Introduction
Key Takeaways
Graduation caps are flying, pollen’s still attacking, and Apptega’s May updates just dropped with honors.
From smarter assessments and easier vendor management to our second AI risk framework (it passed with flying colors), this month’s releases are all about helping you work more efficiently but still your way.
Let’s dig into what’s new:
🛠️ Vendor Risk Manager Updates: Smarter Data Ingestion
Your vendors probably won’t blue-screen half your infrastructure like... you know, that recent incident. But if they do, you’ll want to know who’s behind the curtain. Fast.
With our latest update to our Vendor Risk Manager, you can:
- Upload vendor lists in seconds: No more hand-jamming entries like it’s 2003.
- Import your own vendor questionnaires: Because you already spent months getting them built and approved.
- Centralize vendor management: Track, assess, and prioritize all vendors in one place.

Look, we can’t stop a faulty vendor update from melting down your systems. But we can help you manage vendor risk faster and more effectively.
Feel free to reach out to your Success Manager for questions or a quick demo. We’ll also have a knowledge base article with detailed information on this feature very soon.
✨New Assessment Manager (Phase 2)
The Assessment Manager glow-up continues.

Last month you got a shiny new List View. Now, we’re releasing a streamlined, smarter workflow for building assessments.
What’s New:
- Start assessments with Apptega templates—or upload your own, if you don’t want to lose your mojo.
- Add recommendations as you go (automatic or manual, your call)
- Link risks directly to controls for better traceability
- Assign users straight from the workflow so nothing gets stuck
All wrapped in a cleaner, faster, more intuitive experience.
Phase three is on deck. That’s where we connect all the dots for an improved end-to-end experience, so stay tuned for more updates!
Watch this 4-minute demo or contact your success manager for a personalized walkthrough.
📝 Content Updates
ISO 27001:2022 – Now with 100% more accuracy
We gave ISO 27001:2022 a full tune-up. The framework, assessment, and taskpack have all been rebuilt to align directly with the official ISO publication. That means no paraphrasing—just the real deal from start to finish.
CMMC v2.13 – Harmony mappings are now available
The final rule is now fully integrated into Harmony. You can now create mapped programs with CMMC v2.13 and bring all those cross-framework efficiencies to your compliance workflow.
NIST AI RMF 100-1 just landed!
NIST’s first AI risk management framework is now live in the platform. We’ve built the full set—framework, assessment, and taskpack—based directly on the original NIST documentation. Whether you’re wrangling risks or just making sense of AI oversight, it’s all ready for you to explore.