --branch v1.4.2 https://github.com/intuitem/ciso-assistant-community.git
     # already have the repo? check out this version:
     $ git checkout v1.4.2

     • New compose variant for exposing the API with Docker compose on a remote server

     1 detail in Everything

227. v1.4.0 Jun 4, 2024 · release notes

     Adds Ctrl+V paste support for evidence attachments and X-Rays translations in CISO Assistant v1.4.0.

     └──▷ GET THIS VERSION

     copy

     $ git clone --branch v1.4.0 https://github.com/intuitem/ciso-assistant-community.git
     # already have the repo? check out this version:
     $ git checkout v1.4.0

     └──▷ HOW TO FIND IT
     Quickly attach evidence to an assessment by pasting files directly into the UI instead of using the file picker.
     📍In the CISO Assistant UI, open the Evidence attachment dialog for an assessment and press Ctrl+V (Cmd+V on Mac) with files in your clipboard.
228. v1.3.9 Jun 2, 2024 · release notes

     CISO Assistant v1.3.9 adds frontend annotation display, ASVS levels support, and a PG-enabled Docker Compose variant

     └──▷ GET THIS VERSION

     copy

     $ git clone --branch v1.3.9 https://github.com/intuitem/ciso-assistant-community.git
     # already have the repo? check out this version:
     $ git checkout v1.3.9

     • Adds Support levels in ASVS for requirement nodes
     • Adds Display annotations in the frontend capability
     • Adds Docker compose variant with PG

     3 details in Everything

229. v1.3.8 May 30, 2024 · release notes

     CISO Assistant v1.3.8 adds AI Act assessment, compliance scoring tests, and new manage.py mail commands.

     └──▷ GET THIS VERSION

     copy

     $ git clone --branch v1.3.8 https://github.com/intuitem/ciso-assistant-community.git
     # already have the repo? check out this version:
     $ git checkout v1.3.8

     • steps: Adds AI Act as a selectable compliance framework for assessments in the UI
     • shell: Adds manage.py send_welcome_mail and manage.py send_reset_mail management commands to programmatically trigger account emails

     2 details in Everything

230. v1.3.6 May 25, 2024 · release notes

     Introduces flash mode for faster audits and tips for audit evidences.

     └──▷ GET THIS VERSION

     copy

     $ git clone --branch v1.3.6 https://github.com/intuitem/ciso-assistant-community.git
     # already have the repo? check out this version:
     $ git checkout v1.3.6

     └──▷ HOW TO FIND IT
     Use flash mode to speed up the completion of a compliance audit.
     📍In the console, go to Settings and enable flash mode
     Get contextual guidance when filling out evidence fields during an audit.
     📍In the console, navigate to an Audit › Evidence section
     • Adds flash mode to accelerate the audit process
     • Displays tips for audit evidences

     2 details in Everything

231. v1.3.5 May 20, 2024 · release notes

     CISO Assistant v1.3.5 adds support for BSI IT-Grundschutz Kompendium and ENISAENISAThe European Union Agency for Cybersecurity, an EU body that publishes threat landscapes, guidelines, and standards to help member states and organisations raise their cyber defences. 5G Security Controls Matrix frameworks

     └──▷ GET THIS VERSION

     copy

     $ git clone --branch v1.3.5 https://github.com/intuitem/ciso-assistant-community.git
     # already have the repo? check out this version:
     $ git checkout v1.3.5

     • Adds BSI IT-Grundschutz-Kompendium framework support for compliance mapping
     • Adds ENISA 5G Security Controls Matrix framework support for compliance mapping

     2 details in Everything

232. v1.3.4 May 16, 2024 · release notes

     CISO Assistant v1.3.4 adds a resources page, risk analytics threat radar, and ANSSI framework support

     └──▷ GET THIS VERSION

     copy

     $ git clone --branch v1.3.4 https://github.com/intuitem/ciso-assistant-community.git
     # already have the repo? check out this version:
     $ git checkout v1.3.4

     • Adds a dedicated resources page for managing tool libraries and frameworks.
     • Adds a threat radar visualization to the risk analytics module.
     • Adds support for the anssi-recommandations-configuration-systeme-gnu-linux framework.

     3 details in Everything

233. v1.3.3 May 11, 2024 · release notes

     CISO Assistant v1.3.3 adds SecNumCloud 3.2 and 3CF v2 frameworks to the service

     └──▷ GET THIS VERSION

     copy

     $ git clone --branch v1.3.3 https://github.com/intuitem/ciso-assistant-community.git
     # already have the repo? check out this version:
     $ git checkout v1.3.3

     └──▷ HOW TO FIND IT
     Assess your organization against the new SecNumCloud 3.2 requirements via the UI.
     📍In the console, go to Frameworks › SecNumCloud 3.2 to start an assessment.
     Assess your organization against the new 3CF v2 requirements via the UI.
     📍In the console, go to Frameworks › 3CF v2 to start an assessment.
     • Adds support for SecNumCloud 3.2 framework assessment
     • Adds support for 3CF v2 framework assessment

     2 details in Everything

234. v1.3.0 May 8, 2024 · release notes

     CISO Assistant v1.3.0 adds support for multi-level frameworks and implementation groups

     └──▷ GET THIS VERSION

     copy

     $ git clone --branch v1.3.0 https://github.com/intuitem/ciso-assistant-community.git
     # already have the repo? check out this version:
     $ git checkout v1.3.0

235. v1.2.4 May 7, 2024 · release notes

     CISO Assistant v1.2.4 adds Matrix generator capability and debug session auth.

     └──▷ GET THIS VERSION

     copy

     $ git clone --branch v1.2.4 https://github.com/intuitem/ciso-assistant-community.git
     # already have the repo? check out this version:
     $ git checkout v1.2.4

     • Allow session authentication in debug mode for local testing

     1 detail in Everything

236. v1.2.3 May 2, 2024 · release notes

     CISO Assistant v1.2.3 adds ANSSI recommendations for genAI security and SSDF framework support

     └──▷ GET THIS VERSION

     copy

     $ git clone --branch v1.2.3 https://github.com/intuitem/ciso-assistant-community.git
     # already have the repo? check out this version:
     $ git checkout v1.2.3

     • Adds ANSSI recommendations covering generative AI security to the control library.
     • Adds SSDF (Secure Software Development Framework) framework support for assessment.

     2 details in Everything

237. v1.2.1 May 1, 2024 · release notes

     CISO Assistant v1.2.1 adds audit scoring and NIST SP-800-171 framework support.

     └──▷ GET THIS VERSION

     copy

     $ git clone --branch v1.2.1 https://github.com/intuitem/ciso-assistant-community.git
     # already have the repo? check out this version:
     $ git checkout v1.2.1

     • Adds scoring for audits

     1 detail in Everything

238. v1.1.1 Apr 23, 2024 · release notes

     Adds the FADP compliance framework to CISO Assistant.

     └──▷ GET THIS VERSION

     copy

     $ git clone --branch v1.1.1 https://github.com/intuitem/ciso-assistant-community.git
     # already have the repo? check out this version:
     $ git checkout v1.1.1

239. v1.1.0 Apr 19, 2024 · release notes

     CISO Assistant v1.1.0 adds ANSSI and ECC frameworks, knox token auth, and rebrands auditor to reader

     └──▷ GET THIS VERSION

     copy

     $ git clone --branch v1.1.0 https://github.com/intuitem/ciso-assistant-community.git
     # already have the repo? check out this version:
     $ git checkout v1.1.0

     • Introduces django-rest-knox token authentication for programmatic access control.

     1 detail in Everything

     └──▷ BREAKING ON UPGRADE

     • !The user role auditor is renamed to reader, which may break scripts or UIs referencing the old role name.
240. v1.0.9 Apr 16, 2024 · release notes

     CISO Assistant v1.0.9 adds Spectacular API docs and TiSAx framework support

     └──▷ GET THIS VERSION

     copy

     $ git clone --branch v1.0.9 https://github.com/intuitem/ciso-assistant-community.git
     # already have the repo? check out this version:
     $ git checkout v1.0.9

     └──▷ HOW TO FIND IT
     View the full API schema and test endpoints directly in the browser.
     📍Open the application root URL followed by /api/docs/ in your web browser.
     Select TiSAx as a compliance framework when creating or updating an assessment scope.
     📍In the compliance section, create a new assessment and select TiSAx from the available frameworks list.
     • Adds Spectacular to expose API documentation via the Swagger/OpenUI interface
     • Adds TiSAx framework support for compliance assessments

     2 details in Everything

241. v1.0.7 Apr 14, 2024 · release notes

     Adds NIST Privacy Framework framework support for compliance mapping.

     └──▷ GET THIS VERSION

     copy

     $ git clone --branch v1.0.7 https://github.com/intuitem/ciso-assistant-community.git
     # already have the repo? check out this version:
     $ git checkout v1.0.7

     └──▷ HOW TO FIND IT
     Start a new assessment by selecting the newly supported framework from the UI dropdown.
     📍In the CISO Assistant web interface, go to Assessments › Create New Assessment and select NIST Privacy Framework from the Framework list.
242. v1.0.6 Apr 13, 2024 · release notes

     CISO Assistant v1.0.6 adds TIBER-EU framework support

     └──▷ GET THIS VERSION

     copy

     $ git clone --branch v1.0.6 https://github.com/intuitem/ciso-assistant-community.git
     # already have the repo? check out this version:
     $ git checkout v1.0.6

     • Adds TIBER-EU framework to the available compliance frameworks

     1 detail in Everything

243. v1.0.4 Apr 9, 2024 · release notes

     CISO Assistant v1.0.4 adds AirCyber framework support and improves library display in the UI

     └──▷ GET THIS VERSION

     copy

     $ git clone --branch v1.0.4 https://github.com/intuitem/ciso-assistant-community.git
     # already have the repo? check out this version:
     $ git checkout v1.0.4

     • Adds AirCyber framework as a new compliance option for organizational assessments

     1 detail in Everything

244. v1.0.3 Apr 7, 2024 · release notes

     Adds HDS, OWASPOWASPA nonprofit foundation that publishes open standards, guides, and ranked vulnerability lists—most famously the OWASP Top 10—giving cyber tools a vendor-neutral benchmark to test or report against. ASVS 4.0.3, and RGS frameworks for expanded compliance support

     └──▷ GET THIS VERSION

     copy

     $ git clone --branch v1.0.3 https://github.com/intuitem/ciso-assistant-community.git
     # already have the repo? check out this version:
     $ git checkout v1.0.3

     • add HDS referential introduces the French Health Data Host (HDS) framework for assessment.
     • Add OWASP ASVS 4.0.3 adds the OWASP Application Security Verification Standard version 4.0.3.
     • Add RGS includes the French General Security Rules (Règlement Général de Sécurité) reference.

     3 details in Everything

245. v1.0.2 Apr 5, 2024 · release notes

     CISO Assistant v1.0.2 adds NIST SP-800-66 and CCB CyberFundamentals Essential frameworks.

     └──▷ GET THIS VERSION

     copy

     $ git clone --branch v1.0.2 https://github.com/intuitem/ciso-assistant-community.git
     # already have the repo? check out this version:
     $ git checkout v1.0.2

     • Adds support for the NIST SP-800-66 framework (linked to HIPAAHIPAAA US federal law enacted in 1996 that sets privacy and security requirements for protected health information, giving cyber tools a compliance baseline to enforce or audit against. compliance).
     • Adds support for the CCB CyberFundamentals Framework - Essential (Full).

     2 details in Everything

246. v1.0.1 Apr 5, 2024 · release notes

     CISO Assistant v1.0.1 allows adding evidences from applied control detail, displays domain context in projects, and clarifies threat details.

     └──▷ GET THIS VERSION

     copy

     $ git clone --branch v1.0.1 https://github.com/intuitem/ciso-assistant-community.git
     # already have the repo? check out this version:
     $ git checkout v1.0.1

     └──▷ HOW TO FIND IT
     Attach an evidence file to a specific applied control without navigating away from the control's detail page.
     📍In the CISO Assistant web UI, navigate to the Applied Control detail view and use the Add Evidence button to upload or link your evidence.
     Avoid ambiguity when multiple items share a name by filtering them by domain in multiselect components.
     📍In any Multiselect input field, search for the item name and verify the domain is listed to select the correct entry.
     • Add evidence directly from the Applied Control detail view
     • Select items with the same name but different domains in Multiselect inputs
     • Display project with domain context

     3 details in Everything