KCM GRC Change Log

February 2019

• The following are new Managed Templates now available for your account (contact your Customer Success Manager to have additional Templates added to your account):
  • Financial Services Sector Coordinating Council (FSSCC) v1.0
  • NIST SP 800-171 Appendix E v2016
  • FedRAMP High Baseline Controls v8.2018
  • FedRAMP Moderate Baseline Controls v8.2018
  • FedRAMP Low Baseline Controls v8.2018
  • FedRAMP LI-SaaS Baseline v8.2018
  • NIST 800-53 High-Impact Baseline rev4
  • NIST 800-53 Moderate-Impact Baseline rev4 
  • NIST 800-53 Low-Impact Baseline rev4
  • International Traffic in Arms Regulations (ITAR) v12.2018
• The following are updated managed Templates now available for your account (contact your Customer Success Manager to have additional Templates added to your account):
  • NIST 800-53 rev4

January 2019

• The following are new Managed Templates now available for your account (contact your Customer Success Manager to have additional Templates added to your account):
  • PCI DSS - Self-Assessment Questionnaire A-EP v3.2.1
  • AB-375 Consumer Privacy Act of California v1.0
  • NAIC MDL - Insurance Data Security Law v4th Quarter 2017
  • PIPEDA v12.2018
  • HITECH v2.2009
• The following are updated managed Templates now available for your account (contact your Customer Success Manager to have additional Templates added to your account):
  • HIPAA Privacy and Breach v1.0
  • HIPAA Security Rule v1.0
  • PCI DSS Appendix A v3.2.1
  • CJIS Security Policy v5.7
  • SWIFT CSP v2019

December 2018

• New Managed Template now available (contact your Customer Success Manager to have additional Templates added to your account):
  • SSAE18 SOC2 TSC (AT-C 105/205)
• The ability to create Risk tags was added.
• Added a new tab called Risk Settings to the Account Settings page where you can manage custom categories and risk tags.
• You can now create, edit, delete, and CSV upload custom Risk templates.

November 2018

• New Managed Template now available (contact your Customer Success Manager to have additional Templates added to your account):
  • NIST SP 800-171 A
• Added the user role Risk Administrator.
• Added the ability to map controls to a risk.
• Added the Risk Management report. See here for more information.
• Added the ability to export the Evidence Repository to a CSV file.

October 2018

• The Risk Management Module has been added to KCM GRC.
  • Risk Management simplifies the processes of identifying, assessing, and managing the risks faced by your organization. See here for more information.
• The threat Quick Add screen was added. For more information, see here.
• The View Risk screen was added. See here for more information.
• Added the ability to upload risk templates with a CSV file from the Risk Templates screen.
• Added the ability to import risks to the risk registry with a CSV file.
• Added sample CSV files to download and use as a template when using a CSV file for imports.
• Added colors for the different Risk categories.

September 2018

• The ability to Clone Scopes was added.
• A new Managed Template is now available as a result of revisions to NIST SP 800-171 Rev. 1 (contact your Customer Success Manager to have additional Templates added to your account):
  • NIST SP 800-171 Rev. 1 (updated 06/07/2018)

June 2018

• Executive Reporting features have been added to KCM GRC.
  • Executive Reports give you the ability to send status reports for one or more Scopes at a frequency you choose. See here for more information.
• Two new Managed Templates are now available as a result of revisions to PCI DSS (contact your Customer Success Manager to have additional Templates added to your account):
  
  • PCI DSS v3.2.1:
    • The most current Template for this publication (supersedes PCI DSS v3.2)
  • PCI DSS Changes v3.2.1:
    • Consists only of the changes made to this publication since the previous KCM GRC Template (PCI DSS v3.2)

May 2018

• Multi-Factor Authentication is now available for your KCM GRC platform.
• New versions of Managed Templates are now available (contact your Customer Success Manager to have additional Templates added to your account):
  • CIS Critical Security Controls 7
  • NIST Cybersecurity Framework v1.1
  • NIST SP 800-171 Rev. 1 (Updated 2/20/2018)

April 2018

• New Managed Template now available (contact your Customer Success Manager to have additional Templates added to your account):
  • General Data Protection Regulation (GDPR)
• The Policy Management module was added to KCM GRC.
  • Policy Management allows you to easily track and manage your organization's policy distribution and user acknowledgments. See here for more information.

February 2018

• New Managed Template now available (contact your Customer Success Manager to have additional Templates added to your account):
  • UK Cyber Security Essentials 

January 2018

• Two new Managed Templates are now available as a result of revisions to NIST SP 800-171 (contact your Customer Success Manager to have additional Templates added to your account):
  • NIST SP800-171 2017:
    • The most current Template for this publication (supersedes NIST SP800-171 2015)
  • NIST SP 800-171 Changes 2015-2017:
    • Consists only of the changes made to this publication since the previous KCM GRC Template (NIST SP800-171 2015)

December 2017

• Improved reporting features, such as Gantt charts and additions to the Evidence Repository table

November 2017

• New and improved account settings features:
  • Ability to add a display name and company logo
  • Ability to restrict access to allow only certain IPs
  • Limit control and task documents to DocuLinks and/or uploads
  • Hide your console from KCM GRC support
  • Configure the time needed to prepare evidence for ongoing tasks, when using Effective Date Range (EDR) feature.
• Effective Date Range (EDR) feature release:
  • Allows admins to set start, end, and due date for tasks.
  • End date/Due dates are dependent on Frequency of task. Frequency settings can be manually adjusted in Account Settings.
  • Start, end, and due date can be modified within each Task.
• Set up an advanced, one-time task:
  • Allows admins to set up a one-time task with a start, end, and due date.