v3.3

Published: 28.03.2025

New Features

• Added integration with Moodle to enable the creation and tracking of learning activities. For this purpose the Learning Activities, Learning User Activities, Learning Course Completions, Learning Survey Completions grids have been added to Security Assurance - Human Risk Management.

• Added Maturity Assessment Information Sources and Categories under GRC at the MSSP level. The information is then propagated to the organization level under GRC Settings using a scheduled job.

• Added CISO Dashboard after Risk Overview dashboard. The dashboard presents Maturity Score, Top Actions, Historical Activity, Maturity History, and Risk by Types.

• Added AI Feedback Question at the MSSP level, synchronized to the organization level. Organizations can Enable/Disable AI questions. AI questions run automatically, and results are retrieved accordingly.

• Added CrowdStrike Health Check. Implemented CrowdStrike Policy, which automatically creates a CrowdStrike folder upon configuration and sends data to Asset - CrowdStrike Analysis Grid.

• Added DORA, Cyber Essentials and ISO 27001 mappings to GRC for enhanced compliance and risk management.

• Added Test Agent Version Group (in Group Management) for every OS. Moved Agent Settings to the Group Management grid. Added Latest Version Testing Interval (Days) to Agent Settings.

• Added AI Vulnerability Assessment, AI Vulnerability Feedback and AI Remediation Recommendation columns to Windows Applications, Linux RPM packages, Linux DEB packages and macOS Applications Grids. AI results come automatically.

• Added Meetings Object to GRC - ToDo & Projects & Meetings. Users can now create a Meeting in GRC, specifying the Agenda, Attendees, Related Controls, Documents, Evidences, and Risks.

• Added ISO and CIS mappings display based on the main control in Control Activity.

Improvements

• Improved charts size on Asset, Domain Overview and External Exposure Dashboards.

• Improved performance of Windows Event Logs Analysis.

• Improved ToDo functionality by adding a filter dropdown next to "Add Task" with options "Show All" and "Show Active". Enabled reordering for left-side lists. Enhanced task names with highlighting and enabled click-to-edit functionality.

• Improved Shadow IT by making numbers clickable, opening the artifact in a new tab. Added "Append to Classification Rule from Row Values" and "New Classification Rule from Row Values" actions under the "..." menu, similar to Aggregation. Introduced a "Show AI-Results" icon next to "Show Permitted", which adds AI Score and AI Response fields to the grid and refreshes the view.

• Improved Security Control Results Grid with adding new columns.

• Added MacOS Applications, Linux DEB Packages, Linux RPM Packages to Vulnerability Dashboard.

• Added Risk Identifier column to the Risk and Opportunity Management.

• Added Type column to the Control Management.

• Updated Control Activity by adding the Main Control, an Answer, Answer Type , Answer Options, Category, Sub-Category, Question Logic and Recommendation. Additionally, introduced a Notes section as a new tab after Activities.

• Updated Controls by adding the Answer Type, Answer Options, Category, Sub-Category, Question Logic, Recommendation.

• Moved GoPhish Phishing Campaigns to Human Risk Management.

• Removed Policy Execution Log from the Policy.

• Removed CrowdStrike ID column from the CrowdStrike Event grid.

• Removed Security Assurance - Software Management in MSSP

Bug fixes

• Fixed an issue with duplicate CrowdStrike hosts in the Device Management grid.

• Fixed autofit for CrowdStrike Events grid.

• Fixed an error when adding a Hostname to the Devices List.

• Fixed an issue where Windows Hardening data appeared incorrectly on the Risk Overview dashboard.

• Fixed an issue where Security Controls results did not come for Mac and Linux.

• Fixed an issue where Policy was not displayed for MacOS groups in the Group Management grid.

• Fixed an issue with duplicate records in Windows Login Activity Tracking.

• Fixed Windows Application Sync from CLAPI.

• Fixed an issue where incident creation failed due to a duplicate title. Now, a warning is displayed, and the incident remains open for editing instead of requiring a restart.

• Fixed an issue with the Organization Threat Score Calculator job.