Release 165 (04.07.2024)

Version: 165
Release Date: 04.07.2024 19:00 CET

Overview

Release 165 is the largest update to the Asset module to date. It introduces Asset Groups as a first-class object, a structured Treatment Plan workflow with risk scenarios and suggested/implemented TOMs, and a new Deadlines & Urgency configuration screen. In parallel, the Workflow engine is now available for managing approval and notification processes, and the International Standards view gains a spider diagram for visual compliance coverage.

Contents

• What's new

• Improvements

• Fixes

• Known issues

What's new

Asset Groups [NG-1277, NG-1310, NG-1312]

Assets can now be organised into Asset Groups. Groups have their own index list, creation/edit form, detail view, and sub-menu covering risk settings, standards, risk scenarios, tasks, assessments, vendors, and treatment plan — mirroring the structure of individual assets.

Treatment Plan [NG-1330, NG-1331, NG-1338]

A full Treatment Plan workflow is now available on both assets and asset groups. It displays linked risk scenarios, their current risk scores, suggested and implemented TOMs per scenario, a visualisation of the treatment status, and a "Finalize" action. Costs for suggested TOMs are shown aggregated by currency.

Suggested TOMs on Assets [NG-1331, NG-1529]

Assets and asset groups now include a Suggested TOMs tab within each International Standard. You can add rows, assign estimated costs (with currency selector defaulting to the standard's currency), set a responsible person, and save them independently of implemented TOMs. The last row cannot be accidentally deleted.

Deadlines & Urgency Settings [NG-1598]

A new Deadlines & Urgency screen has been added under Risk Settings. Administrators can define deadline thresholds and urgency levels that feed into the treatment plan prioritisation.

TOM Implementation Status Tags [NG-1346]

Implemented TOMs now support custom status tags. Default tags are automatically provisioned for new companies, and existing companies can create, edit, and apply their own implementation status labels.

Workflow Engine [FE-81, FE-91, FE-93, FE-109, FE-110, FE-191, FE-204]

A Workflow module is now accessible from the main navigation. It allows compliance managers to view workflow templates, monitor active workflows, and process required actions (e.g. approvals, answers, document uploads) directly inside the DPMS. Required-action cards appear on ROPA records and other linked objects, showing the question, the available response options, and file-upload capability.

Spider Diagram for International Standards [NG-922, NG-1587]

The International Standards detail view now includes a spider/radar diagram visualising compliance scores across control domains, giving a quick at-a-glance overview of coverage gaps.

Asset Risk Score Display [NG-1597]

A dedicated Risk Score component is now shown on asset and asset-group detail screens, displaying the current calculated risk alongside the standard's threshold.

Roles — Custom Element Permissions [NG-1563]

The IT Settings → Roles screen now allows administrators to configure element-level permissions for custom roles, controlling which asset-related objects each role can view or edit.

Unique Asset Identifier [NG-1275]

Assets now support a dedicated ID/identifier field that can be used for filtering and export, making it easier to cross-reference assets with external registers.

Improvements

• Asset index — Groups can be filtered and displayed separately from individual assets; sorting by group is available. The standard selector remembers its selection when navigating away and back. [NG-1531]

• Asset detail — International Standard selector — The dropdown is wider and retains the selected standard across sub-screens. A "no standard" option is available. [NG-1311, NG-1525]

• Implemented TOMs — The implementation status column has been re-added to the table. TOMs already linked as implemented are hidden from the suggested-TOMs selector to prevent duplication. [NG-1532, NG-1560]

• Risk Scenarios on assets — Linking and unlinking now update the current asset risk score immediately. The unlink button uses a clear icon distinct from the delete action. [NG-1326, NG-1573]

• Current Asset Risk — The risk score is now recalculated automatically whenever a risk scenario or TOM is linked, unlinked, or updated. Multiplicative risk model calculations are fully supported. [NG-1329, NG-1557]

• Risk threshold slider — The slider on asset detail is customisable in width and style; a separate mitigation-threshold marker is shown when applicable. Threshold editing is available directly from the detail view. [NG-1523, NG-1325]

• Suggested TOMs — estimated cost input — Commas are formatted automatically; the cursor stays at the end of the number while typing; the default value is zero. [NG-1529]

• Documents & Policies — Linked Controls tab — The linked controls tab now loads correctly and displays the associated International Standard. [NG-1564]

• Display Logs switch — The selected on/off state of the activity-log display switch is now preserved when navigating between sub-screens. [NG-1559]

• Priority levels — Priority colours on risk scenarios now always reflect the live calculated value rather than a cached database value.

• Breadcrumb navigation — The breadcrumb bar on asset and asset-group detail screens supports scrolling between records (previous/next) without returning to the index.

• Toast notifications — A limit is applied to the number of simultaneous toasts; a specific toast is shown when a required standard has not yet been selected. [NG-1519]

• Asset Risk Model info — The active risk model name and type are displayed inline in the Suggested TOMs and Implemented TOMs tables. [NG-1535]

Fixes

• [NG-1642] Filtering by risk score in the risk scenarios list was not working correctly.

• [NG-1644] It was possible to select the same person as both Risk Owner and On-Behalf-Of; validation now prevents this.

• [NG-1639] Delete functionality on assets was broken in certain scenarios.

• [NG-1638] Implementing a TOM from within a ROPA record did not save correctly.

• [NG-1635] An error was thrown when opening the Implemented TOMs tab under certain conditions.

• [NG-1633] An erroneous +1 offset in the risk calculation has been removed.

• [NG-1630] Asset Group permissions were not enforced correctly; specific permission checks have been added.

• [NG-1604] Several permission and role issues affecting asset group visibility have been resolved.

• [NG-1582] The chevron/right-arrow button in the sub-menu was throwing an error.

• [NG-1577] Navigating away from Treatment Options caused unsaved suggested-TOM data to be lost.

• [NG-1573] Unlinking or deleting a risk scenario from an asset caused inconsistent state in related records.

• [NG-1571] Multiplicative risk model calculations were incorrect under specific asset configurations; input validations have been added.

• [NG-1566] The categories view in risk settings was not displaying correctly.

• [NG-1564] The Linked Controls tab on Documents & Policies records was failing to load.

• [NG-1553] Multiple minor issues in the asset TOMs screens have been resolved.

• [NG-1549] Deleting assets was failing in certain cases.

• [NG-1537] The filter on the Implemented TOMs list was not functioning.

• [NG-1534] A blank/blue screen was shown when accessing Process Risk under some conditions.

• [NG-1308] Updating an asset from within an International Standard was not saving correctly.

Known issues

No known issues.

Feedback and Support

We value your feedback. If you encounter any issues or have suggestions, please contact our support team:

• Email: hello@priverion.com

• Schedule a Meeting: Via the Help Widget

• Give Feedback with Screenshots: Via the Feedback Button in the Help Widget

• Schedule a Support Call: Here

• Schedule a Technical Support Call: Here