What's New in CISO Assistant — Week 21, 2026 (v3.16.3 – v3.16.4)

This week brings two releases: a feature-packed v3.16.3 on May 16, followed quickly by the v3.16.4 hotfix on May 18. New frameworks, a Responsibility Matrix, Ebios RM interop, task labels, Estonian language support, and a flurry of framework builder and i18n improvements.

Headline Features

• Responsibility Matrix (RACI, RASCI, RAPID) — Native support for responsibility assignment matrices, making it straightforward to capture who is Responsible, Accountable, Consulted, Informed (and the RASCI/RAPID variants) directly inside the platform.
• Ebios RM import in Egerie format — CISO Assistant now imports Ebios RM studies exported in the Egerie format, opening a smoother migration path for organizations using Egerie’s risk tooling.
• Task labels — Tasks now support labels, enabling lightweight categorization, filtering, and reporting across task lists. Thanks to @tarkadia.
• Export modal for context and discoverability — Exports are now triggered through a dedicated modal that surfaces the available options up front, replacing the previous less-discoverable flow.

Framework & Library Updates

• 🇸🇦 KSA PDPL — Saudi Arabia’s Personal Data Protection Law framework is now available as a library, joining the growing roster of national data protection regulations covered out of the box.
• 🤖 AI Defense Matrix Framework — A new framework targeting AI system defense, contributed by first-time contributor @scuba-st3v3.

Framework Builder

• Internationalization — The framework builder UI is now translatable, an important step toward enabling non-English-speaking authors to build and maintain frameworks in their own language.
• Slider inputs for numbers and single choice + URN change fixes — Numeric and single-choice questions can now use slider inputs, and a class of URN change bugs are resolved. Thanks to @nas-tabchiche.
• Question CRUD on top-level requirement nodes — Top-level requirement nodes now support question create/read/update/delete operations, removing an awkward limitation. Thanks to @nas-tabchiche.
• Top-level nodes included in translation operations — Translation tooling now covers top-level requirement nodes as well. Thanks to @nas-tabchiche.

UX

• Suggested measures button — improved behavior — The suggested measures button is now more predictable in how it triggers and presents suggestions. Thanks to @Mohamed-Hacene.
• Breadcrumbs improvements (v3.16.4) — Continued polish to breadcrumb behavior across navigation flows. Thanks to @Mohamed-Hacene.

Internationalization

• 🇪🇪 Estonian language support — Estonian joins the supported language set. Welcome to @TaLoN1x for their first contribution shipping the Estonian translation, on top of the preparatory groundwork.
• Translation progress tracker — A new tracker makes it easier to see where each language stands on coverage.
• Recover missing French strings — A pass to restore French strings that had dropped out of coverage.

Bug Fixes

• Third-party access to profile and settings — Third-party users can now access their own profile and settings, fixing a long-open gap (PR #3700). Thanks to @martinzerty.
• Reset filter regression — A regression in the reset filter behavior is fixed. Thanks to @tchoumi313.
• Matrix Editor — blank fields after Matrix duplication & YAML import (v3.16.4) — Backend + UI fix for blank fields appearing in the Matrix Editor after duplication or YAML import, plus a page title fix. Thanks to @tarkadia.
• Journey templates load post-migrate (v3.16.4) — A hotfix ensures journey templates load correctly after migrations. Thanks to @martinzerty.
• Libraries test reliability — The libraries test suite is more reliable. Thanks to @Mohamed-Hacene.

Maintenance

• CLICA dependencies and README — Refreshed CLI dependencies and accompanying documentation.
• Backend & automation dependency updates — Incremental updates across backend dependencies and the automation folder.
• Svelte version upgrade — Frontend Svelte version bumped.
• Helm chart matched to v3.16.2 — Chart version aligned to the previous release line.
• Native Windows dev — PowerShell reformat.sh equivalent — A PowerShell port of reformat.sh for native Windows contributors. Thanks to @tarkadia.

New Contributors

A warm welcome to two first-time contributors this week:

• @scuba-st3v3 — added the AI Defense Matrix Framework.
• @TaLoN1x — shipped Estonian language support.

For full details, check out the v3.16.3 and v3.16.4 release notes on GitHub.