Release 142 (09.03.2024)

Release 142 brings several new features and improvements to the Priverion DPMS, including assessment completion notifications, risk scenario visibility in TOMs and Assets, downstream processor tracking for vendor transfers, and a number of targeted bug fixes.

New Release

Version: 142
Release Date: 09.03.2024 19:00 CET


Overview

This release introduces email notifications when assessments are completed, makes risk scenarios visible across the TOMs and Assets areas, and automatically tracks whether a vendor acts as a downstream processor based on linked transfers. Several bugs affecting legal basis display, vendor sub-vendor visibility, tags, and login handling have also been resolved.

Contents

  • What's new
  • Improvements
  • Fixes
  • Known issues

What's new

Assessment completion notifications [NG-1088]

Users will now receive an email notification when an assessment they are involved in is completed. Notification emails are available in multiple languages, matching the language settings configured in the system.

Risk scenarios in TOMs and Assets [NG-1104]

Risk scenarios linked to Assets now display their description directly in the Asset view. In addition, risk scenarios associated with Assets are now also visible within the TOMs (Technical and Organisational Measures) area, giving compliance teams a joined-up view of controls and risks.

Downstream processor tracking for vendor transfers

When a vendor transfer is linked in the system, the vendor is now automatically flagged as a downstream processor. This status is updated in real time as transfers are added or removed, reducing the need for manual classification.

Consulting companies management [NG-1009]

Consulting companies can now be fully created, edited, and managed within the system (full CRUD support). This enables organisations that work with external consulting partners to properly record and track those relationships.

International standards updates [NG-1103]

The list of international standards available in the system has been expanded and updated. A new switch control allows users to activate or deactivate individual standards, and the display behaviour of the translation control has been corrected so it appears at the right time.

Azure Active Directory / IT Settings improvements [NG-859, NG-920]

Further progress has been made on Azure Active Directory integration and language activation settings in the IT Settings area. These capabilities are now more stable and better tested.

Improvements

  • Assessments – Maturity goals: The "Maturity goals" item in an assessment is now automatically disabled when the associated questions carry no maturity score, preventing misleading entries.
  • Legitimate Interest – Company filters: Company filter options are now correctly applied within the Legitimate Interest screen [NG-1075].
  • Vendor area – Layout and risk domains: Minor design alignment issues in the Vendor and Risk Domains views have been corrected, and the layout now renders consistently.
  • Tags – Infinite scroll after sorting [NG-1064]: The infinite scroll (load-more) behaviour in tag lists now works correctly after a sort order has been applied.
  • ROPA – Controller reset [NG-1105]: The controller field on a ROPA record can now be properly reset when required.
  • Tasks – Workload field no longer mandatory [NG-1079]: The estimated effort (workload) field in tasks is no longer a required field, reducing friction when creating task records where effort is not yet known.
  • Audiences – Edit duplication fix: When editing an audience, the record is no longer inadvertently saved twice in the payload.
  • Login handling [NG-1092]: Improved handling of login attempts by unknown or unrecognised users to prevent errors.

Fixes

  • [NG-1077] The wrong legal basis was displayed in certain situations; the legal basis list has been corrected and a duplicate entry (KOREA_PIPA) has been removed.
  • [NG-1078] The vendor classification tag selector was showing already-deleted tags; deleted tags are now excluded from the selection.
  • [NG-1082] The responsible person component in the relevant screen was not using the correct field component; this has been corrected.
  • [NG-1085] Email notifications sent via Flowmailer were not respecting the recipient's language setting; multilingual templates are now correctly selected.
  • [NG-1091] Minor fixes applied to company name handling and uniqueness validation across the system [NG-1100].
  • [NG-1093] Sub-vendors (downstream vendors) were not appearing in the Downstream tab of the vendor detail view; they are now displayed correctly.
  • [NG-1099] The "Consulted company" field in the relevant screen was not behaving correctly; this has been fixed.
  • [NG-1111] The "Case Handler" role could not be deleted in certain scenarios; this restriction has been resolved.
  • [NG-1064] Infinite scroll failed to load additional records after sorting; fixed in both tags lists and other list views.

Known issues

No known issues.

Feedback and Support

We value your feedback. If you encounter any issues or have suggestions, please contact our support team:

  • Schedule a Meeting: Via the Help Widget
  • Give Feedback with Screenshots: Via the Feedback Button in the Help Widget
  • Schedule a Support Call: Here
  • Schedule a Technical Support Call: Here

Was this article helpful?