· intuitem · News  · 2 min read

What's New in CISO Assistant — Week 02, 2026 (v3.9.2)

v3.9.2 brings the Estonian E-ITS framework, MITRE ATT&CK v18.1, Chinese (Simplified) translation, richer asset exports, and quality-of-life fixes for IdP and policy management.

v3.9.2 brings the Estonian E-ITS framework, MITRE ATT&CK v18.1, Chinese (Simplified) translation, richer asset exports, and quality-of-life fixes for IdP and policy management.

Version 3.9.2 is here with fresh framework content, expanded internationalization, and several community-driven improvements.

Framework & Library Updates

  • Estonian E-ITS framework — CISO Assistant now supports the Estonian Information Security Standard (E-ITS), widening coverage for organizations operating under Baltic and EU regulatory expectations.
  • MITRE ATT&CK v18.1 — The threat library has been updated to the latest ATT&CK release, keeping your threat-informed assessments current.

Internationalization

  • Chinese (Simplified) is now available as a UI language, joining the growing roster of supported locales.
  • Missing Italian strings have been filled in, and a Spanish translation has been added for the policy documentation template.

New Features

Richer asset exports and views — Assets now expose additional fields in both the list view and Excel/CSV exports, giving you more context without needing to open each record individually. A big thanks to @StefanFl for this contribution — welcome as a new contributor!

Enclave toggle on the organisation tree — You can now choose whether enclaves appear in the organisation tree view. This is handy for keeping the hierarchy clean when enclaves are managed separately or simply not relevant to the current task.

Bug Fixes & Improvements

  • Better reverse-link handling on Policies — Navigating from a policy back to the objects that reference it is now more reliable, especially in complex folder structures.
  • IdP multi-email guardrail — If your identity provider sends multiple email addresses in a single assertion, CISO Assistant now handles this gracefully instead of failing during social-account linking.
  • Sanitized task names in XLSX export — Task names containing characters invalid for Excel sheet names are now cleaned up automatically, preventing broken exports.

For the full list of changes, see the v3.9.2 release on GitHub.

Back to Blog

Related Posts

View All Posts »
What's New in CISO Assistant — Week 44, 2026 (v4.1.2)

What's New in CISO Assistant — Week 44, 2026 (v4.1.2)

v4.1.2 brings DPIA screening and assessment for GDPR, a processor register, computed metrics built from metric instances, a dependency analysis for business impact analyses, a single mail service with failover, OAuth for audit-log forwarding to Microsoft Sentinel, Plumber imports into technical postures, MCP tools for incidents and evidence, and new libraries: Hungarian NIS2, Costa Rica BCCR-SINPE NT-RCS and a question-based NCSC CAF.

What's New in CISO Assistant — Week 43, 2026 (v4.1.1)

What's New in CISO Assistant — Week 43, 2026 (v4.1.1)

v4.1.1 adds vendor tiering backed by scored criticality forms, outcome rules on frameworks that check the CyFun 2025 conformity criteria, an export to the official CCB CyFun tools, paginated external APIs and bulk writes in workflows, an experimental domain compliance tree, more MCP coverage (advanced EBIOS RM, assets, teams), and new libraries: China PIPL, OWASP SAMM v2.2, ISO 27001 ↔ HDS and IEC 62443 ↔ ANSSI mappings.

What's New in CISO Assistant — Week 42, 2026 (v4.1.0)

What's New in CISO Assistant — Week 42, 2026 (v4.1.0)

v4.1.0 brings a large rework of the EBIOS RM module (study framing, RO/TO radar, standard and advanced likelihood methods on kill-chain steps), arithmetic in workflows with a CEL compute action, MCP write tools for a full risk review, a delegated user-creator role, entity-assessment exports, the BSI C5:2026 framework, German email templates, and a breaking change to the current-user API.

What's New in CISO Assistant — Week 41, 2026 (v4.0.8 – v4.0.9)

What's New in CISO Assistant — Week 41, 2026 (v4.0.8 – v4.0.9)

v4.0.8 and v4.0.9 let you set a custom score scale on an audit without cloning its framework, bring the SCF 2026.3 framework and a proper ASD Essential Eight (November 2023) model, make every linked-object tab on applied controls able to link existing objects, load long autocomplete lists in batches, and fix a seat-count regression that made readers count as editors.