Week of April 21

Most Requested Features

Acknowledgement Option for Non-Material Policy Changes

You now have the ability to require personnel acknowledgement when publishing a non-material policy change—even if approval isn’t required. Learn more at Edit your Policy.

CIS 8.1 (CIS Critical Security Controls)

CIS 8.1 is here! This new framework introduces a prioritized set of security best practices developed by cyber defenders, aimed at strengthening foundational and advanced security across organizations. By releasing another fully mapped framework, we’re continuing to work towards:

• Provides a prioritized, best-practice approach to improving foundational and advanced security across IG1–IG3.

• Fully mapped controls streamline alignment with CIS v8.1without manual mapping.

• Supports scaling security practices based on organizational size, resources, and risk profile.

• Seamlessly integrates CIS v8.1 alongside other frameworks like SOC 2, ISO 27001, and NIST CSF within Drata’s platform.