https://cybertoolchain.io/tools/ciso-assistant New releases and features in CISO Assistant, tracked by The Cyber Toolchain. en Sun, 01 Nov 2026 03:08:27 GMT https://github.com/intuitem/ciso-assistant-community/releases/tag/v4.2.0 https://github.com/intuitem/ciso-assistant-community/releases/tag/v4.2.0 Sun, 01 Nov 2026 03:08:27 GMT CISO Assistant adds Norwegian Bokmål and Turkish localization, EBIOS RM Workshop 5 export, evidence-required questionnaires, and six new compliance frameworks including PIPED⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠ • Filter folders by `ref_id` via the folders API to narrow folder lookups programmatically.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠ • Expand EBIOS RM exports to now include Workshop 5 data. • Override the PDF audit report template (Typst-based) per audit in the Pro edition. • Add custom fields and labels on entity assessments, plus vendor posture visuals with tier-based display, in the `TPRM` module. • Require evidence attachments on questionnaire responses before submission. • Expand notifications to cover additional event types. • Improve the portals editor with support for documents. • Add Norwegian Bokmål (`nb`) UI localization, including forms, tables, and dynamic strings. • Add `Italian` translations for vendor evaluation quick forms and `DPIA` workflows, and complete `Turkish` localization. • Add the `Czech Decree 409/2025` framework and `ZoKB` risk matrix, the `PIPEDA` framework (`Schedule 1`, verbatim official text), the `MonServiceSécurisé` framework, the `NCA DCC-1:2022` (Data Cybersecurity Controls) framework, the `NCA CSCC-1:2019` (Critical Systems Cybersecurity Controls) framework, and `OWASP Top 10 Web (2025)` to the library. Breaking changes: • The Libraries navigation entry is now located under 'Catalog' in the sidebar. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/ciso-assistant https://github.com/intuitem/ciso-assistant-community/releases/tag/v4.1.4 https://github.com/intuitem/ciso-assistant-community/releases/tag/v4.1.4 Sat, 24 Oct 2026 01:23:11 GMT CISO Assistant v4.1.4 adds Microsoft Graph mail transport, MCP tools, DPIA import from CNIL, ISO/IEC 27090:2026, and a dynamic data wizard.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠ • Adds `update_folder`, `update_user`, and `update_evidence` tools to the MCP integration.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠ • Adds Microsoft Graph as a mail transport option for outbound email delivery. • Supports importing DPIA studies from CNIL's PIA tool exports into the privacy module. • Adds dynamic data wizard with headers and fields mapping in the epic import flow. • Adds the `ISO/IEC 27090:2026` framework outline and the `R-CNMV-2024-08-MV` Dominican Republic securities market cybersecurity regulation to the built-in library. • Surfaces questionnaire compliance scores on entity assessments in the TPRM module. • Expands label support to more object types and introduces a dedicated view listing all objects associated with a label. • Adds solutions tiering with entity-driven strategies. • Enables persistent storage for uploaded files by default in the Helm chart deployment. • Enhances the EBIOS RM study description section. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/ciso-assistant https://github.com/intuitem/ciso-assistant-community/releases/tag/v4.1.3 https://github.com/intuitem/ciso-assistant-community/releases/tag/v4.1.3 Sat, 17 Oct 2026 21:43:15 GMT Adds Dominican Republic cybersecurity regulation JM 181101-02 to the CISO Assistant library.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠ Full history on Cyber Toolchain: https://cybertoolchain.io/tools/ciso-assistant https://github.com/intuitem/ciso-assistant-community/releases/tag/v4.1.2 https://github.com/intuitem/ciso-assistant-community/releases/tag/v4.1.2 Fri, 16 Oct 2026 23:09:07 GMT CISO Assistant v4.1.2 adds DPIA/GDPR screening, MCP incident tools, OAuth log forwarding, metric-to-control linking, and new Hungarian/Costa Rica frameworks.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠ • Adds `MAILERS` service config to route all outbound mail through a single mail service, replacing per-feature mail settings.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠ • Adds `create_evidence`, `add incident` and `add timeline entry` MCP tools for uploading local files as evidence and managing incidents and timeline entries from the MCP layer. • Adds MCP support for linking task templates to incidents via `create_incident` and `update_incident` calls. • Adds `extended_result` field to requirement assessments in the data wizard. • Adds `ref_id` field (unique across all folders) to the folders model. • Supports DPIA screening and DPIA forms for GDPR compliance workflows. • Adds a processor register role on the Processing register. • Adds an OAuth sink (beta) for log forwarding to support Microsoft Sentinel integration. • Enables linking a metric directly to an applied control. • Adds evidences to applied control linked fields. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/ciso-assistant https://github.com/intuitem/ciso-assistant-community/releases/tag/v4.1.1 https://github.com/intuitem/ciso-assistant-community/releases/tag/v4.1.1 Fri, 09 Oct 2026 21:44:18 GMT CISO Assistant v4.1.1 adds EBIOS RM on MCP, third-party tiering, PIPL/PI and OWASP SAMM frameworks, and a visual framework aggregator.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠ • Expands MCP server with `asset objectives/capabilities`, `entity relationship`, and `list_objects` types.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠ • Adds risk owner capabilities to the MCP server. • Makes advanced EBIOS RM available on the MCP server. • Introduces tiering capabilities for third parties and a more flexible forms engine. • Adds PIPL and PI compliance frameworks for the Chinese market. • Adds OWASP Software Assurance Maturity Model (SAMM) v2.2 library. • Adds IEC 62443 mapping with ANSSI recommendations. • Adds ISO 27001 ↔ HDS mapping. • Expands CEL capabilities to frameworks, enabling cyfun 2025 framework to benefit from them. • Surfaces pending document revisions alongside the revision currently in force. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/ciso-assistant https://github.com/intuitem/ciso-assistant-community/releases/tag/v4.1.0 https://github.com/intuitem/ciso-assistant-community/releases/tag/v4.1.0 Sat, 03 Oct 2026 23:17:38 GMT CISO Assistant v4.1.0 adds BSI C5 2026 framework, MCP risk-review write tools, CSV/XLSX entity-assessment export, and a new user-creator group.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠ • Adds `user-creator` builtin group to control which users can create new accounts.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠ • Adds export of entity assessments to CSV and XLSX formats in the TPRM module. • Adds MCP risk-review write tools with actor resolution for automated risk-review workflows. • Adds BSI C5 Criteria Catalogue 2026 framework in English and German. • Adds `compute` action for CEL arithmetic expressions in workflows. • Adds `asset-focus` secondary mode to the asset whiteboard for an asset-centric view. • Adds German email templates for localized user notifications. • Delivers multiple UI/UX improvements to the EBIOS RM module. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/ciso-assistant https://github.com/intuitem/ciso-assistant-community/releases/tag/v4.0.8 https://github.com/intuitem/ciso-assistant-community/releases/tag/v4.0.8 Wed, 30 Sep 2026 21:45:40 GMT CISO Assistant v4.0.8 adds SCF 2026.3, cross-domain whiteboard assets, inline control linking, and custom audit scoring without cloning.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠ • Adds the SCF 2026.3 compliance framework to the library.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠ • Enables pulling assets from external domains on the whiteboard. • Adds 'create' and 'select-existing' buttons directly on linked-object tabs in applied controls, reducing navigation steps when associating controls. • Introduces a new way to set a custom score on an audit without cloning the framework. • Delivers a better implementation of the Essential Eight framework in the library. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/ciso-assistant https://github.com/intuitem/ciso-assistant-community/releases/tag/v4.0.7 https://github.com/intuitem/ciso-assistant-community/releases/tag/v4.0.7 Sat, 26 Sep 2026 22:24:42 GMT CISO Assistant v4.0.7 adds in-app notifications, audit log download, risk trajectory, domain-level x-rays, and Mermaid diagram support.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠ • Adds in-app notifications center for real-time alerts within the platform.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠ • Adds downloadable audit log (pro) so teams can export a full activity trail. • Adds risk trajectory and projection view to track how risk posture changes over time. • Adds domain-level x-rays checks to surface compliance and control gaps at the domain scope. • Adds x-rays flagging for active controls that lack evidence, with a reworked x-rays page. • Adds Mermaid diagram support in markdown documentation fields. • Adds batch mode on applied controls to set an ETA date across multiple controls at once. • Adds real TTP techniques exposed on EBIOS operational scenarios. • Adds support for applied controls on audit via the data wizard and CLI. • Adds more workflow enablers — documents, tasks, and validations — and improved AI blocks. • Allows users to redefine their own feature flags within the boundaries of their organisation. • Adds custom command/args, Qdrant image, and managed OIDC key options to the Helm chart. • Adds controls status column to the findings binder view. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/ciso-assistant https://github.com/intuitem/ciso-assistant-community/releases/tag/v4.0.5 https://github.com/intuitem/ciso-assistant-community/releases/tag/v4.0.5 Sat, 19 Sep 2026 22:11:30 GMT CISO Assistant v4.0.5 adds MITRE ATT&CK for ICS/Mobile, OWASP Agentic Top 10, tabular mapping, mini graph explorer, and extended SSO scopes.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠ • Supports additional OIDC scopes in SSO configuration.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠ • Adds MITRE ATT&CK library coverage for ICS and mobile platforms. • Adds OWASP Top 10 for Agentic Applications 2026 as a library. • Adds a findings tab to the task detail view. • Enables picking existing findings when performing a requirement assessment. • Adds tabular mode for viewing mapping data. • Introduces a mini graph explorer and an experimental visual mode for domains management. • Extends the command palette with more capabilities and broader search coverage. • Adds alternate rendering modes for breakdown charts. • Adds proper API pagination support for Power BI integration. • Extends workflow enablers to cover evidences, tasks, and metrics use cases. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/ciso-assistant https://github.com/intuitem/ciso-assistant-community/releases/tag/powerbi-v1.1.0 https://github.com/intuitem/ciso-assistant-community/releases/tag/powerbi-v1.1.0 Sat, 19 Sep 2026 12:39:54 GMT CISO Assistant Power BI connector gains proper API pagination and additional report dimensions.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠ • Adds proper API pagination to the Power BI connector, enabling full dataset retrieval across large CISO Assistant instances.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠ • Expands available dimensions in the Power BI connector for richer reporting coverage. • Ships `CisoAssistant-starter.pbit` starter report template with every connector release, requiring only an instance URL entered as `BaseUrl` on first open. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/ciso-assistant https://github.com/intuitem/ciso-assistant-community/releases/tag/v4.0.3 https://github.com/intuitem/ciso-assistant-community/releases/tag/v4.0.3 Sun, 13 Sep 2026 21:00:37 GMT CISO Assistant v4.0.3 lets admins enforce a date format across all users.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠ • Adds admin ability to force a date format for all users across the instance.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠ Full history on Cyber Toolchain: https://cybertoolchain.io/tools/ciso-assistant https://github.com/intuitem/ciso-assistant-community/releases/tag/v4.0.2 https://github.com/intuitem/ciso-assistant-community/releases/tag/v4.0.2 Sat, 12 Sep 2026 23:04:13 GMT CISO Assistant v4.0.2 adds AI-powered workflows, TPRM domain export/import, date filters, quick-form requests, and German NIS2 translations.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠ • Adds AI call support to workflows, enabling automated AI-driven steps within CISO Assistant workflow definitions.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠ • Carries the full TPRM ecosystem (third-party risk management data) through domain export/import operations. • Adds date filters across the platform for narrowing object lists by date ranges. • Adds a requests management system accessible through quick forms for streamlined intake. • Adds a context menu action to quickly add a custom-metric-sample directly from the UI. • Reworks the audit table-mode in the frontend with an updated layout and interaction model. • Unifies PDF report exports under a single new rendering engine with a consistent layout across all report types. • Supports importing applied controls and owners together with findings via the data-wizard. • Adds German NIS2 ENISA translations to the framework library. • Adds an `is_published` field controlled at the Folder level for publication state management. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/ciso-assistant https://github.com/intuitem/ciso-assistant-community/releases/tag/v4.0.1 https://github.com/intuitem/ciso-assistant-community/releases/tag/v4.0.1 Sat, 05 Sep 2026 23:35:20 GMT CISO Assistant v4.0.1 adds URL custom fields, reopenable requirement assignments, findings/TPRM evolutions, and clickable compliance badges. • Adds `URL` type for custom fields, enabling hyperlink values to be stored and displayed on any entity. • Adds the ability to reopen a requirement assessment's assignment after it has been submitted. • Introduces findings and TPRM (Third-Party Risk Management) evolutions as a major feature epic. • Improves tasks and evidences with additional capabilities. • Makes badges clickable on compliance assessments for faster navigation. • Shows category prefix in control autocompletes for clearer control identification. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/ciso-assistant https://github.com/intuitem/ciso-assistant-community/releases/tag/v3.21.4 https://github.com/intuitem/ciso-assistant-community/releases/tag/v3.21.4 Tue, 01 Sep 2026 21:24:02 GMT CISO Assistant v3.21.4 adds JIT SSO provisioning, expanded workflow enablers, and updated Dutch translations. • Adds Just-in-Time (JIT) provisioning for SSO: user accounts are automatically created on first SSO login, eliminating manual pre-provisioning. • Expands workflow capabilities with more enablers and sample workflows. • Adds updated Dutch (nl) translations for the UI. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/ciso-assistant https://github.com/intuitem/ciso-assistant-community/releases/tag/v3.21.3 https://github.com/intuitem/ciso-assistant-community/releases/tag/v3.21.3 Wed, 26 Aug 2026 20:45:26 GMT CISO Assistant v3.21.3 adds UNESCO AI maturity framework, expanded workflow object registry, and audit tree requirement filtering. • Adds filtering on the audit tree to show only requirements without controls or evidences, making compliance gap identification faster. • Expands the workflow engine's `read_objects` registry to include requirements, risk objects, and validations, enabling workflows to act on a broader set of objects. • Enables the workflow engine to write objects, schedule actions by date, and detect bulk edits as triggers. • Adds the UNESCO AI Maturity Framework as a new library entry for AI governance assessments. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/ciso-assistant https://github.com/intuitem/ciso-assistant-community/releases/tag/v3.21.2 https://github.com/intuitem/ciso-assistant-community/releases/tag/v3.21.2 Thu, 20 Aug 2026 21:51:43 GMT CISO Assistant v3.21.2 adds ISO 27701-2025 support, manual score overrides, and per-template email toggles. • Adds per-template toggle to disable individual outgoing emails in the mailing system, giving administrators fine-grained control over which notifications are sent. • Adds the ISO 27701-2025 framework outline to the library, enabling privacy information management assessments against the updated standard. • Enables manual override of question-driven scores, allowing assessors to adjust computed scores without being locked to automated answers. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/ciso-assistant https://github.com/intuitem/ciso-assistant-community/releases/tag/v3.21.1 https://github.com/intuitem/ciso-assistant-community/releases/tag/v3.21.1 Mon, 17 Aug 2026 00:46:05 GMT CISO Assistant v3.21.1 adds MCP HTTP transport, CyFun2025/ISO27001 mapping, TPRM audit link modes, and a streamlined approval UI. • Adds `http` transport support to the aggregated MCP (Model Context Protocol) architecture, expanding AI coverage and reducing token usage on context. • Adds CyFun2025 and ISO27001 framework mapping to the library (`lib`). • Adds audit link mode options in the TPRM data wizard for entity configuration. • Adds an 'assignee null' option to the evidences filters list, allowing filtering for unassigned evidence items. • Adds optional authors columns to assessments views. • Adds `check_library_v2.py` tool for library validation. • Conditionally enables incidents in analytics based on configuration. • Delivers a streamlined interface for approval management. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/ciso-assistant https://github.com/intuitem/ciso-assistant-community/releases/tag/v3.21.0 https://github.com/intuitem/ciso-assistant-community/releases/tag/v3.21.0 Sat, 08 Aug 2026 22:58:27 GMT CISO Assistant v3.21.0 adds TTP/threat modeling with MITRE ATLAS, a visual workflow engine, focus-scoped permissions, and service account management. • Introduces TTP support and threat modeling capabilities, including the MITRE ATLAS framework. • New visual workflow engine with a drag-and-drop builder for automating security processes. • Adds focus-mode with scoped permissions and enhanced user context controls. • Service account management (pro) for programmatic access. • Adds Cwb (NIS2) Control Framework plus additions and updates to existing framework tools. • Adds plumber CI/CD hardening checks library. • Asset classes are now fully customizable and can render as a full hierarchical tree. • Adds status tracking to findings-assessments. • Adds progress percentage calculation based on status to documents. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/ciso-assistant https://github.com/intuitem/ciso-assistant-community/releases/tag/v3.20.8 https://github.com/intuitem/ciso-assistant-community/releases/tag/v3.20.8 Tue, 04 Aug 2026 21:40:45 GMT CISO Assistant v3.20.8 adds AI-driven risk assessment import via chat and ANSSI industrial cybersecurity library support. • Adds support for importing risk assessments through the AI chat interface. • Adds the ANSSI 'la cybersécurité des systèmes industriels - mesures détaillées' framework library. • Updates Dutch (NL) and Ukrainian translations. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/ciso-assistant https://github.com/intuitem/ciso-assistant-community/releases/tag/v3.20.7 https://github.com/intuitem/ciso-assistant-community/releases/tag/v3.20.7 Mon, 03 Aug 2026 22:31:01 GMT CISO Assistant v3.20.7 adds richer AI chat context and lets you rename qualifications to risk categories. • Allows renaming of qualifications to risk categories. • Adds more context to in-window AI chat sessions. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/ciso-assistant https://github.com/intuitem/ciso-assistant-community/releases/tag/v3.20.6 https://github.com/intuitem/ciso-assistant-community/releases/tag/v3.20.6 Sat, 01 Aug 2026 21:00:54 GMT Breaking changes: • Old invalid Implementation Groups are pruned when updating a framework — existing mappings to invalid groups will be removed on framework update. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/ciso-assistant https://github.com/intuitem/ciso-assistant-community/releases/tag/v3.20.5 https://github.com/intuitem/ciso-assistant-community/releases/tag/v3.20.5 Sat, 01 Aug 2026 17:59:46 GMT CISO Assistant v3.20.5 adds LPM/OIV metrics definitions, cybersecurity metrics translations, and expanded evidence file previews. • Adds 10 LPM/OIV required metrics definitions to the library, supporting regulated French operators of vital importance. • Adds translations for core cybersecurity metrics. • Expands in-platform preview support to additional evidence file types. Breaking changes: • Old invalid Implementation Groups are pruned when updating a framework — existing mappings to invalid groups will be removed on framework update. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/ciso-assistant https://github.com/intuitem/ciso-assistant-community/releases/tag/v3.20.4 https://github.com/intuitem/ciso-assistant-community/releases/tag/v3.20.4 Tue, 28 Jul 2026 22:01:51 GMT CISO Assistant v3.20.4 adds full TPRM domain export/import, evidence on exceptions, batch asset BIA, AI file uploads, and posture management enhancements. • Includes the full Third-Party Risk Management (TPRM) ecosystem in domain export/import operations. • Enriches the ENISA Cyber Resilience Assessment framework with recommended controls. • Enables batch-adding assets to Business Impact Analyses (BIA). • Supports attaching evidence files directly to security exceptions. • Adds more capabilities to posture management. • Enables file uploads in the AI chat for framework import and points to templates in the wizard. • Delivers multiple findings assessment and assets UX improvements. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/ciso-assistant https://github.com/intuitem/ciso-assistant-community/releases/tag/v3.20.3 https://github.com/intuitem/ciso-assistant-community/releases/tag/v3.20.3 Fri, 24 Jul 2026 23:43:19 GMT CISO Assistant v3.20.3 adds TISAX v2027, ENISA Cyber Resiliency frameworks, a Power BI native connector, Slovenian UI, and custom fields on security exceptions. • Adds TISAX v2027 framework library for automotive information security assessments. • Adds ENISA Cyber Resiliency Maturity Assessment Framework library. • Introduces a native Power BI connector for direct integration with CISO Assistant data. • Enables custom fields on security exceptions, extending the existing custom-fields capability to that object type. • Adds Slovenian (sl) language translation to the UI. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/ciso-assistant https://github.com/intuitem/ciso-assistant-community/releases/tag/powerbi-v1.0.1 https://github.com/intuitem/ciso-assistant-community/releases/tag/powerbi-v1.0.1 Thu, 23 Jul 2026 19:11:11 GMT CISO Assistant gains a native Power BI connector for direct BI integration. • New native Power BI connector enables direct integration between CISO Assistant and Power BI for security reporting and dashboards. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/ciso-assistant https://github.com/intuitem/ciso-assistant-community/releases/tag/v3.20.2 https://github.com/intuitem/ciso-assistant-community/releases/tag/v3.20.2 Wed, 22 Jul 2026 17:44:13 GMT CISO Assistant v3.20.2 adds full GDPR processing register export/import and CyFun 2025 Excel import support. • Adds full export/import support for GDPR processing records, enabling backup and migration of processing register data. • Supports importing CyFun 2025 assessments via Excel, extending the list of supported frameworks for ingestion. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/ciso-assistant https://github.com/intuitem/ciso-assistant-community/releases/tag/v3.20.0 https://github.com/intuitem/ciso-assistant-community/releases/tag/v3.20.0 Tue, 21 Jul 2026 21:39:24 GMT CISO Assistant v3.20.0 adds technical posture management, SSO single logout, MCP maturity scores, domain export, and a library builder. • New technical posture management capability for tracking and assessing technical security posture. • Implements Single Logout (SLO) for both OIDC and SAML authentication providers. • MCP integration now exposes maturity scores, enabling AI-driven access to assessment data. • New CLI domain export capability for extracting domain data. • New in-product library builder with requirement weight support, enabling custom framework authoring. • Allows changing the domain of an EBIOS-RM study. • Domain managers can now change group members directly. • Adds ABDO 2019 framework to the built-in library. • Complete Czech localization added. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/ciso-assistant https://github.com/intuitem/ciso-assistant-community/releases/tag/v3.19.2 https://github.com/intuitem/ciso-assistant-community/releases/tag/v3.19.2 Fri, 10 Jul 2026 22:22:22 GMT CISO Assistant v3.19.2 adds asset sync for ServiceNow, reworked risk acceptance workflow, expanded documents management, and Slovak localization. • Supports attaching evidences to data breach records. • Adds extra status options for findings tracking and exceptions. • Adds an autologin page capability. • Adds Slovak (sk) localization. • Adds more customization options for GDPR Processings. • Supports Import/Export of Representatives via the Data Wizard. • Adds ServiceNow asset sync with schema caching via startup warming and manual refresh. • Adds task template import functionality to the Data Wizard and CLI. • Adds the NCA ECC-2:2024 (Essential Cybersecurity Controls) framework. • Expands document management capabilities (documents management epic). • Extends audit log coverage to settings changes and additional objects. • Reworks the risk acceptance workflow. • Allows column selection on nested action plans. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/ciso-assistant https://github.com/intuitem/ciso-assistant-community/releases/tag/v3.19.1 https://github.com/intuitem/ciso-assistant-community/releases/tag/v3.19.1 Tue, 30 Jun 2026 18:21:21 GMT CISO Assistant v3.19.1 adds applied control progress as a selectable column and multiple import improvements. • Adds applied control progress as a selectable column in list views, surfacing remediation status at a glance. • Delivers multiple import improvements for loading controls and frameworks. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/ciso-assistant https://github.com/intuitem/ciso-assistant-community/releases/tag/v3.19.0 https://github.com/intuitem/ciso-assistant-community/releases/tag/v3.19.0 Mon, 29 Jun 2026 20:38:29 GMT CISO Assistant v3.19.0 adds SCIM provisioning, offline AI embedding, managed portals, and admin MFA reset • Adds SCIM provisioning and IdP groups mapping for automated user lifecycle management. • Pre-bakes embedding and reranker models into the image for fully offline AI assistant operation (expect larger image size). • Introduces managed portals feature. • Enables admins to reset MFA for other users. • Adds typical evidence and annotation fields to audit/framework Excel exports. • Allows manual implementation groups on dynamic frameworks. • Makes collection creation optional when starting new projects (PMBOK). • Allows admins to disable the 'partially compliant' compliance option. • Helm chart gains CA certificate support, network policy configuration, and AI assistant support. • Completes Italian translation to 100%. • Increases OIDC state and nonce length for improved security posture. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/ciso-assistant https://github.com/intuitem/ciso-assistant-community/releases/tag/v3.18.3 https://github.com/intuitem/ciso-assistant-community/releases/tag/v3.18.3 Mon, 22 Jun 2026 22:30:44 GMT Show evidence for domains directly in the UI and centralize field rendering. • Adds the ability to view associated evidence items directly within a domain's view. • Centralizes the rendering logic for folder and domain fields in `ModelForm.svelte` for consistent UX. Breaking changes: • Hardened IAM checks on the integration and decomission fallback login endpoint may affect existing integrations that relied on permissive access. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/ciso-assistant https://github.com/intuitem/ciso-assistant-community/releases/tag/v3.18.3 https://github.com/intuitem/ciso-assistant-community/releases/tag/v3.18.3 Mon, 22 Jun 2026 22:30:44 GMT CISO Assistant v3.18.3 adds evidence visibility within domains and centralized domain field rendering in forms. • Displays evidence items within their domain view, making it easier to review evidence by organizational scope. • Centralizes folder/domain field rendering across model forms for a consistent UI experience. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/ciso-assistant https://github.com/intuitem/ciso-assistant-community/releases/tag/v3.18.2 https://github.com/intuitem/ciso-assistant-community/releases/tag/v3.18.2 Sat, 20 Jun 2026 02:22:57 GMT CISO Assistant v3.18.2 adds dark mode UI, custom fields for Pro users, and evidence export to audit action plans. • Adds `dark mode` toggle in the UI theme settings • Adds `custom fields` capability in the Pro edition for modeling additional attributes on entities • Adds `evidences` column/section to the audit action plan export output Full history on Cyber Toolchain: https://cybertoolchain.io/tools/ciso-assistant https://github.com/intuitem/ciso-assistant-community/releases/tag/v3.18.1 https://github.com/intuitem/ciso-assistant-community/releases/tag/v3.18.1 Mon, 15 Jun 2026 22:25:58 GMT CISO Assistant v3.18.1 adds mapping-from relationships and audit log forwarding • Adds 'mapping from' capability to allow frameworks to reference other frameworks as sources • Introduces audit log forwarding for pro subscriptions Full history on Cyber Toolchain: https://cybertoolchain.io/tools/ciso-assistant https://github.com/intuitem/ciso-assistant-community/releases/tag/v3.18.0 https://github.com/intuitem/ciso-assistant-community/releases/tag/v3.18.0 Sun, 14 Jun 2026 01:07:25 GMT CISO Assistant v3.18.0 adds CCC-1:2020 framework support, dynamic Jira field mappings, per-object audit trails, and minimal JSON logging. • Add `CCC-1:2020` (NCA Cloud Cybersecurity Controls - Saudi Arabia) framework • Add `dynamic field/value mappings for Jira with auto-suggested defaults` in integrations • Add `audit trail per object` in the Pro edition • Add `minimal json logger on frontend and align default logs level` Breaking changes: • Dependencies management switched from `poetry` to `uv`. If you have local scripting or configuration relying on poetry, replace references to it with `uv`. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/ciso-assistant https://github.com/intuitem/ciso-assistant-community/releases/tag/v3.17.3 https://github.com/intuitem/ciso-assistant-community/releases/tag/v3.17.3 Tue, 09 Jun 2026 01:01:21 GMT CISO Assistant v3.17.3 adds NCNICC-1:2025 framework support and UI tweaks • `steps`: Add 'NCNICC-1:2025 (NCA - Saudi Arabia)' as a selectable framework in the tool • `steps`: View ID before Name in all forms with category moved to front section for applied controls Full history on Cyber Toolchain: https://cybertoolchain.io/tools/ciso-assistant https://github.com/intuitem/ciso-assistant-community/releases/tag/v3.17.2 https://github.com/intuitem/ciso-assistant-community/releases/tag/v3.17.2 Fri, 05 Jun 2026 21:59:29 GMT CISO Assistant v3.17.2 adds ABRO Framework support, MCP vulnerability CRUD, cost breakdowns, and SSO redirect handling • `feat(lib): ABRO Framework` is now supported as a built-in framework library. • The `MCP server` now exposes `vulnerability CRUD` operations (create, read, update, delete) for vulnerabilities managed by the cyber tooling. • The `MCP server` adds support for querying `asset classes`. The MCP server also supports reading richer risk scenario data. • `feat: tables columns selector` adds a UI control allowing users to customize which columns are displayed in table views. • `feat: show description for task’s occurrence` adds the description field display to task occurrences in the UI. • `feat: cost breakdown on action plan` adds a cost breakdown view to the action plan interface. • `feat: implement sso redirect handling` enables SSO flows that return users to their originally requested URL after authentication. • `feat(ui): add journey's preset filter` adds a preset filter for `journey` in the library list UI. • `feat: support 1-3 properties scale on assets` allows assigning values on a 1-3 scale for up to three custom properties on asset objects. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/ciso-assistant https://github.com/intuitem/ciso-assistant-community/releases/tag/v3.17.1 https://github.com/intuitem/ciso-assistant-community/releases/tag/v3.17.1 Wed, 03 Jun 2026 00:52:09 GMT CISO Assistant v3.17.1 adds Prometheus metrics endpoint, audit aggregation through ancestors, and configurable date format. • Adds a `/metrics` endpoint for Prometheus metrics fetching • Enables audit aggregation through ancestors for inherited findings Full history on Cyber Toolchain: https://cybertoolchain.io/tools/ciso-assistant https://github.com/intuitem/ciso-assistant-community/releases/tag/v3.17.0 https://github.com/intuitem/ciso-assistant-community/releases/tag/v3.17.0 Sat, 30 May 2026 19:36:44 GMT CISO Assistant v3.17.0 adds OIDC strict state/nonce mode for tighter authentication security. • Adds `oidc.strict_state_nonce` configuration option to enforce strict State and Nonce validation in OIDC integrations Full history on Cyber Toolchain: https://cybertoolchain.io/tools/ciso-assistant https://github.com/intuitem/ciso-assistant-community/releases/tag/v3.16.7 https://github.com/intuitem/ciso-assistant-community/releases/tag/v3.16.7 Thu, 28 May 2026 22:05:54 GMT CISO Assistant v3.16.7 adds project management structure, xlsx analytics export, and per-node score scales. • Introduces `project management` functionality to organize assessment scope • Adds `xlsx` export format for Analytics data to enable Power BI integration • Enables `auditee mode` by default via feature flags • Enables `advanced analytics` by default via feature flags • Allows adding `justification` when an approver checks the risk acceptance • Supports `score scale` configuration at the `requirement node level` Breaking changes: • Upgrades psycopg2 to psycopg3, requiring a database driver migration Full history on Cyber Toolchain: https://cybertoolchain.io/tools/ciso-assistant https://github.com/intuitem/ciso-assistant-community/releases/tag/v3.16.6 https://github.com/intuitem/ciso-assistant-community/releases/tag/v3.16.6 Sat, 23 May 2026 22:12:27 GMT Adds framework-driven reporting across domains and analytics to applied controls • `feat: framework-driven reporting across domains` - New capability to generate reports spanning multiple compliance frameworks simultaneously. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/ciso-assistant https://github.com/intuitem/ciso-assistant-community/releases/tag/v3.16.5 https://github.com/intuitem/ciso-assistant-community/releases/tag/v3.16.5 Tue, 19 May 2026 22:26:24 GMT CISO Assistant v3.16.5 adds BIA/follow-up support in Perimeters and NCSC CAF v4.0 framework coverage • `Perimeter` objects now include Business Impact Assessment (BIA) data and follow-up tracking • Adds support for the NCSC Cyber Assessment Framework (CAF) version 4.0 Full history on Cyber Toolchain: https://cybertoolchain.io/tools/ciso-assistant https://github.com/intuitem/ciso-assistant-community/releases/tag/v3.16.3 https://github.com/intuitem/ciso-assistant-community/releases/tag/v3.16.3 Sat, 16 May 2026 18:06:17 GMT CISO Assistant v3.16.3 adds RACI/RASCI/RAPID matrix, EBIOS RM/Egerie import, AI Defense Matrix, KSA PDPL framework, and Estonian UI. • Adds support for responsibility matrix types RACI, RASCI, and RAPID for task and control ownership mapping. • Supports importing EBIOS RM studies in Egerie format. • Adds the AI Defense Matrix framework to the built-in library. • Adds KSA's PDPL (Personal Data Protection Law) framework to the built-in library. • Adds Estonian language support to the UI. • Adds label support on tasks for categorization and filtering. • Introduces an export modal in the UI to provide context and improve discoverability of export options. • Adds slider inputs for number and single-choice fields in the framework builder. • Internationalizes the framework builder UI. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/ciso-assistant https://github.com/intuitem/ciso-assistant-community/releases/tag/v3.16.2 https://github.com/intuitem/ciso-assistant-community/releases/tag/v3.16.2 Mon, 11 May 2026 20:37:02 GMT Adds asset creation wizard, customer questionnaire prefill wizard, and folder tree writable permission handling • Adds `feat(exp): UI mode to create and link assets` for guided asset setup • Adds `feat(exp): specialized wizard for customer questionnaire prefill` to accelerate compliance responses • Adds `feat: add new record consumers and enhance data import commands with detailed help descriptions` to clarify available CLI actions • Adds `feat: add writable permission handling to folder tree selection` to enforce access controls during UI navigation Full history on Cyber Toolchain: https://cybertoolchain.io/tools/ciso-assistant https://github.com/intuitem/ciso-assistant-community/releases/tag/v3.16.1 https://github.com/intuitem/ciso-assistant-community/releases/tag/v3.16.1 Sun, 03 May 2026 00:38:46 GMT CISO Assistant v3.16.1 adds Azure Blob Storage support and a new journeys editor with respondent mode for third parties • Adds `Azure Blob Storage` support as an alternative storage backend to S3. • Introduces the `journeys editor` for creating assessment workflows. • Enables `respondent mode` for third-party assessments, including auto-generated questions for respondents. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/ciso-assistant https://github.com/intuitem/ciso-assistant-community/releases/tag/v3.16.0 https://github.com/intuitem/ciso-assistant-community/releases/tag/v3.16.0 Sat, 25 Apr 2026 05:21:40 GMT CISO Assistant v3.16 adds incident action plans, risk scenario cancellation, applied control merging, and data wizard attributes. • Adds `Action plan for incidents` feature to track remediation steps • Adds `cancelled status for risk scenario` to track abandoned risks • Adds `merge applied controls` capability in the UI • Adds `Asset.is_business_function` attribute in Data Wizard exports • Adds `detected_at` and `due_date` support during vulnerability import via wizard • Adds `exception in the past` entry capability for compliance exceptions • Adds `button to reset filters on table` and clear out cache in UI • Adds `custom dashboard on the analytics' extra tab` for admins • Adds `Context menu for vulnerabilities` to quickly toggle severity and status • Adds `description column` to findings table • Adds `journeys presets can support implementation groups and generic pages` capability • Adds Règles OIV - Secteur "Transport Aérien" (2016) framework library entry • Adds `Cadre de Conformité Cyber France (3CF) v3.1` framework library entry • Adds loi marocaine n° 09-08 relative à la protection des données personnelles (CNDP) framework library entry • Adds `enriched NIST CSF 2.0 with recommendations` in the library • Adds `Claude skill to prepare mappings` integration • Adds `extra volumes and affinity config` options in Helm chart Full history on Cyber Toolchain: https://cybertoolchain.io/tools/ciso-assistant https://github.com/intuitem/ciso-assistant-community/releases/tag/v3.15.9 https://github.com/intuitem/ciso-assistant-community/releases/tag/v3.15.9 Thu, 16 Apr 2026 21:19:26 GMT CISO Assistant v3.15.9 adds a --name flag for CLI assessments, Cyfun audit export, and links in task emails • Adds `--name` flag to the CLI assessment commands to name assessments during creation • Adds support for exporting audits in Cyfun format via the existing export UI/API • Adds links and detailed task list variables to task email templates sent to users • Adds a link attribute to the exception model to associate related references with exceptions Full history on Cyber Toolchain: https://cybertoolchain.io/tools/ciso-assistant https://github.com/intuitem/ciso-assistant-community/releases/tag/v3.15.8 https://github.com/intuitem/ciso-assistant-community/releases/tag/v3.15.8 Tue, 14 Apr 2026 18:56:17 GMT CISO Assistant v3.15.8 adds TPRM exports, DORA subcontracting chain handling in ROI, and a new 'average of averages' scoring logic. • Adds TPRM (Third-Party Risk Management) export capability • Enables handling of subcontracting chains in ROI exports for DORA compliance • Implements an 'average of averages' scoring approach to match Cyfun 2025 logic Full history on Cyber Toolchain: https://cybertoolchain.io/tools/ciso-assistant https://github.com/intuitem/ciso-assistant-community/releases/tag/v3.15.6 https://github.com/intuitem/ciso-assistant-community/releases/tag/v3.15.6 Sat, 11 Apr 2026 01:45:31 GMT CISO Assistant v3.15.6 adds batch label actions for applied-controls and findings, a new DGSSI framework, EUDIRF HLRs support, EBiOS-RM light mode, and timeline visualization • Supports batch actions on labels for applied-controls and findings • Adds DGSSI Exigences de Qualification de Services Cloud framework (Morocco, arrêté 3-17-25) • Adds support for French National Authority for Health certification for quality of care • Adds EUDI Wallet ARF HLRs in the library • Adds new timeline visualization with better performance and UX Full history on Cyber Toolchain: https://cybertoolchain.io/tools/ciso-assistant https://github.com/intuitem/ciso-assistant-community/releases/tag/v3.15.3 https://github.com/intuitem/ciso-assistant-community/releases/tag/v3.15.3 Tue, 07 Apr 2026 20:23:09 GMT CISO Assistant v3.15.3 adds security key authentication (FIDO2), orphan control identification, and NIST CSF 2.0 support • Add `ANSHospiConnect` HOPEN2 Program Library to available framework libraries • Enable security keys (FIDO2, fingerprint) as a second authentication factor • Identify orphan controls in the control set Full history on Cyber Toolchain: https://cybertoolchain.io/tools/ciso-assistant