CISO Assistant Roadmap - CISO Assistant

Under Consideration

22

Be able to customize emails (onboarding, 3rd party, notification)

Customize export templates

Policies generation

GenAI: Human language search

Policies in Markdown

Expand vulnerabilities management

Switch tables to dynamic datagrid for live input

Attach killchain directly to a scenario (quant/quali)

CISO Assistant Academy (Training platform)

An improved version of the documentation platform that will be focusing on use cases rather than the features description.

Projects (PMBOK) management

Framework editor on the UI

Custom scoring assistant for qualitative scenarios

OSCAL Support

Assets management - data model evolutions

Fine-grained control over notifications

Import a custom framework directly on the UI

Data hub to aggregate multiple CA instances

Trust center

Vulnerabilities to support SLO

Multi-levels filters (eg. classes, domains)

UI editor for killchain modelling

SCIM support

Planned

3

Expand ITSM support

Working on connectors for main ITSM tools starting with Jira and service Now. We aim to provide a bidirectional synchronisation when relevant: puling status of jira cards or creating new ones.

GDPR objects import/export

Implement actor (one or multiple users) concept

In Development

2

Custom metrics

Be able to define your own metrics and update them manually or throught the API

n8n custom node for automation

Introduce a packaged n8n node to interact with CISO Assistant instance directly with high level “functions”

Released

35

Outgoing webhook support

Generic validations management

Be able to request an approval on any relevant object (risk assessment, audit, exception, etc.) from another user and track their response.

JIRA bi-directional sync support

DORA ROI (Register Of Information) reporting

Contracts management

Expand MCP capabilities

Pivot-based mapping

Improve the mapping feature to be able to "suggest" a mapping path through a pivot framework (if A->B and B-C are available, we can use B as pivot to do A->C)

Audits comparaison

Evidences lifecycle and expiry

Quantified Risk Assessment

Add a new risk engine to allow risk quantification using a simplified and advanced mode. This will be complementary to the current mode and user can decide which one to use.

Custom roles

Be able to create custom roles with a set of permissions (CRUD) on objects (risk assessment, processing, applied controls, etc.)

Objectives and Issues concepts

Cover Objectives (Objectifs) and Issues (Enjeux) concepts to help with ISO27001 management

Impact vs Effort map

Campaigns management improvement

Support campaigns of audits to cover an combine multiple perimeters and frameworks at once and aggregate the data.

Markdown support on relevant fields

Expand Alerts and notifications

Cover more email notifications for relevant cases (tasks, assignments, etc.)

Audits auto-sync to actions progress

Kafka dispatcher for automation

Periodic tasks

Findings tracker (eg. Pentest, Self-identified issues)

Audit log

Data import wizard

Exceptions management

Incidents tracking

GDPR Processings (ROPA)

Decision tree and weights on frameworks

Be able to toggle multiple requirements based on the answers of previous items and assign different weights to adjust the scoring