Now it's possible to add some custom text to report cover pages. This can be used to e.g. mention, in which meetings this report has been addressed.
You can now, if you wish, enable employees to inform admins of security incidents through the Guidebook view.
You will find a new section "Employee actions on Guidebook" on the Settings page. Here you can turn this feature on if you want. A link appears in the upper left corner of the Guidebook, through which a short workflow for reporting an incident begins.
The owner selected for the "Security incidents" documentation list receives a notification of new incidents, after which he can process the matter further.
In the Organization dashboard view, you'll now see a new link on the left menu that takes you to the User stats -page.
Use this page to see how different responsibilities have been distributed within your team and how each team member has been able to progress with their responsibilities.
The User stats -page lists the users for whom you can assign items in Cyberday, i.e. Contributor, Team, and Admin users.
If you have chosen an online payment method when making the Cyberday subscription, you can now easily update your payment information or other information related to your subscription directly through Cyberday.
You will find a link to manage your subscription under Settings -> Trial and subscription.
You will now see additional information above each guidelines list about when the next notification of reading the guidelines will be sent to employees by default.
For example, if you've made significant updates to your guidelines, you can now trigger a notification manually whenever you want by clicking the "Send notifications now" -link.
Notifications will only be sent to employees who have pending content in the Guidebook.
For each task card, you will see information about which parts of the different security frameworks this task is related to.
Now, in connection with these sections, a link will also appear, from which you can jump to a more detailed compliance report. There you can see e.g. which other tasks are used to fill the same requirements.
If you accumulate a lot of items in your organization's cyber security management system, the Taskbook can grow long.
We've included other improvements to the Taskbook recently that make it easier to find important content, but there was no search in there before. Now we added search functionality to Taskbook also. 👍
You can now enable the "Risk autopilot" from your account's risk management settings.
This is our newest addition for making cyber security risk management more automated. Our goal is to help you focus on the biggest risks - which are likely and impactful in today's digital world and which you don't yet have many controlling tasks for.
We'll be creating a more detailed description of the risk autopilot functionality soon.
Related addition: Risk autopilot will also be accompanied by an "organization's risk profile" soon. This will enable you to make a few key choices (e.g. amount of physical locations, amount of employees, importance of own software development) used to automatically tune risk levels even more accurately.
For example, if you've linked risks to a security incident or change on the documentation card, you'll clearly see also the level of the risk and risks will automatically be listed in order by risk level.
Cyberday now also works in French. This means the possibility for:
We did a template content sync round #38 for Cyberday recently. As a new addition, e.g. themed risk assessments were introduced.
These allow you to define a clear target for a risk assessment, such as a specific data system, physical office, partner organization or databank. You will then be able to identify the risks specific to this item in more detail than in general risk management.
The documentation of the theme risk assessments also helps to distinguish these items from the risk documentation in general, which have been the subject of a more detailed assessment.
We will add a new setting to Cyberday that further automates risk evaluation and management. When you enable the risk autopilot mode, risks are automatically given an expert evaluation and the impact of related management tasks on the risk level is also automatically calculated.
Based on this, we aim to help you identify as effectively as possible the risks to which your organization should pay extra attention in. In the future, we will also develop factors that take into account the type of organization's operations (e.g. number and turnover of personnel, number of physical locations, special features of operations such as software development).
We've published a few changes to make the contents of the Taskbook clearer for every key user in your Cyberday account:
If you wish, you can now remove the possibility for employees to request wider access to Cyberday directly through Teams.
By default, when navigating the Taskbook or Organization dashboard tabs, a person is shown an info message and offered the option to request access if they do not already have permission to view this tab. If you pull the switch to the left, this button for access requesting will not be displayed.
Active employees can be involved in the continuous improvement of their Cyberday guidelines by commenting on them.
Now the owners of the guidelines will receive a weekly digest message of these comments from Cyberday Teams bot, if they have any untreated comments in the guidelines they own.
The guideline comments have also been better emphasized in the UI to make them stand out when needed.