Internal Audit and Risk Management v1.12 release notes
Who is this article for?
Administrators interested in learning more about solution updates.
No special access or permissions are required.
This article outlines the product changes, enhancements, and fixes that have been implemented in the v1.12 release, available from 26 June 2025.
This release introduces significant functionality improvements across audit execution, team management, user interface performance, technical stability, and platform authentication, which enhances the usability and governance coverage of the software.
1. Features
Audit execution
Auditors can now exclude scope entities from receiving a rating where no risk is assessed. This ensures accurate and appropriate audit completion, avoiding artificial ratings for entities without applicable data.
Additionally, each status change across participating records is now captured in a new Transitions table. This provides an easily accessible way to see when the status change occurred directly from the record itself.
Finally, the processes for generating audit reports and deleting audits now run as asynchronous background tasks. Users are notified upon completion, enabling them to focus on other activities without waiting.
Permission and role management
Historic roles removed from configuration but still assigned to users are now visible and manageable in the “Previous Roles” section of the team tray. Users can be removed from these legacy roles, ensuring data integrity while preserving historical assignments.
Also, the team is now surfaced as its own tab on object record pages, decoupled from the edit tray for faster access and role assignments. Additional context is provided when no roles are configured.
UI and usability enhancements
We have resolved issues with attachment URLs being truncated and key dates missing in exports. The “Zoom to Fit” function in Locations and Processes now behaves correctly when maximized.
The “Audit Owner” is also now clearly visible within detail panels and main audit views.
Filtering, queries, and data Integrity
In this release, we have corrected issues with “not set” filters on list-type custom fields and duplicate entry allowances in Lists administration. Filtering now functions as expected across empty fields, and duplicate prevention is enforced.
Also, security has been improved to ensure role and custom field data cannot be retrieved via API by unauthorized users, fully aligning API behavior with permission configurations.
Platform and technical updates
Users are now logged out after 15 minutes of inactivity. A dismissible 60-second countdown modal appears prior to session termination, reducing idle-session risk.
Authentication has been re-engineered to support AWS Cognito, ensuring readiness for integration into the broader Ideagen Hub and enabling compatibility with multiple OIDC providers.
The UI has been upgraded to the latest design libraries, which supports continued performance optimizations and dependency compatibility.
2. Fixes
- UI consistency and interaction reliability - Addressed a wide range of UI bugs including disabled input fields in attachments, premature transitions of audit states, incorrect permission-based display of "Delete" buttons, and inconsistencies in record page team components.
- Error handling and save reliability - Resolved save failures when managing deactivated roles and improved feedback mechanisms when actions cannot be completed due to configuration mismatches.