https://cybertoolchain.io/tools/risk-ledger New releases and features in Risk Ledger, tracked by The Cyber Toolchain. en Mon, 12 Oct 2026 08:08:09 GMT https://www.riskledger.com/changelog https://www.riskledger.com/changelog Mon, 12 Oct 2026 08:08:09 GMT Risk Ledger adds client-managed supplier documents, peer review sharing with permission controls, and network map density tuning.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠ • Adds a dedicated document storage space within any supplier profile, visible only to your organisation, so desk-research files and supplier-sent packs are kept alongside the rest of your supplier records.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠ • Adds expiry-date tracking on uploaded documents, triggering reminders 30 days before and on the day a document expires. • Adds a permission framework for Community Review Sharing, letting federated organisations and selected communities control which data points are shared and with which peers. • Adds the ability to share reviews and review signals with peers in a community, so a central team can review suppliers on behalf of members. • Adds network map density controls — choose how many nth parties to display, hide the wider Risk Ledger network, and toggle node animations on or off to keep large maps fast and focused. • Adds a 'Suggest a contact' option on the supplier Overview page under 'Last sign in' for suppliers inactive for a year or more, so you can nominate someone to take over a dormant profile. Breaking changes: • The previous 'community signals' feature has been retired and replaced by Community Review Sharing. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/risk-ledger https://www.riskledger.com/changelog# https://www.riskledger.com/changelog# Mon, 01 Jun 2026 00:00:00 GMT Resizables review panels with pinned context and new Supplier Pipeline status tracking in Risk Ledger June 2026 update • Resizable review panel that persists per device across all drawers in Risk Ledger • Supplier answer, notes and evidence pinned at the top of the assessment review drawer to maintain context • Pipeline status field allowing you to tag suppliers as In Tender, Pre-Contract, In Contract or Other Full history on Cyber Toolchain: https://cybertoolchain.io/tools/risk-ledger https://www.riskledger.com/changelog# https://www.riskledger.com/changelog# Fri, 01 May 2026 00:00:00 GMT New network map navigation features and expanded risk report exports • Adds click-through navigation to supplier profiles directly from the network map • Enables opening risks for any supplier in the supply chain via the network map • Includes Note content and author name in Risk Report exports Full history on Cyber Toolchain: https://cybertoolchain.io/tools/risk-ledger https://www.riskledger.com/changelog# https://www.riskledger.com/changelog# Wed, 01 Apr 2026 00:00:00 GMT Risk Ledger April 2026 adds control/domain reviewer assignments, IAF certificate discovery, and a redesigned assessment UI • `Reviewers` can now be assigned to specific `controls` and `domains`, with tasks surfaced in the `Action Centre`. • `Certificate Discovery` integrates with the International Accreditation Forum (IAF) to surface supplier ISO certification data. • Assessment view redesign places controls in a right-hand panel, domains in a left sidebar, and filters at the top. • Improved organisation search adds flexible matching, infinite scroll, and a unified discovery modal. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/risk-ledger https://www.riskledger.com/changelog# https://www.riskledger.com/changelog# Sun, 01 Mar 2026 00:00:00 GMT Redesigned Action Centre consolidates supplier invites, status updates, and remediation management into a single UI view. • Action Centre now centralizes all supplier connection activity (invites, requests, status updates) with direct contact detail editing. • System automatically notifies users when invited emails bounce or fail, preventing lost connections. • Users can now resend invites or connection requests directly from the Action Centre interface without leaving the view. • Supplier-facing Remediation and Merge request tabs are redesigned for clarity, with improved page load speeds. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/risk-ledger https://www.riskledger.com/changelog# https://www.riskledger.com/changelog# Thu, 01 Jan 2026 00:00:00 GMT Automated supplier asset discovery for External Monitoring and January 2026 framework updates • Adds automatic asset discovery to External Monitoring, surfacing security signals across a supplier's full digital footprint without manual input. • Updates the Standardised Assessment Framework (January 2026) with refreshed controls for domains D (IT Operations), E (Software Development), F (Network & Cloud Security), and K (Artificial Intelligence). • Adds Data Protection controls to the Small Framework. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/risk-ledger https://www.riskledger.com/changelog# https://www.riskledger.com/changelog# Mon, 01 Dec 2025 00:00:00 GMT Risk Ledger adds direct search and multi-party path tracing on network maps with External Monitoring for unaccepted connections. • Adds the ability to search for specific organisations directly from the network map. • Enables tracing the path from any nth-party back to your organisation within the visualisation. • Introduces filtering options for Criticality, Confidentiality, PII, custom Labels, and network depth on both own and community maps. • Allows viewing scan findings for publicly available domains on Unclaimed Profiles and Basic Connections before a supplier accepts a connection request. • Sends notifications with supplier details and instructions when connection request emails bounce. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/risk-ledger https://www.riskledger.com/changelog# https://www.riskledger.com/changelog# Sat, 01 Nov 2025 00:00:00 GMT Risk Ledger adds contact email field for unclaimed supplier connections to boost invite acceptance • Adds the ability for Clients to specify a contact email when initiating a connection to an unclaimed supplier profile, enabling immediate invite delivery. • Upgrades the underlying email delivery system across the platform to improve deliverability of invites and reminders. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/risk-ledger https://www.riskledger.com/changelog# https://www.riskledger.com/changelog# Wed, 01 Oct 2025 00:00:00 GMT New control-level visibility for compliance scores, granular emerging threats permissions, and enhanced connection request workflow • Adds control-level visibility to each assessment control showing required policies and compliance status • Enhances supplier profiles with hover tooltips on compliance scores and policy application reasons • Updates domain compliance score colors and network visualization scores to a green-to-red scale • Introduces granular 'view emerging threats' permissions for clients and suppliers in custom roles • Adds contact choice (with or without details) when sending manual connection requests Full history on Cyber Toolchain: https://cybertoolchain.io/tools/risk-ledger https://www.riskledger.com/changelog# https://www.riskledger.com/changelog# Mon, 01 Sep 2025 00:00:00 GMT Risk Ledger adds Light and Dark Mode options in Settings > Appearance. • Adds 'Light mode' to change the entire platform to a white background, including Network Visualisation • Adds 'Dark mode' to enable dark mode throughout the platform • Adds 'Sync with system' option to automatically match device display settings in Settings > Appearance Full history on Cyber Toolchain: https://cybertoolchain.io/tools/risk-ledger https://www.riskledger.com/changelog# https://www.riskledger.com/changelog# Fri, 01 Aug 2025 00:00:00 GMT Risk Ledger introduces Fourth Parties visibility, AI Policy control K1, and supplier collaboration tools • Adds Fourth Parties visibility to map critical dependencies beyond direct suppliers in the Network Visualisation tool. • Introduces 'Informational' filter in the External Monitoring Findings table. • Adds a date stamp to all PDF exports for audit evidence snapshots. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/risk-ledger https://www.riskledger.com/changelog https://www.riskledger.com/changelog Fri, 01 Aug 2025 00:00:00 GMT Framework update adds AI Policy control (K1), updates ISO27001/PCI DSS evidence requirements and endpoint scope for endpoints. • Adds a new control question (K1) about AI Policy to assess AI risk governance standards. • Updates MFA control question (D6) to include customer-facing applications. • Expands controls D23-27 from laptops to all endpoints including BYOD. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/risk-ledger https://www.riskledger.com/changelog# https://www.riskledger.com/changelog# Tue, 01 Jul 2025 00:00:00 GMT Risk Ledger beta adds port scanning, Monitoring Dashboard, and enhanced findings navigation for supplier risk assessment. • `port_scanning` capability in External Monitoring (Beta) to automatically check suppliers' digital assets for open ports across remote access, databases, web services, file sharing, and infrastructure • Monitoring Dashboard providing a centralised view on the Supplier Overview displaying a summary of latest scan results • New 'Findings' tab in External Monitoring alongside existing Scans and Assets sections, allowing clients to review across an entire supplier’s assets Full history on Cyber Toolchain: https://cybertoolchain.io/tools/risk-ledger https://www.riskledger.com/changelog# https://www.riskledger.com/changelog# Sun, 01 Jun 2025 00:00:00 GMT June 2025 update adds direct navigation to Network Visualization from Supplier Profiles and enhanced node clarity for supply chain mapping. • Adds ability to jump directly to the network visualisation from any Supplier Profile • Enhances usability with improved supplier identification via hover and click interactions on nodes • Displays compliance score visibility on nodes, using green for completed assessments and white for unclaimed or incomplete profiles Full history on Cyber Toolchain: https://cybertoolchain.io/tools/risk-ledger https://www.riskledger.com/changelog# https://www.riskledger.com/changelog# Thu, 01 May 2025 00:00:00 GMT Product-level answers allow suppliers to set organisational baselines and highlight product-specific control variations for clients. • Suppliers can now set organisational-level answers as a baseline for their entire portfolio • Suppliers can highlight differences where security controls vary by product without duplicating information Full history on Cyber Toolchain: https://cybertoolchain.io/tools/risk-ledger https://www.riskledger.com/changelog# https://www.riskledger.com/changelog# Tue, 01 Oct 2024 00:00:00 GMT Risk Ledger adds a 'standard' framework size with 44 controls for smaller suppliers alongside the existing 'full' 192-control option. • Adds a 'standard' framework size with 44 control questions across security domains, providing a lighter assessment for less critical suppliers. • Allows adjusting the scope of assessment questions based on supplier risk profiles or organizational risk appetite. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/risk-ledger https://www.riskledger.com/changelog# https://www.riskledger.com/changelog# Thu, 01 Feb 2024 00:00:00 GMT Risk Ledger February 2024 introduces Insights Reporting with customisable supplier filters and saved queries • Adds 'Insights Reporting' to identify suppliers meeting specific compliance or certification criteria • Enables creation of 'Customisable Reports' based on user-defined questions for team-wide access • Allows users to 'Save Reports' by bookmarking and naming key queries for regular use Full history on Cyber Toolchain: https://cybertoolchain.io/tools/risk-ledger