CISO Assistant Roadmap - CISO Assistant

Under Consideration

12

Decision tree and weights on frameworks

Customize export templates

Policies generation

GenAI: Human language search

Expand vulnerabilities management

Projects (PMBOK) management

OSCAL Support

Fine-grained control over notifications

Import a custom framework directly on the UI

Data hub to aggregate multiple CA instances

Audits snapshots and comparaison

Expand MCP capabilities

Planned

6

Evidences lifecycle and expiry

n8n custom node for automation

Introduce a packaged n8n node to interact with CISO Assistant instance directly with high level “functions”

ITSM integration (JIRA, SNOW, GLPI)

Working on connectors for main ITSM tools starting with Jira and service Now. We aim to provide a bidirectional synchronisation when relevant: puling status of jira cards or creating new ones.

Webhooks support

Policies in Markdown

Custom metrics

In Development

3

Quantified Risk Assessment

Add a new risk engine to allow risk quantification using a simplified and advanced mode. This will be complementary to the current mode and user can decide which one to use.

CISO Assistant Academy (Training platform)

An improved version of the documentation platform that will be focusing on use cases rather than the features description.

Pivot-based mapping

Improve the mapping feature to be able to "suggest" a mapping path through a pivot framework (if A->B and B-C are available, we can use B as pivot to do A->C)

Released

24

Custom roles

Be able to create custom roles with a set of permissions (CRUD) on objects (risk assessment, processing, applied controls, etc.)

Objectives and Issues concepts

Cover Objectives (Objectifs) and Issues (Enjeux) concepts to help with ISO27001 management

Impact vs Effort map

Campaigns management improvement

Support campaigns of audits to cover an combine multiple perimeters and frameworks at once and aggregate the data.

Markdown support on relevant fields

Expand Alerts and notifications

Cover more email notifications for relevant cases (tasks, assignments, etc.)

Decision tree and weights on frameworks

Customize export templates

Policies generation

GenAI: Human language search

Expand vulnerabilities management

Projects (PMBOK) management

OSCAL Support

Fine-grained control over notifications

Import a custom framework directly on the UI

Data hub to aggregate multiple CA instances

Audits snapshots and comparaison

Expand MCP capabilities

Evidences lifecycle and expiry

n8n custom node for automation

ITSM integration (JIRA, SNOW, GLPI)

Webhooks support

Policies in Markdown

Custom metrics

Quantified Risk Assessment

CISO Assistant Academy (Training platform)

Pivot-based mapping

Custom roles

Objectives and Issues concepts

Impact vs Effort map

Campaigns management improvement

Markdown support on relevant fields

Expand Alerts and notifications

Audits auto-sync to actions progress

Kafka dispatcher for automation

Periodic tasks

Findings tracker (eg. Pentest, Self-identified issues)

Audit log

Data import wizard

Exceptions management

Incidents tracking

GDPR Processings (ROPA)

Features toggle for navbar

Support Object storage for evidences

Support BIA

Analytics by domain

Ebios RM visual guide

Allow matrix flip

link personal data to assets

Svelte 5 migration

Manage risk appetite concept