Changelog 31.10.2024
We have made significant improvements in the background for this release, improving the stability of the entire app considerably. Of the improvements that are more visible to the user, we are thrilled to mention:

The ability to share risk assessments and other entities with other users or organizations outside your organization tree

• For each shared item it is possible to define the permissions the person/organization will get for that specific item
• Shared items are added through the app and can be found under each resource form or risk assessment/DPIA dashboard
• Possible to share risk assessment & DPIA templates
• Risk assessment sharing logic
  • Risk assessment child items will inherit shared permissions from the risk assessment
  • Ex. if the risk assessment has ONLY read access, then all child items will also have ONLY read access
• UI permissions on shared items
  • Shared item label
  • Will prevent user from creating/updating/deleting shared items
  • Users to whom an item is shared won't be able to share it further
  • Users to whom an item is shared will not see other people that item is shared with

The ability to transfer ownership to another user or organization

• Functionality works only with users/organizations within the organization tree
• WARNING: when transferring ownership to another organization, transferred resources (and its related items) will be removed from the organization of origin
  • ex. if organization A has IT system A and transfers ownership to organization B, now organization B will have IT system A and organization A will lose access to IT system A

Improved input areas that perform database lookups more efficiently and allow you to create a new entry directly if that is relevant

• Supports infinite scroll (as you scroll more options will load)
• Supports permissions (if user doesn't have permission on resource will be disabled)
• Allows user to directly create entities (ex. while filling out vendor form, we don't have to go to it system page to register new IT system)

Improved the logic for user permissions

• The whole app is now covered with proper permissions handling
• Input fields will be disabled if the user doesn’t have edit permission
• A no permission card is showndisabled input field states if edit is not allowed or no permissions widget if read access is not available

Improved the logic for and display of users and organizations

• Organization tree is now visible to the user no matter where the user is placed
• Only Diri admin will be able to see all organizations and "Add top level organization"
• Other users will see organizations they have assigned (ones under "organizations")
• Diri admins are hidden from customer accounts (will not show under user list)
• Whole app will now filter data (lists) based on user active organization
• User form is improved and will have the same functionality as the users table
  • Possible to attach organizations
  • Possible to select active organization ONLY from the list of attached organizations
  • Possible to select roles ONLY from the list of user organizations
  • More strict validations which follows above rules

Other changes

• Adding existing cause/consequence/event is removed until new implementation of this logic is done
• Tasks calendar view year filter now supports currentYear + 2

We are excited to announce new updates and improvements across the Diri platform, enhancing risk assessment, task management, and data processing activities.

New Features:

Risk Assessment Surface Redesign:
• The risk assessment interface has been completely redesigned to improve functionality and flow.
• All forms in the risk assessment now feature enhanced elements, offering a more connected experience.
• The infographic view has also been updated for better visualization.

Files:
• It is now possible to add a name to an uploaded file.
• File uploads can be conducted directly within forms through the app.

Risk Registry Call-to-Action:
• From the risk registry pages, users can now visualize risks as displayed on the main dashboard by clicking on a row.
• An extra action has been added to lead the user directly to the originating risk assessment.

New Background Job for User Features:
• A new background job has been implemented to ensure that customers immediately access new features without the need to modify settings or permissions.

Improvements:

Cause & Consequence Probabilities Percentages:
• Probability sliders similar to those used for treatments have been added to cause and consequence settings.

Risk Matrix and Unlinked Risk Items:
• Logic improvements ensure that every unlinked risk item is removed from the risk matrix (refresh may be needed).
• Template risks are also now automatically excluded from the risk matrix.
Connections Between Items:
• Enhanced connectivity when linking vendors to IT systems, ensuring that updates are reflected in both items.
• This improvement applies to similar interconnected items.

Risk Assessment & DPIA Types:
• It is now possible to select multiple items for risk assessment and DPIA flows, offering greater flexibility.

Data Processing Activity:
• The modal for data processing activities has been improved.
• Extra categories for personal data have been added, along with missing fields to support Varn migration.

Fixes and Improvements:

Task Improvements & Fixes:
• General improvements and bug fixes have been applied to the task management module.

Risk Matrix Enhancements:
• Addressed issues with missing settings for black dots in the risk matrix.
• Improved filtering of treatments in the bowtie, specifically in side effect modals.

Data Processing Activity Fixes:
• Username will now be created immediately if left empty during user registration.
• Updating values in forms now functions correctly without affecting unrelated data fields.
• Improved translations for the data processing activity role field in both form and table views.

Bowtie View Updates:
• Fixed issues with treatment update handling that could cause page crashes in the bowtie view.
• Improved the display of system names when viewing treatment effects from the bowtie.

Guided Risk Improvements:
• Added null checks to prevent guided risk features from crashing during certain steps.
• Resolved an issue where the same side effect could be linked multiple times to the same event, preventing duplicates.

Under the Hood Updates:

Code Cleanup:
• Continued code cleanups to ensure stability and performance improvements.

Report Designer and Infographic Download:
• Hidden the report designer and infographic download options temporarily while addressing existing bugs and refining export features.

Known Issues:
• Some persisting bugs in the export feature for report designer and infographic download remain unresolved.
• We will address leftover data caused by previous duplicate issues in the next update.
Please continue to share your feedback to help us improve. Stay tuned for more updates in the coming months!

We are happy to report that all Diri-customers are now over on our new platform and the app is rapidly improving: We've rolled out a series of updates since mid-July to August including entirely new features such as file and task management. The risk matrix should now calculate correctly and re-using exsisting causes, consequences, and treatments works without creating duplicates.

Remember to clear your cache to make certain you have the latest version, and please keep your feedback coming!

New Features:

Archive Feature:

• The archive functionality is now live, providing users with better data management options.

Task Management

• Implemented the base tasks functionality, including Kanban and calendar views.
• Users can now add, update, archive, and delete tasks, with drag-and-drop functionality in the Kanban view.
• Task columns can now be added or modified directly within the application.
• Added filters to the Kanban view to improve task management.

Dashboard Widgets:

• Added the "diri control matrix" to the list of widgets available on the dashboard, enhancing visibility and control.
• Risk matrix details on the dashboard are now fully live, offering deeper insights into potential risks.

File Management:

• File management functionality is now live, allowing for easier attachment and organization of files within the platform.

Access Control Enhancements:

• It’s now possible to attach existing access roles to selected business roles, with overall improvements to access control mechanisms.

Risk Matrix Improvements:

• Enhancements to the rendering of the risk matrix, making it more intuitive and informative.

Asset Management:

• Users can now attach existing assets in the second step of the risk assessment process and unlink them without deletion.
• Affected assets under the consequence form are now filtered to only fetch items attached to the current risk assessment.
• Comments on treatments (add through RBAC)
• Comments can now be added to treatments to indicate progression.

Translation Updates:

• Updated translations across the app to ensure language consistency and clarity.

New solution for re-using items

• Causes, events, and consequences can now be re-used without creating duplicates in the lists (creates a new probability/consequence setting per re-use).
• A treatment can now be connected to multiple risks and have different effects.

Fixes and improvements:

Treatment Form Improvements:

• It's now possible to add treatments directly from the Treatments page, as well as within risk assessments.
• Enhanced functionality to add effects to specific causes or consequences from different risk assessments.

Risk Assessment Enhancements:

• Introduced the ability to unlink causes and consequences from a risk assessment without deleting them entirely.
• The risk assessment dashboard has been fully redesigned, featuring a new control matrix and a stepper for easier navigation.
• Bowtie layout in risk assessments has been cleaned up and redesigned for better clarity and usability.
• The risk matrix clusters are now clickable, allowing users to explore hidden risks in detail.
• Cause/consequence probabilities are now displayed on the bowtie, with tooltips explaining the applied treatment effects.

DPA, DPIA, and Privacy Module Enhancements:

• Significant process and logic updates to ensure all created items are saved correctly.
• Dashboard improvements and alignment of the cyber risk registry with the standard risk registry for consistency.
• Improved support for attaching selected types (vendors, IT systems, etc.) during the DPIA and pre-DPIA processes.
• General refinements to improve navigation and functionality.

My Accounts Page:

• Fully redesigned and now live, offering a more user-friendly interface for managing personal settings.

Filters:

• Now support filtering with whitespaces for more accurate searches.
• Conditional filters have been introduced, allowing for advanced search capabilities, such as searching roles by the organization associated with them.

Table Enhancements:

• ID columns are now removed by default but can be added back through column configuration as needed.
• Multi-select in tables has been improved, with hover and click actions on the "+" icon now displaying all linked items.
• Owner and Treatment Responsible Person Lookup:
• Resolved issues with the owner field in tables and treatment responsible person lookup to ensure accurate assignment.

Risk Registry and Archive:

• Fixed risk classification in the risk registry.
• Implemented several updates and bug fixes received from customer, including improvements in DPA table rendering and DPIA/DPA processes.

Input Validation:

• Frontend input validation has been implemented to prevent server overloads and improve performance.

Under the Hood Updates:

Code Cleanup:

• Performed code cleanups on the archive feature-
• API Documentation:
• Resolved several bugs, including issues related to the API specification and rendering improvements across the platform.

Bug Fixes:
Addressed various bugs discovered during internal sessions, ensuring better performance and reliability across the platform.

Bulk Operations:
Updated bulk operation capabilities across all tables to streamline workflows.

Organization State Management:
Fixed an issue where it was possible to remove all organizations from a user, preventing potential access problems.

Some features may need an update to the access roles to become available, please get in touch with us if you need help configuring these. Stay tuned for more improvements in the coming months!

In our ongoing quest to enhance your user experience and streamline processes, we've introduced a suite of updates to the app.test platform. This changelog for June and July showcases our commitment to delivering a cohesive, user-friendly interface alongside powerful new functionalities. Explore the latest enhancements and discover how our platform is evolving to support your workflow with greater efficiency and consistency.

Web Application Updates:

• Fixes:
  • Restored scroll functionality on tables to improve navigation and data accessibility.
  • Improved table display to show all relevant information from forms, including legal basis, personal information, data processor, etc.
  • Enhanced logic and style for multiple treatment effects within treatment forms.
  • General layout and style improvements across the application for a more consistent and visually appealing interface.
  • Improved IT System fields with multi-select options where necessary to enhance usability.
  • Fixed the API documentation to ensure it is functional and up-to-date.
• New Features:
  • Launched the first phase of the dashboard with new interactive elements like expand/shrink actions on dashboard cards.
  • Implemented guided risk functionality in the risk register, allowing users to generate risk registry items and add treatments more efficiently.
  • Introduced templates that enable users to create templates from specific risk assessments and generate new risk assessments from these templates.
  • Added the ability to manage tags on the Settings page for better organization and usage across the application.
  • Refined the DPA process, including layout adjustments, form improvements, and content updates for better user experience.
  • Enhanced the DPIA process, providing better navigation, readability, and access to related items such as pre-DPIA and DPIA.
  • Completed the archive background logic to streamline data management.
  • Finalized treatment plan and risk assessment steps 4 and 5 to ensure a smooth user flow.

Under the Hood Updates:

• Fixes:
  • General security enhancements and performance updates to ensure the platform's reliability and speed.
• Enhancements:
  • Optimized search and query functionalities to deliver faster and more accurate results.

Known Issues:

• It's not possible to filter the dashboard by a selected organization; it always displays an aggregated result of all units and sub-units.
• Tooltip information on our charts and widgets can freeze the rendering, causing them to stick and never disappear.
• In some cases, adding tags to objects does not display tag labels.

This update reflects our unwavering dedication to refining the DIRI Application, making it more intuitive and efficient for our users. We are committed to continuous improvement and eagerly anticipate bringing more high-quality updates and features to meet the needs of our community.

For further details about DIRI and its features, please visit our website.

---

This changelog is designed to keep our users well-informed about the platform's latest developments and enhancements. We value the input from both our development team and our users, as it drives us to further enhance the app.test platform. Stay tuned for future updates.

In our ongoing quest to enhance your user experience and streamline processes, we've introduced a suite of updates to the app.test platform. This week's changelog showcases our commitment to delivering a cohesive, user-friendly interface alongside powerful new functionalities. Explore the latest enhancements and discover how our platform is evolving to support your workflow with greater efficiency and consistency.

Web Application Updates:

• Fixes:
  • Enhanced dialogs and alerts to ensure a consistent and intuitive user experience.
  • Upgraded data table filtering for more efficient data management and improved user interaction.
  • General security updates to safeguard user data and enhance overall system performance.
  • Implemented various minor performance updates to improve the speed and responsiveness of the application.
  • Improved overall UI layout to ensure a more streamlined and visually appealing interface.
• New Features:
  • Introduced a new Access Control UI, offering a more robust and user-friendly way to manage permissions.
  • Moved the organization tree to the Users & Access page for better organization and ease of use.

Under the Hood Updates:

• Fixes:
  • Enhanced security measures and made various performance updates to bolster the system's reliability and speed.
• Enhancements:
  • Optimized search and query functionalities to deliver faster and more accurate results.

Known Issues:

• It's not possible to filter the dashboard by a selected organization, it's always an aggregated result of all units and sub-units of organization.
• API Documentation is not yet functional. We can provide you with OpenAPI V3 specification in case you need it.
• Tooltip information on our charts and widgets are freezing the rendering, might cause them to stick and never disapear.
• Adding the tags to objects in edge cases does not show tags labels.

This update reflects our unwavering dedication to refining DIRI Application, making it more intuitive and efficient for our users. We are committed to continuous improvement and eagerly anticipate bringing more high-quality updates and features to meet the needs of our community.

For further details about DIRI and its features, please visit our website.

---

This changelog is designed to keep our users well-informed about the platform's latest developments and enhancements. We value the input from both our development team and our users, as it drives us to further enhance the app.test platform. Stay tuned for future updates.

In our ongoing quest to enhance your user experience and streamline processes, we've introduced a suite of updates to the app.test platform. This week's changelog showcases our commitment to delivering a cohesive, user-friendly interface alongside powerful new functionalities. Explore the latest enhancements and discover how our platform is evolving to support your workflow with greater efficiency and consistency.

Web Application Updates:

• Fixes:
  • Established a consistent theme across the app to ensure a uniform user experience.
  • Unified button design across the platform with the introduction of a new button component.
  • Standardized typography throughout the app with a new typography component, ensuring font consistency.
  • Enhanced general table functionality for improved validation, addition/updating of entries, and accurate data display, addressing previous issues with ID representation.
  • Implemented expand column logic for cells containing large text to enhance readability.
  • Introduced table filters for more efficient data management, with a note that filters for related (nested) properties are currently in development.
  • Addressed and corrected numerous minor issues across the app, contributing to increased stability and performance.
• New Features:
  • DPIA (Data Protection Impact Assessment) now fully supports managed tables, streamlining data processing activities.
  • Launched the complete DPIA process (v1) on the dashboard, featuring a five-step flow akin to the risk assessment procedure and offering options to add DPIA or preDPIA assessments.
  • Risk assessment bowtie view drag & drop animation
  • Adding existing Cause, Consequence, Event & Treatment
  • Table view is now added to the risk assessment flow
  • Privacy Risk Registry Page

Under the Hood Updates:

• Fixes:
  • General table improvements have been made to enhance user interaction through better validation and the ability to accurately render proper data instead of IDs.
  • Note: There may still be a few areas requiring adjustments. Users are encouraged to report any inconsistencies.
• Enhancements:
  • Filters have been added to tables to facilitate easier data management. Please note that filters for related (nested) properties are not yet operational.

Known Issues:

• In tables, you might experience an issue with selecting multiple values, in some cases labels do not get displayed.
• In some edge cases, filters in tables might not work properly.
• Access Roles are not applied to Cause Type/Cause Category and Threats, some users might not be able to adjust their organization settings for these two options.

This update reflects our unwavering dedication to refining DIRI Application, making it more intuitive and efficient for our users. We are committed to continuous improvement and eagerly anticipate bringing more high-quality updates and features to meet the needs of our community.

For further details about DIRI and its features, please visit our website.

---

This changelog is designed to keep our users well-informed about the platform's latest developments and enhancements. We value the input from both our development team and our users, as it drives us to further enhance the app.test platform. Stay tuned for future updates.

In our latest effort to empower your cybersecurity and privacy management journey, we're rolling out key updates and enhancements to the DIRI AS platform. This week's changelog highlights our dedication to refining our technology, ensuring seamless, secure, and effective risk management solutions. Dive into the updates to discover how we're continuously evolving to meet your needs with precision and innovation.

Web Application Updates:

• Fixes:
  • Resolved an issue where treatments were not being saved properly.
  • Addressed the dashboard widget issue that inaccurately counted ongoing statuses.
  • Implemented improvements in the authorization flow to enhance security and usability.
  • Enhanced app versioning control and introduced a caching mechanism for better performance.
  • Fixed rendering issues with the Risk Matrix to ensure accurate visual representation.
  • Conducted comprehensive bug fixes on the Tasks page for smoother operation.
• New Features:
  • Launched a new Risk Registry page to aid in better risk assessment and management.

Under the hood Updates:

• Fixes:
  • Updated the Public API documentation using Redocly for better clarity and accessibility.
  • Made performance improvements in authorization endpoints to speed up response times.
  • Implemented fixes and performance enhancements in the Risk Matrix calculation to improve reliability and efficiency.
  • Corrected issues related to the population of properties in data tables to ensure accurate data representation.

These updates reflect our continuous effort to improve the DIRI AS platform, making cybersecurity risk management simpler and more accessible for our users. We are committed to delivering high-quality updates and new features that meet the needs of our customers and enhance their experience with our platform.

For more information about DIRI AS and its offerings, please visit our website.

---

This changelog is meant to keep our users informed about the latest developments and improvements. We appreciate the feedback from our development team and our users, as it helps us to continuously enhance the DIRI AS platform. Stay tuned for more updates in the future.