SimpleRisk 20261003-001 — Risks, Assets, and Profiles, Redesigned
SimpleRisk 20261003-001 is a redesign-heavy release: the pages where you submit and review risks, manage assets, and maintain your profile have all been rebuilt, alongside security hardening and a round of fixes across Governance, Compliance, and several Extras.
Submit and view risks in a faster card-based layout
Submit Risk and the risk detail/edit pages have been redesigned around cards, so related information sits together and loads faster. Risk Scoring now shows a live score card for each of the six scoring methods inline, replacing the separate scoring dialog, so you can see how your inputs change the score as you work. Customization Extra users can arrange the new layout to suit their own process.
Asset management, rebuilt
Assets now live on a single Manage assets page, with an asset window that supports inline editing and asset groups sitting alongside individual assets. New Asset Scoring combines a FIPS 199 categorization with a weighted score, available as columns, filters, and settings. Asset discovery can scan a network range to find assets you haven't recorded yet, and finer-grained permissions let you control who can do what with assets.
A stronger My Profile page
My Profile has been redesigned with stronger account security controls, putting the settings you manage for yourself in one clear place.
Smarter control management
Define Control Frameworks gains a Columns picker for showing or hiding control fields — including Control Class, Phase, Priority, Type, and any custom control fields — and it remembers your choices. Enterprise-type control Status now updates automatically from each control's most recent test result, so it no longer drifts out of date.
Smaller improvements
This release strengthens the built-in browser content security protections, which are now on by default for new installations, and tightens access controls on the risk information shown in Governance Exceptions. Fixes include the Review Risk "All" filter hiding some open risks, the Add Asset modal failing when a custom Long Text field was configured, Define Tests fields occasionally saving blank when saved right after typing, and new accounts not picking up your configured default language. Administrators working within a business unit now see only that business unit's teams and users. Mitigation and review text now displays correctly in the API on instances using the Encrypted Database Extra, and a background failure that could stop the Data Integrity scan has been resolved.
Extras also see improvements: Assessments and Notification now send notifications only to the right people, Import/Export handles lowest-level maturity values and role-based user permissions correctly, and the ComplianceForge SCF Extra now imports SCF 2026.3 and preserves your existing controls' tests and links through its renumbering.
Upgrading
The upgrade is delivered through the standard SimpleRisk upgrade flow. As always, we recommend backing up your database before applying any release in production.
Check out the full release notes and the admin guide for upgrade details, or reach out to our team if you'd like help planning the rollout.