- New System Package Dashboard to show top numbers, status dates, top 10 listing of vulnerability areas
- New Team Subpackage Dashboard to show top numbers, filtered listing of checklists and devices
- Checklist listing on its own page now with the new dashboards
- Bulk Edit Checklist Details (per user request)
- Bulk Upgrade Checklists
- Bulk Edit POAM Entries (per user request)
- Evidence management for attaching files and images to your System Package for Checklists, POAM, Compliance or General documents
- Milestone Events have status and status date for showing completion, failed, delayed, scheduled, etc.
- Powerpoint Summary Slide now shows CCRI and Milestone information
- Allow numbers and the
- dash character in system keys now when creating System Packages and making external API calls - Listing Notifications within the System Package as well as the main Home menu, filtered by that System Package only
- Tags on checklists and hardware now can contain spaces, the separator while entering is
, as well as ; and the Enter/Return key - Added an expiration date to the System Package authorization
- Added the StateRAMPTM grouping of NIST 800-53 controls to track compliance for that framework
- Added a Custom (user defined) grouping of NIST 800-53 controls to track compliance for that custom defined framework
- Warning banner on System Packaged Dashboard page when accreditation date expiring within 90 days
- Allow tags in the Hardware XLSX/CSV/JSON upload for adding and editing hardware lists in bulk (per user request)
- Bulk Edit Checklist, Bulk Edit Vulnerability, Bulk Upgrade checklists and Bulk Lock/Unlock now available to those with ChecklistCreator or ChecklistEditor in that System Package – used to only be allowed for SystemOwner permission
- Bulk Edit Checklist, Single/Bulk Upgrade Checklist, Single Checklist Upgrade available in Team Subpackage for ChecklistEditor at that level now as well
- Create Checklist from Template or new upload in Team Subpackage with new ChecklistCreator permission (per user request)
- Added an export button on the Team Subpackages management page in a system package (per user request)
- Add new patch scan devices in Team Subpackage as PatchAdministrator (per user request)
- New PatchEditor permission in Team Subpackage to only update existing devices and related information
- Manage POAM in Team Subpackage for relevant POAM entries, with Bulk Edit POAM as well (per user request)
- Add AuditAdministrator role for users to view/export audits from the UI and the API
- Allow locking / unlocking a single vulnerability when editing a checklist entry in a system package (per user request)
- Report to show comparison of your system package required controls to a known cyber compliance baseline of controls (per user request)
- Added “operatingSystem” field to the generic patch upload JSON format
- Added a Locked and Unlocked setting for the checklist vulnerability filter (per user request)
- Showing locked vulnerabilities in Templates in the details area
- Added a POAM filter for types of data linked to a POAM (checklist, compliance statement, manual, etc.) to list specific POAM information
- Updated DISA checklist templates as of July 24, 2023
- Added a Report to show missing Comments or Details of vulnerabilities in checklists based on status and severity
- Added a POAM report to list POAM data
- Added a Milestone Events report to show milestone events for a system package
- Added a POAM by Milestone Event report to show POAM items attached to a specific milestone event
- Added a Patch Vulnerability Difference report to show patch differences between 2 or more devices in a system package (per user request)
- Added a report to show all System Packages and export the listing
- Added a report to show all Team Subpackages and export the listing
- Added an API call to edit a single vulnerability (5 fields) on a checklist, similar to the GUI editing of vulnerabilities (per user request)
- Added API calls for Evidence Management at the system package and team subpackage level
- Allow setting replicate numbers for the Kubernetes deployment in the Helm Template Values file
- Allow grouping of all message clients (openrmfpro-msg-xxxxx) for clustering locally or in Kubernetes platforms
- Fixed: bug comparing template version and release to properly compare the version numbers and release numbers to show the latest for upgrade
- Fixed: grab the correct .audit Version and Revision for CIS based checklists
- Fixed: grab the most recent DISA, Organizational, System Package or CIS based checklist on version and release properly in most recent decending order
- Fixed: For deleted hardware, checklist, score, project, or compliance items linked to POAM entries, the POAM entry is marked “Completed” with the date of the deletion and the link to the deleted item is severed
- Fixed: bug on sorting scores that used them as strings versus numbers (removed column sort)
- Fixed: Team Subpackage file download names to include System Package and Team Subpackage Key
- Fixed: Team Subpackage Notification filter working for the specific team subpackages you have access to
- Fixed: favicon.ico on help pages correctly linked and shown
- Fixed: when uploaded scan files are not parsed correctly, it shows the filename specifically now correctly when completed in the UI or API
- Fixed: Team Subpackage now allows all proper file uploads for checklist, compliance, and patch scan results
- Fixed: allow filtering template types for DISA, CIS, Organizational and Custom correctly from the API
- Fixed: Controls per Host report working properly against saved compliance data
- Updated base container images for vulnerability fixes