RM Studio v5.4 Release

Announcing the release of Risk Management Studio version 5.4 – Sharing Assets Among Hierarchical Business Entities and Assigning Risks According to the Entities

The full list of new features, improvements, bug fixes and GUI upgrades for v5.4.0, v5.4.1, v5.4.2, and v5.4.3 are available on our Release Notes page.

New Features:

• The Business Entities interface has been redesigned:
  • Business Entities can be hierarchical
  • Threat<->Category connections can be customized for each Business Entity
  • Assets can be created directly under a Business Entity and therefor associated with that BE, but the Asset is also available to associate with other BEs as needed. You can view all Assets created under the Common->Assets.
  • Risks can be added directly to an Asset within a Business Entity, thus allowing for an asset to have different Asset<->Risk associations under different BEs.
  • When adding Categories to Assets, if the Asset is associated with a Business Entity, the Asset will be assocaited with the Risks based on the Threat<->Category connection for that Business Entity only.
  • It is important to note that Categories are associated directly with the Asset, but Risks are associated with the Asset within a Business Entity. If the Asset is shared between multiple Business Entities, the Asset can have different Risks for each Business Entity. An Asset cannot have associated Risks unless it is within a Business Entity
• The Asset interface has been rewritten:
  • The Asset interface now allows you to browse Assets by Categories
  • The Asset interface shows what Business Entities the Asset is associated with
• When adding an Asset to a Risk Assessment, the only Assets available for that RA are Assets that belong to the designated Business Entity when creating the new RA.
• The list of Risks for an Asset evaluated in a Risk Assessment will be the same list of Risks associated with the Asset created under the Business Entity.
• The Threat list interface has been rewritten to show Threats grouped by Threat Type in a tree structure.
• Threat Types are now created in the same interface as Threats. The Threat Type node has been removed from the main navigation tree.

Improvements/Modifications:

• It is now possible to assign Categories to multiple Assets in a single operation, either within the new Asset interface or the new Business Entity interface
• Added a new type of Document classification. There are now three types of document classifications available:
  • Embedded ̶ The document is stored in the RM Studio database. You can store any type of file this way
  • External ̶ The document is stored as a file external to RM Studio on a file system or URL
  • New: RM Studio Document ̶ This type of document is stored as HTML text within the RM Studio database. The document contents are modified within RM Studio using a rich text editor. This type of document can be viewed directly using the Web Module.

Bug fixes:

Fixed an issue when deleting an Asset from a Risk Assessment if the Asset had Risks that were associated with any Tasks

RMS – Web 1.4

New Features:

• Added ability to view Documents on the web. The new RM Studio Documents can be browsed and linked to as web pages
• Added minimal Dashboard features on the home page:
  • Open tasks: Shows any open Tasks assigned to the logged in user
  • Pinned document folder: Add a direct link to a Document Folder for quick browsing
  • Top 10 risks: Shows top ten Risks by Inherent Risk Score for Risks that the current logged in user is a Risk Owner of.

Improvements:

• Redesigned the look of the sidebar and added a collapse icon.