RMStudio version 2 . 3 (The final 2 . x version)

Released on September 8th 2010.

The following list summarizes the major features released with this version:

• The user can now select which evaluation factors are used as input to the security risk calculation and the factors chosen can be changed “on-the-fly” while working with a Risk Assessment.
• Copy Risk Assessment is now available, providing the possibility to make a complete copy of any selected Risk Assessment.
• Audit trail information has been added to Threats, Standards and Controls.
• The default library for Categories, Threats and Controls are now modifiable by the user. This means that users can now modify/build up their own Asset-Threat-Control library based on the default data supplied with the software.
• Default Evaluation Templates are now modifiable by the user.
• Since the default library is now modifiable any default data modified or deleted by a user can now be reset back to its original state using a new tool located in the Properties Window.
• It is now possible to delete controls on an Asset level in the Risk Treatment as well as on a Global level.
• It is now possible to connect RMStudio to an SQL server located on a different domain.
• All reports are now provided as Local Reports and are bundled into the application. This eliminates the need to setup a separate reporting server for the reports. The server reports are however still provided as an option.
• In addition to the above, there are various enhancements of existing features as well as minor bug fixes.

Version 2 . 2

A NEW AND IMPROVED VERSION OF RM STUDIO HAS BEEN RELEASED! - NOT ONLY FOR ISO 27001

USER DEFINED STANDARDS
Now it’s possible to group user defined controls into a “User defined standard”, to enter user specified controls as an item of a “pre-defined standard” or even to enter a complete international standard (i.e. PCI-DSS, WLA-SCS, ISO-9001 CobIT, ITIL, Coso etc.,) into RM Studio.

GAP ANALYSIS AGAINST VARIOUS REQUIRMENTS
With the new Standard entity it is now possible to do GAP Analysis towards the user defined/entered standards.

INCREASED RISK TREATMENT OPTIONS
With the new Standard entity it is now possible to use the user defined/entered standards as the input to Risk Treatment.

INCREASED FLEXIBILITY
Controls from user defined standards can be used as mitigating controls to standard threats as well as for user defined threats.

EASY INSTALL
Great improvement in installation process, making the trial install more successful.

• RM Studio for various compliance requirements
• Gap-analysis functionality for different standards
• Easy install
• Flexible risk treatment options

Version 2 . 1

OVERVIEW
RM Studio version 2.0 extends RM Studio’s risk management capabilities and provides a comprehensive solution for allowing businesses of all sizes to cost-effectively deploy fully traceable risk assessments and management along with GAP analysis. Version 2.0 introduced a new user interface with a Office 2007© look and feel, powerful search capabilities and greatly simplified handling of assets. RM Studio aims to provide a intuitive and satisfying user experience.

With version 2.1 the capabilities are developed further with a powerful security model, version history capabilities, user definable elements such as evaluation values and asset categories, new and improved reports, updated Threats-Control relation library as well as improved licensing model for the possibility to offer smaller modules of less cost. Version 2.0 introduced a new user interface with a Office 2007© look and feel, powerful search capabilities and greatly simplified handling of assets, RM Studio aims to provide a intuitive and satisfying user experience.

SECURITY MODEL
Version 2.1 comes with a powerful security model providing user authentication and authorization. 
All users get registered and will be assigned to roles where each role has configurable access rights.  Users are now required to logon to the system and based on their access rights they have access to different processes and actions.  The RM Studio Security Model provides the option to use active directory for the user registration.  RM Studio is now more secure with a complete control on user access rights.

VERSION HISTORY CAPABILITIES
RM Studio version 2.1 now provides powerful traceability capabilities, with a complete version history on Risk Assessments.  Users can now call up a version history for the assessments and view previous versions as a whole or down to the individual building blocks of the assessment, such as assets and risks.  The version history will be applied to other elements of RM Studio and made even more powerful in our future releases.

EVALUATION TEMPLATES
RM Studio 2.1 now provides the possibility to the user to change the standard evaluation template and factors as well as defining their own.  This is provided via the intuitive Evaluation Template dialog where it is possible to change or define new Asset Evaluation and Threat Evaluation factors.  The user can then select from the Assessments which evaluation template to use.

ASSET CATEGORIES
User defined Categories Capabilities
In version 2.1 of RM Studio it is possible to create user defined categories, both parent categories and sub categories. This functionality allows easy adaptation for industry specific asset categories to be inserted into the system.

NEW REPORTS
Three new Reports
Three new reports will be launched in version 2.1: Executive summary; a single sheet report showing the current status, Asset Controls; showing for each asset the applied controls and their implementation status, Risk Treatment; listing all managed risks and their treatment status.