Wondering what's new with ControlMap? Check back here every month to get the regularly scheduled scoop on new releases, software improvements, deprecated features, and bug fixes.

November '25

New releases:

• New Audit and CMMC Enhancements: We’ve released a set of highly requested improvements to the Audit module designed to make audit preparation faster, clearer, and easier for MSPs managing client compliance. Check out New Audit and CMMC Enhancements Now Live for more details.

October '25

New releases:

• CMMC Updates: CUI tagging has been added to the asset management. This includes ability to tag assets with CUI and report on those. 
• Assessment Snapshot phase 2: The 2nd phase of Assessment Snapshot was released this month which includes viewing and restoring assessment snapshots
• ScalePad API: Beta release of ScalePad API now available here https://developer.scalepad.com/. Expect ControlMap API's in December.

September '25

New releases:

• Assessments Snapshots: This feature with Assessments lets you save a copy of completed assessments for your records, and build on your completed assessments for year two (and beyond) without starting from scratch. This allows you to monitor growth and maintenance of compliance. For more details, check out Assessment Snapshots. Check out Working with Framework Assessment Snapshots for more details.
• Cyber Risk Institute (CRI) Profile: With the FFIEC Cybersecurity Assessment Tool (CAT) reaching end of life, CRI Profile has become one of the alternatives for assessing cybersecurity risk and maturity. More details from FFIEC can be found here: Cybersecurity Assessment Tool.
• Improved Watermark features: Within the Trust portal, more watermark features are now supported.

July/August '25

New releases:

• New Tiers: An exciting new release of Free + Essentials + Pro is announced.
• Free Tier: A new Free Tier is made available for prospecting and learning more about ControlMap. More info available here.
• Essentials Tier: A new Essentials Tier is made available primarily focused on a single framework for assessment without the need for Audit / Trust. All existing partners continue on Pro and Free is available right away. Essentials will be made available to all soon. More info available here.

June '25

• New Region: Canada region now supported for data Canadian data sovereignty purposes.
• Framework Updates: New versions of CyberSecure Canada + SCF 2025.1.
• Minor Enhancement: Allow contributor role access to action items.
• Minor change: Paylocity no longer supported by Finch HR integration.

May '25

• New Framework:  NIS2 Framework Now Available. The NIS2 Directive is a newer EU cybersecurity law that establishes compliance requirements for managing digital risk for digital service providers and various industries.
• UI Enhancements: Updates to platform UI and dashboards release coming in June
• Infrastructure upgrades: Updates to platform code base.
• Minor Enhancements:
  • Trust Portal now supports optional WaterMarks for PDF's - managed in Settings.
  • Apostrophe's now supported in content headers such as Controls

April '25

• New Compliance Health Report! A new report built from the data and content displayed on the new MSP Dashboard home screen loaded with new features including a new Client Health Score
  • New Report Update here: New Compliance Health Report
  • Report includes DOC or PDF format + Customizable Content along with automated scheduling features
• SOC 2 & ISO 27001 Audit Completed : ControlMap is used for ScalePad's SOC2 and ISO27001 audits which have been completed in Q1 2025. SOC 2 and ISO 27001 Update
• GTIA TrustMark 2.0 Framework Released:  ControlMap selected for GTIA TrustMark, framework version 2.0 released GTIA Help Article + GTIA TrustMark update here
• Infrastructure upgrades: Updates to platform code base include new code components and software deployment solutions
• Minor Enhancements:
  • Trust Portal now supports optional WaterMarks for PDF's - managed in Settings.
  • Apostrophe's now supported in content headers such as Controls
• Coming soon: NIS 2 Framework 

March '25

• New Client Dashboard is Live! A new dashboard home screen loaded with new features including a new Client Health Score (How score is calculated here)
  • Product announcement here: New Exec Dashboard + Compliance Health Score
  • New Overall Dashboard + Comparison Tab (compare month/quarter/year) + ToDo Tab
• New MSP Dashboard Roles: Super Admin + Compliance Manager for managing access by client. Learn more in help article here
• GTIA TrustMark Update:  ControlMap selected for GTIA TrustMark, framework to be loaded in April - GTIA TrustMark update here
• New Exclusion for Azure: A new tab to exclude filter for Azure integration
• New Compliance Health Report coming soon: Design complete and dev work in progress to create a comprehensive report from the Exec Dashboard with new admin controls in progress.

February '25

• New Dashboard coming soon: Worked on latest health score and report coming in March with new metrics and visuals added to ControlMap
• Recent Activities Filter: Provide more relevant insights with a recent activities filter and show 50 instead of 10 recent activities.
• New Risk Tag Filter: A new tagging filter for categorization
• Trust Portal Document Mapping: improvement for mapping of policy documents
• Risk and Compliance over time: backend added to calculate for new reporting needs
• Compliance Health Score: backend added to calculate for new reporting needs

Technical & Operational Improvements

• Environment Upgrades: Upgraded ControlMap environments for improved code deployment
• EU and AU region updates: for Azure, Microsoft and Integration authentication issues 

January '25

• Multiple Auditors for Evidence Requests: Users can now assign multiple auditors to evidence requests for improved collaboration.
• Requestor Name Watermark in Trust Portal PDFs: PDFs exported from the Trust Portal now include the requestor's name as a watermark for added traceability.
• Assessment Report Enhancements: Assessment reports now include responses for greater visibility and clarity.
• Improved Employee Status Handling: Employee status is now more accurately reflected when sourced from multiple integrations.
• Create New Risks from Assessments: When answering an assessment question with "No," users can now create a new risk directly.
• Reassign Resources When Deleting ScalePad Users: When deleting a ScalePad user, their owned resources can now be reassigned to another active user.

Technical & Operational Improvements

• Unit Testing Enhancements: Implemented improved test coverage.
• Optimized Zip Creation Process: The zip file creation process has been updated from asynchronous to synchronous for better performance.
• Environment Upgrades: Upgraded all ControlMap environments to the latest runtimes for enhanced security and performance.