Improved flexibility for Vendor Risk and Board summary reports

In this release we have made a number of improvements to Vendor reports and the Board summary report. These include improved visualizations as well as increased flexibility to build custom reports and add custom commentary. To learn more about the changes see How to generate a vendor report and How to generate a board summary report.

Other improvements

• Scheduled reports which were previously only available for higher plans are now available to all customers. To learn more see What are recurring reports.
• We’ve improved the custom vendor attributes feature to allow multi-select set lists. To learn more about how to use custom vendor attributes to store information about your vendors see How to use custom vendor attributes.
• We’ve made a change to make it clearer to vendors that a questionnaire has been archived, preventing vendors from editing them.
• We’ve made some improvements to the recently released Questionnaire changes view feature to make navigating to see changes even easier. To learn more see How to compare responses using the Questionnaire Changes View.
• We’ve added low severity risks related to TLS, including use of insecure cipher suites, common or weak Diffie-Hellman primes, and weak public keys. These will initially be released as provisional with no score impact.
• We’ve made improvements to asset geolocation, now showing the location of the IP address rather than the IP owner.
• This release also includes a number of bug fixes.