> For the complete documentation index, see [llms.txt](https://docs.cloudcyte.com/llms.txt). Markdown versions of documentation pages are available by appending `.md` to page URLs; this page is available as [Markdown](https://docs.cloudcyte.com/release-notes/v4.4.6.md).

# v4.4.6

Published: 14.09.2026

**New Features**

* Added the Assessment Maturity Dashboard under GRC, where an active audit can be selected to see how its controls and activities map onto the risk registry. The dashboard shows which activities are linked to risks and which are not, the risks covered by each control, and the compliance state of every activity. From the same view, control and risk mapping can be applied, controls updated based on their risks, and audit update actions run — each with a preview of the affected rows before anything is applied.
* Added Linux Process Analysis under Artefact Analysis > Linux, where every new Linux process was checked against a central Process Allow List the moment it started, and unauthorised processes were terminated when enforcement was enabled — off by default, so the policy ran in monitor-only mode until explicitly opted into. Each unique executable's SHA-256 hash was cached locally and recomputed only when the binary changed, and the grid reported CPU and memory usage summed across every running instance of the same process. Collection and upload intervals and the applicable allow lists were configured on the Linux Process Analysis policy, which shipped disabled.
* Added a "Request Risk Acceptance" action to the top right of the Risk edit form, which carried the risk's details into an Acceptance request and set its status to Acceptance Requested. Once the request was resolved, the acceptance workflow set the status to either Accepted or Rejected according to the outcome.
* Added localisation support for the Risk Acceptance request form.

**Improvements**

* Improved risk score enrichment, which now updated the score only when it was empty, or when the new score was above 69 and the current score below 70. Records were also classified by rules before enrichment ran, so those scoring below 5 were skipped and never queried against Sophos, cutting the volume of distinct hashes sent for enrichment.
* Improved Notification Templates by unifying them for GRC, which now had its own Notification Templates.
* Improved GRC Assets with Confidentiality, Integrity and Availability impact ratings, from which Asset Importance was calculated as the highest of the three, replacing the Asset Value and Impact fields. A Backup Owner User property was added alongside Owner Users, and a new Classification Level replaced the Confidentiality Level on both Assets and Documents.
* Improved the Audit clone action, where the right-click "Clone" was renamed to "Save as New Audit Review".
* Added Related Controls to GRC Activities, shown in the grid under Related Control Activities, with the Standard Identifier, ID and Name displayed in the selector. Related Control Assessments was renamed to Related Control Activities.
* Added a "Link Shared Response" action to the vendor edit form and to the vendors grid right-click menu, letting the user select which shared response to link to a vendor.
* Added a "View Controls" right-click action to Standards & Practices, which opened the standard's controls filtered in a new tab.

**Bug fixes**

* Fixed an issue where an artefact could not be linked to a risk On Hold if other records had already been added or the request had been approved before.
* Fixed the Standard name on Controls, which was empty and therefore could not be filtered.
* Fixed an issue where too many related controls were added to a Notable Event when it was linked through a Control.
* Fixed an issue where the DB Ops page did not open.
* Fixed an error that occurred when setting the interval on Scheduled jobs.
* Fixed the filter link from aggregation, which did not work.
* Fixed a 404 error that occurred when opening AI Settings.
* Fixed a 404 error that occurred when creating Notification Templates and Rules.
* Fixed a 500 error that occurred during report generation.