· intuitem · News · 2 min read
What's New in CISO Assistant — Week 04, 2026 (v3.10.4)
v3.10.4 refines the GDPR module with breaking simplifications, adds audit score aggregation options, manager review of assignments, and the BIO2 framework.
Version 3.10.4 wraps up January with meaningful improvements to the GDPR module, audit scoring flexibility, and day-to-day UX polish.
GDPR Module Overhaul
The GDPR module received multiple improvements and simplifications in this release. Notably:
- More granular feature flags — You can now toggle individual GDPR capabilities on or off with finer control, making it easier to adopt only the parts your organisation needs.
- Purposes and personal data creation no longer requires broad global permissions, lowering the barrier for teams that manage data-protection records without full admin access.
- Breaking change: Some legal basis values that were incorrectly defined have been corrected and reset. If you had records referencing those values, they will need to be re-selected after the upgrade. Review the release notes for the specific fields affected before upgrading production.
New Features
Audit score aggregation choice — When rolling up scores across an audit, you can now choose between Sum and Average aggregation. This gives you the flexibility to align scoring with your organisation’s methodology — Sum rewards breadth of coverage, while Average normalises across varying numbers of requirements.
Manager review of other users’ assignments (Pro) — Managers can now view and review assignments belonging to other users on their team, improving oversight without requiring admin-level privileges.
Browser tab titles — Each page now sets a meaningful tab title, so you can finally tell your dozen open CISO Assistant tabs apart.
Framework & Library Updates
- BIO2 — The Baseline Informatiebeveiliging Overheid v2 framework is now available, covering Dutch government information security requirements.
Bug Fixes
- Extended-result auto-flip edge case — Fixed a scenario where the result value could flip unexpectedly when the extended-result toggle was enabled.
- Actor emails in audit Word export — Actor email addresses are now correctly unpacked when generating Word documents for audits, preventing malformed contact fields in exported reports.
For the full list of changes, see the v3.10.4 release on GitHub.
