Release Notes - June 2023

New Features and Enhancements   (SAFE Version 3.2.55) 

Release Date:  28th June 2023

 1. Integration with leading CSPM tool - Wiz 

This integration allows organizations to seamlessly incorporate WIZ assets and associated security issues into SAFE, providing enhanced insights and risk management capabilities across the entire cloud attack surface.

Key benefits to SAFE and WIZ customers:

1. Comprehensive Cloud Risk Assessment: SAFE now leverages WIZ's extensive cloud risk assessments, providing organizations with valuable insights into security threats specific to their cloud environment.
2. Asset Grouping and Tagging: The integration pulls asset tags from WIZ into SAFE, enabling teams to group cloud assets by application or business unit. This granular asset management approach facilitates team-specific risk assessments and allows businesses to address risks at a more detailed level, such as a single cloud instance.
3. Enterprise-wide Cyber Risk Management: Consolidate all your cyber risk assessments in one platform with SAFE as the central Cyber Risk Management tool. Combining the top issues on cloud assets detected by WIZ with assessments of assets, workforce, and third parties gives you a holistic view of your organization's risk posture. Calculate breach likelihood and financial risk impact to accurately represent your risk and effectively manage and reduce it within SAFE.
4. Prioritized Actionable Insights: The integration provides prioritized actionable insights across your entire attack surface. Risk teams can view the current posture of cloud assets, plan for risk reduction, and mitigate critical issues to minimize the likelihood and impact of potential breaches.
5. Scenario-Specific Risk Assessment: Evaluate the likelihood of specific scenarios, such as ransomware or data compromise, and prioritize underlying risk issues with the SAFE and WIZ integration.
6. Synchronization and Retrieval: Schedule regular intervals for assessment results to sync or retrieve them on-demand within SAFE, providing flexibility and convenience for accessing WIZ data as required.

You can configure WIZ in SAFE from SAFE Hooks using the WIZ API URL, Client ID, and Client Secret. Refer to the Wiz Integration Guide. 

2. Manage gap exceptions for the outside-in assessment of Third-party and First-party

SAFE now offers the ability to handle the exceptions by allowing users to address the gaps manually while addressing the exceptions in gaps found during the outside-in assessment of third-party and first-party entities.

Key benefits of this feature:

1. Enhanced Accuracy: SAFE ensures that assessments reflect the most accurate and up-to-date information. Customers can provide detailed reasons and descriptions for resolving issues, helping to clarify any discrepancies and ensure the assessment accurately represents their organization's status. The system offers four pre-defined reasons to choose from when resolving the findings:
   1. This is not my IP.
   2. I have already addressed this issue.
   3. I have implemented a compensating control.
   4. I cannot reproduce this issue and believe it is incorrect.
2. Increased Confidence: Customers can increase their confidence in the assessment results with this feature.
3. Streamlined Processes: SAFE users can address exceptions within SAFE without the need for external interventions or complicated workarounds. This saves time and effort, allowing customers to focus on other critical tasks while maintaining assessment integrity.