Governance Suite Release - November 27, 2024

Release Details

Platform Application: Governance Suite 

Release: 2024.11.02

Release Date: Nov 27, 2024

Summary

The following new enhancements and functionality will be deployed on November 27, 2024:

PrivacyCentral

Nymity Research

Data Mapping & Risk Manager

Assessment Manager

PrivacyCentral

Add Audit Log on Intelligence Scan Page

Benefits

Easily download the audit log from the Intelligence Scan page.

Details

  • Changed the Download Report button to the Download drop-down menu and added Audit Log as option which downloads the audit log in CSV format


  • Included the following information in the audit log:
    • Entity Action
    • External Standard Ids
    • User Id
    • User Name
    • Email - included when there is select/unselect operation
    • Created
    • Message

Display Effectiveness Impact for Tasks

Benefits

Clearly display which tasks, when completed, will have the greatest impact on the effectiveness score and, consequently, the compliance program.

Details

  • Added an Effectiveness Impact column on the Tasks list on the Review page and Tasks page

    • Review page



    • Tasks page


Add Attestation Weightings Action Options

Benefits

Give options to Attestation users on viewing weightings on downloads and reports.

Details

  • Added an Export Weightings button on Attestation Settings that downloads the PMC/PMA Weightings for a given attestation in an XLS file .



    • Here’s an example of the content of the downloaded report:



  • Added the Ignore Weighting checkbox in the Attestor Over Time Reports that when checked does not include weightings in the report.

Add Link Expiration for External Users

Benefits

Improve security by revoking user access to PrivacyCentral content after a period of time.

Details

  • The link sent to external users expires within a week/15 days from being sent, or right after the response/task is submitted, whichever comes first.

Update Custom Controls

Benefits

Easily manage custom controls.

Details

  • Added an option to create and edit custom controls on a control group level

Nymity Research

Include Reference in Compliance Alerts

Benefits

Improves user experience.

Details

Include reference in Compliance Alerts sent to users.

Update Banner Ad in Public References

Benefits

Boost engagement, and increase free trial sign-ups.

Details

Replaced the out-of-date banner ad displayed in public References, which when clicked redirects users to Nymity Research Free Trial page (https://trustarc.com/free-trial/nymity-research/?utm_source=product&utm_medium=ad&utm_campaign=twip-benefits-ad).

Privacy Knowledge Content Release

NOTE: Privacy Knowledge content is released on a monthly schedule.

Operational Templates

Benefits

Continuing the release of our new US Consumer Privacy templates, which integrate and synthesize the myriad of US State Consumer Privacy Laws into a comprehensive, unified framework. By highlighting both commonalities and state-specific nuances, these templates offer a clear, consolidated view that simplifies compliance.

Details

  • PMC 4. Embed Data Privacy Into Operations:
    • US Consumer Privacy - Geolocation Data and Privacy Laws
    • US Consumer Privacy - Requirements for Online Advertising
    • US Consumer Privacy - Children’s Personal Information and Privacy Laws
    • US Consumer Privacy - Sample Children's Privacy Policy
    • US Children’s Privacy Matrix

Other Platform Content Updates

Benefits

As always, we are committed to delivering the most current and relevant information on legislative requirements and regulatory guidance. The following standards and laws have been added to PrivacyCentral and Nymity Research. 

Details

Topics

  • New jurisdiction added:
    • Yukon Access to Information and Protection of Privacy Act

Law Tables/Privacy and Cybersecurity Law Monitor

  • New legislation added:
    • Illinois Insurance Data Security Act
    • Maryland Insurance Data Security Act
    • Ethiopia Data Protection Proclamation
    • Somalia Data Protection Act

Breach Index

  • New laws added in the US:
    • Illinois Insurance Data Security Act
    • Maryland Insurance Data Security Act
    • Louisiana Insurance Data Security Act

Data Mapping & Risk Manager

Updated existing column names and added new AI Risk columns to the Hub list pages

Benefits

Avoids confusion. Existing Risk columns are renamed to Data Processing Risk to avoid confusion. Since there are already three types of risks (Data Processing Risk, Data Transfer Risk, and AI Risk), it's hard for customers to understand which type of risk we are referring to when the column is labeled “Inherent Risk” since they all have an inherent risk score.

Easy access to AI Risk information. New AI Risk columns are added to the business process and data inventory list pages. Users do not need to open a Hub record to access the AI Risk information associated with that particular record such as its AI Inherent Risk and AI Residual Risk.

Details

In this release, on the business process and data inventory list pages/tabs, the existing column names, column configs, filters, .csv export tool, .csv export, and .PDF report are updated with the new names:

  • Inherent Risk → Data Processing Inherent Risk
  • Residual Risk → Data Processing Residual Risk
  • Inherent Risk Justification → Data Processing Risk Justification
  • Risk Assessment → Data Processing Assessment
  • Risk Assessment Tasks → Data Processing Assessment Tasks
  • Selected Assessment Template → Data Processing Assessment Template

Also, the following new columns are added to the business process and data inventory list pages and column config drop-downs:

  • Artificial Intelligence Usage → AI Usage (This column exists, just update name)
  • AI Inherent Risk
  • AI Residual Risk
  • AI Inherent Risk Notes
  • AI Risk Assessment
  • AI Risk Tasks
  • AI Risk Template

Assessment Manager

Ability to write a message to include in reminders is only enabled when Email reminder frequency is set

Benefits

Improves user experience. The message box in the Set Schedule and Notifications modal is hidden when the email reminder frequency is not set. This is to make sure that the message reminder is sent to recipients as scheduled.
 

Details

In this release, the message box (1) in the Set Schedule and Notifications modal is only shown when the email reminder frequency is set (2).

To access the modal, go to the Edit Assessment page, and then navigate to Advanced Settings > Configure.

Survey answers are carried over to the cloned assessment 

Benefits

Improves user experience. Users, when answering the assessment survey, can see the responses from the cloned assessment.  

Details

In this release, cloned assessments now include original responses. If the question from template X and template Y are associated with each other, then the answers are carried over to the cloned assessment despite changes to the structure.