Release notes
CIS Critical Security Controls Questionnaires
Toby Roger January 30, 2025
We’ve added three new security questionnaires aligned with CIS Critical Security Controls v8.1, tailored for each Implementation Group: IG1 for organizations with limited cybersecurity resources, focusing on fundamental defences against common threats; IG2 for those with moderate risk exposure, adding safeguards to protect sensitive data and critical business functions; and IG3 for high-security environments, incorporating the full set of CIS Controls to mitigate sophisticated threats and ensure compliance with rigorous security standards. These questionnaires help assess security maturity at the appropriate level, making it easier to evaluate risk and strengthen cybersecurity posture.
You can now control the look of your Trust Page with a customizable banner at the top of the page, as well as badges you can add to demonstrate your organization’s standards and practices. There are also improvements to the editing view, and more coming to continue to make it easy to share your security documentation with prospects and customers. Learn more.
Our platform now includes AI Discovery, enabling automated scanning of third-party websites for AI-related disclosures and passive detection of AI usage. The discovery of AI for a vendor will be shown as an informational risk in the vendor’s risk profile, and will not impact their score. This functionality enhances visibility into vendors’ AI adoption, helping you to identify vendors using AI and assess the potential risks and compliance considerations.
