This release introduces two-factor authentication, improved compliance management across organizations, better evidence handling, and several workflow improvements.
- Cyrigo now supports two-factor authentication using authenticator apps.
- Secure sign-in with an additional verification step.
- Recovery codes if you lose access to your authenticator.
- Organizations can require 2FA for all users.
- Administrators can view 2FA status and reset authentication for users.
Important: Existing sessions will end when this update is deployed, requiring users to sign in again.
Cyrigo now includes dedicated registers for managing business relationships, including suppliers, subcontractors and customers.
- Party Register: Maintain a central overview of organizations, suppliers and subcontractors, including relationships throughout the supply chain.
- Customer Register: Manage customer relationships, with support for anonymizing personal information.
- Supply Chain Visibility: Identify direct suppliers, subcontractors and dependencies further up the supply chain.
- Relationship Risk Assessment: Assess risks associated with customer relationships through a dedicated pre-assessment.
- Improved Data Quality: Identify potential duplicates, merge records and manage incomplete supplier information.
Pre-assessments have received a substantial upgrade, making it easier to identify required actions and follow up on findings.
- One treatment catalog across the organization: Treatments are maintained centrally and can be reused across subsidiaries and assessments.
- Treatments for all five pre-assessment types: Expanded best-practice recommendations help identify relevant security, privacy and compliance measures.
- Unified Assessment Report: A redesigned view brings together answers, results, treatments and assessment history in one place.
- Better Treatment Overview: Treatments originating from pre-assessments can now be identified, filtered and reviewed separately.
- More Transparent Recommendations: See why treatments are recommended, not applicable or unnecessary.
- Improved Approval Traceability: Changes that invalidate an approved assessment are clearly communicated and recorded, including who made the change.
The AI Act pre-assessment form has been redesigned with clearer sections, improved question layouts and a more consistent experience across assessment types.
These improvements make it easier to evaluate AI systems and document compliance considerations within the same workflow used for other pre-assessments.
- Organizations with multiple subsidiaries can now coordinate compliance activities more effectively.
- Define controls centrally and distribute them to subsidiaries.
- Subsidiaries can confirm centrally managed controls or manage them independently.
- Track implementation progress across the organization.
- See where subsidiaries have different control implementations and why.
- This reduces duplicated compliance work while preserving local responsibility and flexibility.
- Framework controls now support evidence from documents in the file library and external URLs.
- Link supporting documentation directly to controls.
- Keep evidence associated with controls as they are updated.
- Receive warnings when assigned users cannot access supporting evidence.
- Improved visibility when evidence is no longer available.
A new My Controls view in My Workspace gives users direct access to the compliance controls they are responsible for.
This makes it easier to follow up assigned controls without navigating through individual frameworks.
The Dependencies module is now available to all Cyrigo customers. Map dependencies between IT systems, identify critical dependencies and explore potential consequences when systems fail or become compromised.
Dependency simulations can also lead directly into the risk assessment workflow.
¶ Better Collaboration and Document Sharing
- Improved document visibility and access management.
- Shared policy attachments are now easier to access.
- Tasks can be shared across organizational levels, with local progress tracking.
- Clearer management of inherited settings and responsibilities.
Business process activities can now be linked to controls from activated compliance frameworks, connecting operational processes more closely with compliance requirements.
¶ Risk Management and Usability
- Add risk treatments directly from Bowtie cause and consequence cards.
- Improved risk registry consistency.
- Faster access to individual framework controls.
- Improved file previews, table controls and navigation.
- Updated email notifications with clearer design and direct links to relevant tasks and treatment plans.
¶ Security and Stability
The release also includes improvements to access control, document sharing, authentication, automated testing and general application reliability.
These changes strengthen security while making day-to-day compliance and risk management easier across the organization.