3.12.0

Epic

CP2-10132 [History Log] Vendor management 

CP2-10133 [History Log] Asset management

CP2-10278 [BCM] History Log

CP2-10307 [History Log] Incident Management 

CP2-10334 [AI Integration] 1Risk MCP service

CP2-10353 [History Log] Administration 

Task

CP2-10311 [BCM Plan] Dependency asset: add new

CP2-10319 [BCM] BE - BCM BIA History Log

CP2-10320 [BCM] BE - BCM Dependency History Log

CP2-10321 [BCM] BE - BCM Plan History Log

CP2-10322 [BCM] UI - BCM BIA History Log

CP2-10323 [BCM] UI - BCM Dependency History Log

CP2-10324 [BCM] UI - BCM Plan History Log

CP2-10326 [Log] BE - Implement Enterprise Asset Change Log

CP2-10327 [Log] UI - Add Enterprise Asset Change Log page

CP2-10335 [API Doc] Update Redocly framework to dynamically get user friendly API Documentation from Swagger

CP2-10338 [GitHub] Bootstrap 1risk-api-mcp service repository and CI pipeline

CP2-10339 [ArgoCD] Configure Argo CD deployment for 1risk-api-mcp

CP2-10340 [1risk-api] API Cleanup - Remove unused controllers and endpoints from 1risk-api application

CP2-10341 [1risk-api] OpenAPI Documentation - Optimize endpoints for FastMCP generation

CP2-10342 [1risk-api-mcp] Create installation and configuration guide for 1risk-api-mcp MCP server

CP2-10343 [1risk-api-mcp] Configure ApiKey authentication with 1risk-api authorization server

CP2-10344 [1risk-api-mcp] Implement FastMCP server from bundled OpenAPI specification

CP2-10347 [Log] BE - Implement Vendor Change Log

CP2-10348 [Log] UI - Add Vendor Change Log page

CP2-10349 [Internal Control] edit page: move control family under attribute

CP2-10352 [Terraform] Create 1risk-api-mcp ECR repository on AWS

CP2-10355 [BIA Criticality] BIA Criticality Configuration

CP2-10363 Reorganize api code vs docs to allow doc to be more automatically maintained using the Skill (OpenAPIDocForMCP)

CP2-10364 [1risk-api-mcp] Adjust MCP for new Swagger changes related to docs.1risk.io

CP2-10370 [Log] BE - Implement Manage Users Change Log

CP2-10371 [Log] UI - Add Manage Users Change Log page

CP2-10372 [Log] BE - Implement Manage Groups Change Log

CP2-10373 [Log] UI - Add Manage Groups Change Log page

CP2-10378 [Log] BE - Implement Risk Policies Change Log

CP2-10379 [Log] UI - Add Risk Policies Change Log page

CP2-10380 [Log] BE - Implement Custom Fields Change Log

CP2-10381 [Log] UI - Add Custom Fields Change Log page

CP2-10382 [Log] BE - Implement Risk Analysis Templates Change Log

CP2-10383 [Log] UI - Add Risk Analysis Templates Change Log page

CP2-10384 [Log] BE - Implement BIA Template Change Log

CP2-10385 [Log] UI - Add BIA Template Change Log page

CP2-10386 [Log] BE - Implement Integrations Change Log

CP2-10387 [Log] UI - Add Integrations Change Log page

CP2-10414 [Log] BE - Implement Accounts Change Log

CP2-10415 [Log] UI - Add Accounts Change Log page

CP2-10419 [1risk-api-mcp] C1Risk MCP Server Manual

CP2-10420 [Approval Process] Entity Status Standardization Post-Approval

CP2-10429 [RCSA] List View IR Rating and RR Rating 

CP2-10468 [Log] BE - Implement Incidents Change Log

CP2-10469 [Log] UI - Add Incidents Change Log page

CP2-10470 [Log] BE - Implement Incident Types Change Log

CP2-10471 [Log] UI - Add Incident Types Change Log page

CP2-10485 [Patient Point] Create Evidence and map to Internal Control for FedRamp 20x

CP2-10487 [Incident Type] Remove primary contact role constraint validation

Sub-task

CP2-10123 [BCM] UI - Enterprise asset - Add BIA and Dependency in detail page

CP2-10124 [BCM] UI - Vendor - Add Dependency in detail page

CP2-10128 [BCM] BE - Jira Integration

CP2-10129 [BCM] BE - Slack Integration

CP2-10183 [BIA Template] Reset to Default Template for Impact and Threat

CP2-10193 [BIA Template] Change record owner action

CP2-10331 [BCM BIA] Add shared access attribute with default value = Yes

CP2-10435 [Audit Program] add test procedure subtab

CP2-10436 [Audit Program] Add New Test Result process

CP2-10437 [Test Result] populate text in the Description field to capture test snapshot data

CP2-10451 Remove support for TLS 1.2

CP2-10452 [Assessment Campaign] Status= close , on click edit show blank page

CP2-10455 [Assessment Campaign] approval process change to be config only

CP2-10456 SAST Setup for 1risk-mcp-api with sonarqube

CP2-10457 DAST Setup for github repo

CP2-10458 [TD] Mask API key in the DB

CP2-10459 Swagger to not be exposed to the internet

CP2-10479 [1risk-ui] Endpoints cleanup - Remove unused endpoints calls

Bug

CP2-10472 [GitHub] resolve security issues

CP2-10473 [Approval Process] Globally in the Approval History subtab, filter out Draft records

CP2-10476 [Approval Process] Approval Process History Subtab count is not correct

CP2-10478 [Finding] Save page is not loading because a endpoint to load option was removed

CP2-10480 [Obligation section] UI - Obligation lookup is empty on Obligation Section Edit

CP2-10481 [Obligation section] UI - Obligation Section Delete removes the record but fails to redirect

CP2-10492 [JIRA] Filter by text on lookup not working

CP2-10494 [Confluent] add new Jira card error 

CP2-10496 [Record Viewer] UI - Lookup is entering infinite loop

Story

CP2-10122 [BCM] Enterprise Asset/Vendor asset

CP2-10127 [BCM] Integrations

CP2-10222 [Test Procedure] Source Type and Source ID enhancement