We’re continuing to roll out incremental improvements to the Vendor Risk AI-powered Security Profile (Beta) to give you greater flexibility, control, and clarity.
- Custom Domain & IP selection: You can now customize the domains and IPs used in a vendor’s security profile. Your selection is saved between sessions and automatically applied to the Instant Risk Assessment, helping you tailor assessments to specific vendor engagements and use cases.
- Excel document support: You can now upload and scan Excel documents as part of the evidence used in the security profile.
- Manual check management: We’ve made it easier to manage checks and citations—users can now manually mark checks as “met” to better reflect their evaluation.
- Add comments to all checks: Comments can now be added to both passed and unmet checks (previously, comments were only supported for identified risks).
- Updated rating logic: The Security Profile rating will now default to the automated scanning score when no evidence has been provided. Once evidence is added, the rating will automatically update to reflect the combined impact of the automated scanning and evidence, against the Security Profile control set.
More enhancements to come in upcoming releases.
New in Breach Risk: Risk Waivers for Subsidiaries
We’ve introduced Risk Waivers for Subsidiaries, a powerful new feature in Breach Risk that gives organizations greater control and flexibility in managing risk across their subsidiaries. With this enhancement, you can now create private risk waivers for risks associated with any of your subsidiaries. These waivers are visible only within your organization and ensure your internal risk posture reflects the controls and context you manage centrally.
New in Trust Exchange: Trust Page enhancements
We’ve rolled out a number of improvements to Trust Pages in this release:
- Trust Page users can now add specific badges for their CSA STAR level, plus new badges for CSA TCP, CREST and URAC, so businesses who adopt these frameworks and standards can reflect that on their Trust Page.
- Downloads data is now available in the Trust Page access log, giving you deeper insight into the documents that your prospects and customers find most valuable.
- A preview mode for Trust Pages is now available, so you can see what your page will look like from an outside perspective prior to publishing.
- You can now customize your security link titles on your Trust Page via Settings > Content Library.
- We’ve made UI improvements to the Trust Page share modal, published status badges and settings page.
Other improvements
- For Vendor Risk customers who want to be notified when their vendors make changes to their Trust Page, we’ve made improvements to the notification, which you can enable via Home > Manage Notifications > Configure custom notifications.
- We’ve added a new Vendor Risk custom attribute type URL so you can now add clickable links as custom attributes.
- Users can now sort by percent complete when reviewing remediation requests in both Vendor Risk and Breach Risk.
- We’ve added SOC3 report as default document type to Vendor Risk Additional Evidence.
- This release includes a number of bug fixes.
