Release Notes - CRT Version 6.4.144

BUG FIXES

• #2392 - Maturity Management - When navigating into a task and subsequently using the back button to exit, some buttons at the top of the screen may become hidden. However, if you exit the Maturity Management section and then return to it via the dashboard, those buttons will reappear. This issue has now been successfully resolved in this release.
• #2844 - Administrator > Manage Client > User - Users with the "User Manager" entitlement are now restricted from changing roles to those that exceed their current level of authority. This issue has now been addressed and resolved in this release.
• #2876 - Compliance Management > Engagement Management > Engagement Information - When an engagement is linked to a repository, it will now display the type of repository in the "Repository" box and the corresponding path in the "Share URL" box. Additionally, the system will indicate whether the connection to the repository is successful. This enhancement has been successfully implemented in the current release.
• #2922 - Maturity Management > SSP - When reviewing the Virtual SSP, users will find that the domains and practices are displayed in the correct order. However, previously, downloading the SSP in Word resulted in the domains being out of order. This issue has now been successfully resolved in this release.
• #2923 - Maturity Management > Managed Finding > Task -The task has been successfully copied to the library, and it is now visible in the type library as intended. This issue has been resolved in this release.
• #2957 - Maturity Management > Managed Finding > SSP - The issue where the address for the Information System Owner was not being saved after using the copy/paste function has been successfully resolved in this release.
• #2959 - Administrator > Assessment Type Editor - When adding assessment types, users were previously able to create multiple entries with the same name, making it challenging to distinguish between them. This issue has been resolved in this release, improving clarity and usability.
• #2961 - Third-Party Risk Management - The issue where evidence uploaded to the database did not have a unique name has been addressed. Previously, there was an inconsistency between how evidence was uploaded and saved in the CRT portal compared to the TPRM portal. This issue has been successfully resolved in this release.
• #2976 - Session Logout Issue - A potential issue was identified with AJAX calls that caused unexpected behavior when a user was logged into one tab while another user logged out. This issue has now been successfully resolved in this release.
• #2990 - Administrator > Manage Client > The never fully implemented "System Tracker " option has been removed from Client Products. This change has been successfully implemented in this release, enhancing the overall user experience.
• #2991 - Administration > Manage Organizations - Issues related to Organization Tasks not functioning correctly, difficulties in deleting Organization notes, the display of multiple time domains during note filtration, and problems with uploading Organization logos have all been successfully addressed in this release.
• #3005 - Maturity Management > SSP - When generating a new SSP, the versioning and numbering functions now operate automatically, eliminating the need for any manual adjustments. Additionally, users no longer need to refresh the page for the download button to appear. These improvements have been successfully implemented in this release.
• #3006 - Administration > Assessment Type Editor > Report Templates - All report templates associated with a specific assessment type are now displayed, allowing users to easily access and perform actions on them. This issue has been successfully resolved in this release.
• #3007 - Compliance Management > Engagement Management > Assessment - When generating a report, if no template is assigned to the assessment type, the message and instructions have been updated to guide users in adding the appropriate report template to the assessment type. This issue has been successfully implemented in this release.
• #3015 - Administrator > Document Explorer > Document Explorer Assessment > Evidence Auditing - When selecting an assessment, the dropdown menu will now display options in alphabetical order rather than chronological order, enhancing usability. This issue has been successfully implemented in this release.
• #3018 - Administration > Resource Management - When using the "Resource Management List", the search field is not functioning. This issue has been successfully implemented in this release.
• #3021 - Administrator > Manage Client > File Repository - Clients can now configure multiple connector settings according to their requirements. Once the repository is connected, engagements can subsequently be linked to the designated connector. This issue has been successfully implemented in this release.
• #3025 - Administration > Users - An issue was found that prevented users from editing a user account properly. This issue has been addressed and resolved in this release.
• #3030 - Dashboard - Client Admin role users were previously unable to view tasks associated with their clients. This issue has been successfully resolved in this release.
• #3041 - Login - If a user is deleted and subsequently re-added with the same username or email, the system previously prevented the user from logging in. This issue has now been resolved in this release.
• #3049 - General '@' Messaging Functionality - The functionality should be expanded to ensure that all resources are visible in the drop-down list. When a user types "@" in the input field, the drop-down should display all available resources, allowing for easy searching or providing a comprehensive list to choose from. This issue is fixed in this release.
• #3061 - Third-Party Risk Management  > Notification Management enhancement - In the RACI dropdown lists, previously, all vendor users were visible for any vendor, which was not intended. This issue has been addressed in this release.
• #3062 -  Administration > Manage Clients > Client User - Users with permissions to add new clients were previously unable to do so. This issue has been resolved in this release.
• #3064 - Administration > Manage Clients > Client Users - The process of adding users could sometimes result in unpredictable behavior within the system. This issue has been successfully addressed in this release.
• #3072 - Administration > Manage Clients > Client Users - When attempting to add a new user and select the Internal Notes contributor role, users previously encountered an error message that prevented changes from being saved. This issue has now been successfully resolved in this release.
• #3075 - Error Log - Unexpected 404 errors were causing excessive logging in a specific database. This issue has been addressed and resolved in this release.

PRODUCT ENHANCEMENTS

• #1670 - Visual Accessibility Enhancement - To enhance the Visual Accessibility option, we have introduced clear and comprehensive explanations for each setting. This ensures that users can easily understand their choices and make informed decisions. These detailed descriptions will help users select the visual accessibility settings that best suit their individual needs. This feature is included in this release.
• #2670 - Administration > Users > Add User - The name of the Subscriptions tab has been updated to "Notifications" for improved clarity and user experience. This enhancement is included in this release.
• #2830 - Dashboard > Open task in new tab - When the user clicks the button to view the managed practice, it now opens in a new tab. This enhancement allows users to easily stay on their current task list without needing to duplicate the original tab.
• #2966 - General Dashboard - Users have noted a gradual increase in the time it takes to switch between clients. To address this, we have implemented recommendations from the GTM team to enhance the dashboard's performance by optimizing loading times and improving animation speed.
• #2972 - Compliance Management > Engagement Management - The term "Subscription" has been updated to "Auto Iteration" in the Engagement Details section to enhance clarity and user understanding. This change has been implemented in this release.
• #2993 - Administration > Assessment Editor > Practice - Improvements have been made to the editor form, enhancing the efficiency of editing and selecting the Assessment Type and Compliance options within the Practice Add/Edit form.
• #3001 - Release Notes Upgrades - To improve the delivery of notification updates, we will transition from the current messaging system to the originally designed FTUE (First-Time User Experience) option. This change will streamline the process by presenting updates in a straightforward, one-page format.
• #3008 - Administrator > Assessment Type Editor > Report Templates -When attempting to clone a report, users experienced an issue that prevented the cloning process from completing successfully. This problem has now been resolved in this release.
• #3011 - Compliance Management > Engagement Management > Assessment Management > Iteration - When a user generates an iteration assessment report, there was an issue where the data was not carried over to the subsequent iteration.
• #3019 - Document Control Management System > Published Documents - We have introduced a new feature within the Document Control Management System (DCMS) that enables users to preview documents in their final exported format.
• #3056 - Administration > Manage Clients > Client User - To ensure a comprehensive audit of all notification events, we log the complete details of each notification sent to a user. However, it was discovered that, in certain circumstances, there was a potential risk if authorized users with access to the logs would have access to information in the logs, such as password reset links and multi-factor authentication (MFA) codes. This potential risk has been addressed in the current release by obfuscating the sensitive data while keeping the log event of the notification itself.
• #3063 - Client Contract Permissions - At present, client contract permissions are not associated with any entitlement. In this release, we have established a connection between contract permissions and the License Manager entitlement.
• #3065 - Third-Party Risk Management > Assessment List - When creating a new assessment, an "Assessment Indicator" field has been added. This field is designed to be versatile, allowing it to function effectively across multiple systems rather than being limited to a specific one. This feature is included in this release.
• #3071 - Third-Party Risk Management > Assessment List - When creating a new assessment, an "Assessment Outcome" field has been introduced. This field allows users to clearly indicate whether the assessment outcome has been "Approved" or "Rejected." This feature is included in this release.
• #3080 - Compliance Management > Engagement Management > Assessment - Duplicate the evidence to the most recent assessment iteration, allowing it to be displayed in the evidence list, as well as in the evidence preview for easy downloading.