New features in release 5.4.0
- Support to perform final checks after task completion.
- New widget to start new task from your dashboard.
- Create your company profile with AI.
- Updated Power BI connector.
- Improved security for SharePoint.
- Improved handling of ‘Out of scope’ controls.
- Relate assets to other assets.
- Create activities for assets.
- Better support for documents outside ISOPlanner using URLs.
- Link document to tasks directly from the library
- Right click to open links in a new Browser tab.
Larger features we’re working on
- Privacy module including improved processing register.
- User read confirmation on documents
- Integration with Microsoft Purview, Intune en Defender for Cloud.
- More AI features
Support to perform final checks after task completion
We’ve implemented this popular feature request with the possibility to ‘approve’ tasks by the owner or manager after they are completed. The implementation is quite simple: a new task status ‘Archived’ is created to let you easily see tasks that are completed but not archived yet. You can open the completed task, check if everything is done (e.g. checklist / form is filled in and evidence is uploaded) and click the new ‘Archive’ button to finish. Or set the status back to ‘In progress’ which will push the task back to the task list of the assigned user. The workflow is:
1. Task is assigned to a user
2. User handles task and clicks ‘Finish’
3. Owner or manager goes to either the ‘Recently completed tasks’ widget on the dashboard or the ‘All tasks’ overview and add the filter ‘Status completed’.
4. Owner of manager opens the tasks, performs the checks and clicks ‘Archive’.
Note 1: The status ‘Archived’ is only available when the current task status is ‘Completed’
Note 2: This workflow is optional. If you don’t want to use it, just ignore the ‘Archived’ status. It has no impact on current functionality.
New widget to start new task from your dashboard
A new widget is added to let users quickly create a new tasks based on a template. The widget is called ‘Task actions’ and is available on all dashboards. Search for task templates to add them as actions in the widget. You can change the action name. For example, you might want to add a template called ‘Incident’ and set the action name to ‘Create a new incident’. You can re-order the actions by drag and drop.
Create your company profile with AI
In the administration section Administration / Settings / General we added a feature to set-up your company profile. This profile will be used by new features in upcoming releases to let ISOPlanner be more aware of your company. It can also be a good starting point for internal discussions about the scope of your compliance framework or important assets.
When you have our AI Assistent disabled, only the company size and industry fields are available. When AI is enabled, the AI Assistent can research online to publicly available information about your company based on the name and website. The result is a comprehensive profile containing:
1. Basic information
2. Marketing and customer information
3. Technological and regulatory information
Of course, the AI Assistent cannot know everything based on publicly available information but it is probably a decent start. You can adjust your profile where it is incorrect or not filled in. Make sure the website field is correct before creating the profile. It can take up to a couple of minutes to do the research. When done, all sources can be shown with the button ‘Show online search sources’.
After creating or adjusting the profile, click Save.
Updated Power BI connector
We updated the Power BI connector and fixes some issues regarding KPI’s and Assets. You can download it through our knowledge base.
Improved security for SharePoint
Our SharePoint integration is very important for ISOPlanner. We follow the latest security improvements made available by Microsoft. It is now possible to authorize ISOPlanner to access only the SharePoint sites your administrator selects.
Currently, when SharePoint integration is enabled, your administrator grants ‘Sites.Read.All’ permissions to ISOPlanner. This does not mean that ISOPlanner can access all sites: that depends on the access the user has. But it can be the case that the user has access to sites that are not relevant to ISOPlanner. By restricting the sites beyond the user, the ‘attack surface’ can be made even smaller.
ISOPlanner now supports ‘Sites.Selected’ permissions. These permissions do in fact not grant any permissions yet but allow your administrator to assign sites to this permission that ISOPlanner may access in different roles like read, write and manage. To configure this, your administrator can follow the steps in this article.
Note: This extra layer of security is optional.
Improved handling of ‘Out of scope’ controls
When you mark a control as ‘Out of scope’ by selecting the ‘Applicability reason’, the implementation field is replaced by the field ‘Out of scope reason’. This makes it more easy to see the reason in favor of the implementation which should be empty for such controls.
Additionally, we added a feature to mark all child controls out of scope for the same reason. This comes in handy for whole chapters of frameworks that do not apply to your organization. After entering the reason, a checkbox becomes available to propagate the status and reason to all child controls, if available.
Relate assets to other assets
In the context tab of an asset, you can now select other assets. When you have a Business or Premium subscription, assets can be organized in hierarchical containers. In this case, this new feature is handy to specify a relationship with other assets that are not in hierarchy. For example, you can create a container ‘Database A’ which has an information asset like ‘Customer email address’. You could relate the Database A asset to another asset Database B which shares the same technology, for example. Go the the asset details, open the ‘Related information’ panel on the right side and search for another asset.
Create activities for assets
The related information panel of an Asset now has an ‘Activity’ tab in which you can create comments. This can be useful for documenting changes or initiating discussions. The tab also shows the most important changes to the asset like status and owner.
We also added an option to show only the messages the user created (filter out the items from the change log). This option is available for all Activity tabs (e.g. Risk, Task, Control).
Better support for documents outside ISOPlanner using URLs
When you have a category in the library of type ‘URL List’ and add some content, ISOPlanner tried to preview the content by opening the URL on the side when you click it. This only worked for publicly available URL’s. Products like Confluence or WIKI or document systems almost always require authentication. We have changed this behavior so that these URL’s always open in a new tab directly. This makes working with external URL’s much more fluent.
Link document to tasks directly from the library
When you select a document in the library and click in the ‘Usage’ column of that item, you can add relationships to other entities like Risks and Controls. It is now also possible to add Tasks.
Right click to open links in a new Browser tab
We implemented the popular request to open links in ISOPlanner in a new tab by clicking with your right mouse button and select ‘Open in new tab’. This works for every link in ISOPlanner that navigates to a new location.
