Q2 2024 Release Notes

Releases that occurred throughout the Second Quarter of 2024.

June 2024

12.77.0 Release - June 26th

Bugs:

• For a few customer-third party relationships who had approved access to available attested assessments, the attested residual risk data was not being calculated and displayed in the Risk Reduction feature as expected. This has been corrected so customers can view this attested residual risk data for all third parties for which they have approved, available assessment access.

12.75.0 Release - June 20th

Bugs:

• A display of the old inherent and predictive residual risk data found on the Assessment tab when looking at your own company’s data was still active after it’s intended deprecation date. This has now been removed, thus making the new display of inherent and residual risk data, titled Risk Reduction, found on the Risk Profile tab of your company profile page the only in-platform display of this data, as intended.

12.74.0 Release - June 5th 

NEW Risk Reduction Feature Containing Updated Inherent and Residual Risk Scores

The new Risk Reduction feature containing an updated inherent and residual risk data display is now on. It can be found at the top of the Risk Profile tab within all company profile pages. Here is a knowledge base article regarding this feature and here is a knowledge base article describing how the data itself is generated.

Outlined below are some of the enhancements we made to inherent and residual risk scoring and its display: 

• Shifted to a 5-band inherent risk scoring model 
• Enhanced responsiveness to environmental changes 
• Inclusion of tailored predictive residual risk calculations 
• Visibility into risk reduction 
• Addition of a new data point that indicates the degree of risk reduced between the inherent and residual risk scores, as a percentage. It is a measure of helping to further prioritize/investigate

 

May 2024

12.73.0 Release – May 29th 

Risk Recon Widget Improvements

The Risk Recon widget found on the ‘Monitoring’ tab of Company Profile Pages now consistently displays data when Risk Recon has data available for that company. As a result of this work, we did need to remove two data points, percentile rank and industry average (see ‘Before Changes’ screenshot, boxed in red), from the widget that are not available through the specific Risk Recon API endpoint we use for populating our database in bulk. Data indicates however that this data is rarely available from Risk Recon.

                       Before Changes                                                                      After Changes

                       

12.72.1 Release - May 23rd 

Bugs: 

• Users with roles that should allow answering and editing Impact Questionnaire responses were unable to do so. This has been resolved so users with the appropriate roles/permissions can answer and edit Impact Questionnaire responses as expected. 

12.71.0 Release - May 15th

NEW API V2 Endpoint Providing Company Risk Profile Data

There is a new API V2 endpoint that provides the following data for each individual company in your portfolio:

• Updated inherent and residual risk data
  • Inherent Risk is using a 5-band scoring model
  • Residual Risk is available for both attested and predictive data sets, when available
  • New Risk Reduction data point that conveys the degree of risk reduced between the inherent and residual risk, for both attested and predictive data. It is a measure of helping to further prioritize/investigate your third parties.
• Insights into most recent questionnaire attestation date and validation completion date, when applicable 
   

More info regarding this data, that will soon also be available in platform for all users beginning of June, can be found here.

12.70.0 Release - May 8th

Maximum Impact Data Addition in Risk Navigator

This new column within Risk Navigator conveys the maximum impact per control, derived using your company’s responses to that particular third party’s Impact Questionnaire. Each control is mapped to at least one impact question. Based on the mapped impact question(s) response(s), the maximum impact derived using those responses indicates what the highest degree of impact on your organization could be if the given control were lacking appropriate risk mitigation measures. This data can be leveraged to gain insights into which controls findings are relevant through the lens of your business relationship with a given third party. It is available in-platform, in the excel download, and in the API.

Bugs:

• Customer notepad and tags functionality missing for some customers

April 2024

12.67.0 Release - April 17th

Customer Notepad Now Leveraging New Data Architecture

The customer notepad found on Company Profile Pages is now leveraging our new data architecture for storing and populating its contents. As a result, saved notes will be immediately and consistently displaying the entire note as expected.

12.65.0 Release - April 3rd

Password Reset Email

The expiration for the password reset email has been increased from 15 minutes to 20 minutes.

Bugs:

• The Actions Required tab now accurately displays the correct number of companies at the top right of each page. Previously, it incorrectly indicated more companies on the last page when there were none.
• Corrections have been made to the Data & Available columns on the Portfolio Manager table. The Data column now accurately reflects the status, resolving the issue where it inaccurately displayed "Processing," which in turn failed to indicate the presence of Attested Profiles.