What's New in CISO Assistant — Week 02, 2026 (v3.9.2)

Version 3.9.2 is here with fresh framework content, expanded internationalization, and several community-driven improvements.

Framework & Library Updates

Estonian E-ITS framework — CISO Assistant now supports the Estonian Information Security Standard (E-ITS), widening coverage for organizations operating under Baltic and EU regulatory expectations.
MITRE ATT&CK v18.1 — The threat library has been updated to the latest ATT&CK release, keeping your threat-informed assessments current.

Internationalization

Chinese (Simplified) is now available as a UI language, joining the growing roster of supported locales.
Missing Italian strings have been filled in, and a Spanish translation has been added for the policy documentation template.

New Features

Richer asset exports and views — Assets now expose additional fields in both the list view and Excel/CSV exports, giving you more context without needing to open each record individually. A big thanks to @StefanFl for this contribution — welcome as a new contributor!

Enclave toggle on the organisation tree — You can now choose whether enclaves appear in the organisation tree view. This is handy for keeping the hierarchy clean when enclaves are managed separately or simply not relevant to the current task.

Bug Fixes & Improvements

Better reverse-link handling on Policies — Navigating from a policy back to the objects that reference it is now more reliable, especially in complex folder structures.
IdP multi-email guardrail — If your identity provider sends multiple email addresses in a single assertion, CISO Assistant now handles this gracefully instead of failing during social-account linking.
Sanitized task names in XLSX export — Task names containing characters invalid for Excel sheet names are now cleaned up automatically, preventing broken exports.

For the full list of changes, see the v3.9.2 release on GitHub.