3.13.0

Epic

CP2-10162 [History Log] Risk Management 

CP2-10306 [History Log] Audit Management 

CP2-10354 [History Log] Vulnerability Management 

CP2-10368 [History Log] Administration > Log > monthly history log report

CP2-10424 AI ChatBot

CP2-10545 [Obligation] Obligation Scoping

CP2-10548 [History Log] GRC Library

CP2-10626 [3.13.0] CR and Test Note

CP2-10636 [Global URL] standardize URL link

Task

CP2-10425 Research framework for AI integration to review with team

CP2-10426 [Tech Doc] Design doc for Integration for OpenAI ChatBot

CP2-10428 [Mockup] ChatBot

CP2-10442 [1risk-ai] Bootstrap Spring Boot service with Spring AI

CP2-10443 [1risk-api] Add AI-scoped authentication and authorization support

CP2-10444 [1risk-ai] Implement OAuth 2.0 resource-server security

CP2-10446 [1risk-ai] Implement streaming chat completion and conversation memory

CP2-10447 [1risk-ai] Integrate MCP tool calling with authorization and auditing

CP2-10449 [1risk-ui] Build globally available ChatBot component

CP2-10486 [Dependabot] Upgrade jsoup and jasperreports

CP2-10488 [1risk-ai] implement Web-Search capability

CP2-10499 [terraform] Add IAM role access to Bedrock Service for 1risk-ai service

CP2-10500 [Tech Doc] Design doc for usage AWS Bedrock service and limitation approach

CP2-10502 [Risk Management] BE - Risk Group History Log

CP2-10503 [Risk Management] UI - Risk Group History Log

CP2-10504 [Risk Management] BE - Risk Register History Log

CP2-10505 [Risk Management] UI - Risk Register History Log

CP2-10506 [Risk Management] BE - Risk Analysis History Log

CP2-10507 [Risk Management] UI - Risk Analysis History Log

CP2-10508 [Risk Management] BE - Assessment Campaign History Log

CP2-10509 [Risk Management] UI - Assessment Campaign History Log

CP2-10510 [Risk Management] BE - RCSA History Log

CP2-10511 [Risk Management] UI - RCSA History Log

CP2-10512 [Risk Management] BE - Risk Ledger History Log

CP2-10513 [Risk Management] UI - Risk Ledger History Log

CP2-10514 [1risk-ai] Integrate with AWS Bedrock for base Chat functionality

CP2-10516 [Risk Management] BE - Assessment History Log

CP2-10517 [Risk Management] UI - Assessment History Log

CP2-10518 [Terraform & AgroCD] Configure IAM role access to AWS Bedrock service for 1risk-ai service 

CP2-10521 [1risk-ai] Add CORS configuration

CP2-10528 [History Log] BA - Add Audit History log

CP2-10529 [History Log] UI - Add Audit History Log

CP2-10530 [History Log] BA - Add Audit Program History Log

CP2-10531 [History Log] UI - Add Audit Program History Log

CP2-10532 [History Log] BA - Add Test Procedure History Log

CP2-10533 [History Log] UI - Add Test Procedure History Log

CP2-10534 [History Log] BA - Add Test Result History Log

CP2-10535 [History Log] UI - Add Test Result History Log

CP2-10539 [History Log] BA - Add Nessus Vulnerability History Log

CP2-10540 [History Log] UI - Add Nessus Vulnerability History Log

CP2-10541 [History Log] BA - Add Nessus Asset History Log

CP2-10542 [History Log] UI - Add Nessus Asset History Log

CP2-10546 [Ask C1Risk] FAQ

CP2-10547 [AI Chat Bot] Test Note

CP2-10549 [History Log] BA - Add Obligation History Log

CP2-10550 [History Log] BA - Add Obligation Section History Log

CP2-10551 [History Log] BA - Add Control Library History Log

CP2-10552 [History Log] BA - Add Crosswalk History Log

CP2-10553 [History Log] UI - Add Obligation History Log

CP2-10554 [History Log] UI - Add Obligation Section History Log

CP2-10555 [History Log] UI - Add Control Library History Log

CP2-10556 [History Log] UI - Add Crosswalk History Log

CP2-10557 ADA Compliance Check and Fixes

CP2-10564 [1risk-ai] Introduce an approach to interrupt ongoing conversation

CP2-10566 [1risk-ai] add system message for trained responses

CP2-10568 [AI Chat] Issue with C1Risk API MCP tools (large context 128k tokens that describe all 1000 endpoints)

CP2-10571 [CALSAWS] Upload customer data for findings and risk mitigation

CP2-10584 [API] Obligation Scoping - persistence, validation, and linked-record data

CP2-10585 [UI] Obligation Scoping - scoping card, linked signals, and list filters

CP2-10605 [1risk-ai] response with C1Risk URL

CP2-10610 [1risk-ai] disable post/put/delete activity for AI chatbot

CP2-10612 [Deployment] environment preparation for 3.13.0 release

CP2-10624 [BCM Dependency] inactive asset

CP2-10631 [1risk-ai] UI- lock MCP server and GPT-5.6 Luna

CP2-10635 [1risk-ai] test 

CP2-10639 [GRC Library] Action menu appearing at the edit page

CP2-10651 [History Log] Backfill monthly reports for July–September 2026

CP2-10668 [1risk-ai] UI- Hide ask C1Risk for vendor and general user role 

CP2-10686 [Global Scroll Behavior] Reset scroll position to top on page navigation

CP2-10688 [Risk Score Chart] default : SUM

CP2-10691 [Test Result] Test result list issue 

CP2-10692 [Document Response] close model on click of action button 

CP2-10697 [Bulk Change Asset] look up asset : select asset type : page not found 

CP2-10698 [History Log] RCSA

CP2-10699 [ History Log] approver reassign not tracked

CP2-10700 [Risk Register] Error on access server

CP2-10701 [Global] Switch subtab: error on access server

CP2-10702 [History Log] GRC Library 

CP2-10705 [1risk-ai] restrict model to build app

CP2-10706 [1risk-ai] update to gpt-6 Luna

CP2-10710 [1risk-ai] security test

Sub-task

CP2-10451 Remove support for TLS 1.2

CP2-10560 [AI Chat Note] UI - Test items 

CP2-10561 [1risk-ai] <thinking> events are not emmited

CP2-10562 [1risk-ai] Apply a dedicated error for limit hit of model budget

CP2-10565 [1risk chatbot] ui-interrupt ongoing conversation

CP2-10567 [1risk-ai] remove limit for MCP calls in Spring AI 

CP2-10580 [1risk-api] REST API description it not enough detailed for OpenAI Luna model (Link/Unlink functionality)

CP2-10588 [API Doc] Add Risk Ledger in 1risk-API 

CP2-10589 [Attachment] chatbot search keyword in file name

CP2-10590 [Report] Add instruction to obtain time zone from user profile

CP2-10591 [System Prompt] Refine to better instruct model

CP2-10593 [1risk-ai] web search and mcp

CP2-10594 [1risk-ai] Incorrect Data Source Issue

CP2-10601 [Obligation] Look up is not working 

CP2-10603 [MCP Tools] Update record issue: AI model thinks that record is not editable

CP2-10609 [MCP Server] API is not responding

CP2-10611 [1risk-al] UI- open  Record in the same window as ChatBot

CP2-10629 [Global] Fix the style issues on 3.13.0 release

CP2-10632 [1risk-ai] UI-Breadcrumb

CP2-10633 [1risk-ai]BE-add Model info

CP2-10704 Grant Daniel devops accounts

Bug

CP2-10563 [Finding] Infinite re-render on Finding Lookup from Assessment

CP2-10596 [Performance Issue] - Document Requests page load issue (PROD)

CP2-10628 [History Log] History log bug

CP2-10638 [Document Response] Can not add attachment 

CP2-10640 [Control Library] SUBTAB CROSSWALK> ADD NEW ERROR

CP2-10644 [Obligation Section] UI - Save button enabled before all required fields are answered

CP2-10645 [Assessment Campaing] BA - Keyword filter not working

CP2-10646 [Assessment Campaign] UI - On edit the Assessment Schedule info is not filled corretly

CP2-10647 [Internal Control] UI - Source field not updating

CP2-10648 [User] UI - Edit page did not prefilled the manager field

CP2-10649 [Manage Groups] UI - Can't save add new

CP2-10650 [Custom Field] UI - Edit values show duplicated items message all the time

CP2-10652 [Custom Fields] BA - List view missing default list view

CP2-10653 [History Log] Asset/Vendor Engagement 

CP2-10654 [Risk Analysis] UI - Save button not working

CP2-10655 [History Log] Policy

CP2-10656 [Risk Analysis] UI - Add question page save button doesn't work

CP2-10657 [History Log] Internal Control

CP2-10658 [History Log] Document Request

CP2-10659 [history Log] Finding

CP2-10660 [History Log] Incident and Incident Type

CP2-10661 [RAT] add new: save button  no response

CP2-10662 [History Log] BA - DR history log source capture not working as expected

CP2-10663 [History Log] UI - Not displaying all events

CP2-10664 [History log] BA - Policy history missing IC link when done from IC details tab

CP2-10665 [History log] BA - Finding created with IC linked but the link doesn't appear at the IC history

CP2-10667 [Permission] Vendor 

CP2-10669 [Finding] save operation- remove validation 

CP2-10670 [history Log] BCM BIA

CP2-10671 [History Log] BA - On DRR creation Attachment is showing None -> None

CP2-10672 [History Log] BA - Audit contact fields label should be consistent with details

CP2-10673 [Risk Summary] UI - Chart axis labels are not changing after option is selected

CP2-10674 [User] UI - Missing translation keys

CP2-10675 [Risk Group] BA - Performace Metrics for Findings Chart drilldown is not correct

CP2-10676 [Assessment Answer] UI - Modal button style need fixing

CP2-10677 [Risk Group Summary] BA - General User performance issues

CP2-10678 [Incident Type] Can not add record reviewer

CP2-10679 [Save List View] UI - On save the list view is not changing to the newly saved list view

CP2-10680 [1RISK-AI ] luna icon not show in chatbot in staging 

CP2-10681 [Risk Register] UI - On IC -> RR subtab -> Add new blank page issue

CP2-10682 [Risk Analysis] BA - Performance issue when creating the record

CP2-10683 [Performance Issue] BA - List views with performance issue for general

CP2-10684 [Incident] API - General user is going to 404 page

CP2-10685 [enterprise asset] performance and page not found 

CP2-10687 [Global] Page glitches and fails to load when selecting an asset type during asset lookup on edit page

CP2-10696 [Action Menu] UI - Add scroll bar to action menu

CP2-10717 [1risk-ai] TEST NOTE

CP2-10718 [Text Area] insert hotlink from browser address bar not working