1.7.0
--------------------------------------------------------------------------------
[Task] Update catalogues to the latest available version
[Bug] List editing of risk assessments aborted with an SQL error (Unknown column 'alias1.isys_catg_risk_assessment__id') because the threat object browser join was missing its alias.

1.6.4
--------------------------------------------------------------------------------
[Bug] Create ISMS related object types while installing ISMS

1.6.3
--------------------------------------------------------------------------------
[Bug] Threats an vulnerabilities couldn't be exported
[Bug] Some parts of the programm were net compatible to i-doit 37

1.6.2
--------------------------------------------------------------------------------
[Bug] The likelihood of risk assessments could not be imported via CSV.
[Bug] The default risk classes were not created correctly during first add-on installation.
[Bug] A new installation of the ISMS add-on resulted in an error.

1.6.1
--------------------------------------------------------------------------------
[Improvement] Existing import catalogs updated
[Improvement] Template adjustments for i-doit 35 compatibility
[Bug]         Risk assessments in the Report Manager could lead to errors if threat or vulnerability not set
[Bug]         When deleting audit deviation records, relation objects to SOA controls were not deleted.

1.6
--------------------------------------------------------------------------------
[New function] New object type "Security incident"
[New function] New category "Security incident"
[Improvement]  Added import catalog for NIS2 controls, extended generic import profile
[Improvement]  Optimized display of standard texts
[Bug]          In the views "ISMS Assessment" and "ISMS risk assessment object based" not all background colors were printed by default
[Bug]          When duplicating the category "Risk assessment", the values for "Likelihood" and "Likelihood after treatment" were not copied

1.5.6
--------------------------------------------------------------------------------
[New function] When creating/editing risk evaluations, the risk class for the current slider settings will be shown and updated on change
[Improvement]  In view mode of risk evaluations the impact level of the risk scenarios will be shown
[Improvement]  In view mode of risk evaluations the risk class will be shown
[Improvement]  Added CSV import of the requirements of the IT-Grundschutzkompendium 2023 (in German)
[Bug]          Changed the colorpicker to Coloris to be compatible to i-doit >= 29
[Bug]          The list view of risk evaluations wasn't compatible to i-doit >= 30

1.5.5
--------------------------------------------------------------------------------
[Improvement] Added new attribute "risk owner" in category "risk assessment" and migrate contact assignment with role "risk owner" into new attribute
[Improvement] Added CSS styles for display of standard texts
[Bug]         Fixed compatibility to i-doit 27
[Bug]         The CSV import of some controls of annex A (version 2022) didn't work prpoerly
[Bug]         The implementation status of controls was not shown properly in the non-edit view of risk assessments
[Bug]         Only SOA controls were shown in the virtual category "Assigned controls"

1.5.4
--------------------------------------------------------------------------------
[New function] Introduction of the attributes of the new ISO 27002, assignment of the attribute to controls/requirements
[Improvement]  Attribute "Realization by" in category "Applicability" can now be imported with CSV import
[Bug]          Attribute "Application scope" of category "ISMS" couldn't be selected in report manager (and therefore also not in documents add-on)
[Bug]          Category lists led to an internal server error in i-doit 25
[Bug]          List editing of category "risk assessment" set the likelyhood to 0
[Bug]          The risk assessor was not displayed and saved correctly in PHP8
[Bug]          The likelihood wasn't saved, if the likelihood description was empty
[Bug]          With PHP8, after creating an incident scenario, the criteria were no longer created automatically
[Bug]          Attribute "Application scope" of category "ISMS" was not available for reporting

1.5.3
--------------------------------------------------------------------------------
[Improvement] Added CSV import catalog of controls of the annex A of the new ISO 27001
[Bug]         Threats and vulnerabilties were not saved in a risk assessment, if running on PHP 8
[Bug]         List view of category "Standard Vulnerabilities" didn't work. if running on PHP 8
[Bug]         In some views of the report manager the asset owner and the risk owner were displayed, even if the person or contact assignment was archived/deleted

1.5.2
--------------------------------------------------------------------------------
[Improvement] Compatibility to i-doit 1.19
[Improvement] Compatibility to PHP 8.0
[Improvement] Optical improvements to fit new layout of i-doit 1.19
[Bug]         The assignment of column headlines of the report "ISMS risk assessment object based" were partly wrong
[Bug]         The CSV export of the likelihood after treatment was sometimes wrong, if the likelihood before treatment was included

1.5.1
--------------------------------------------------------------------------------
[New function] New objekt type "Standard requirement" for requirements of standards (e.g. ISO 27001, ISO27002)
[New function] Calculation of the  control implementation status based on the assigned controls in the "Deviations" category
[New function] The attributes risk identification and risk title for the category risk assessment can be swithed on in the tenant-settings
[New function] Labeling of the risk matrix can be overwritten by expert settings
[New function] A direct link to the risk assessment is displayed in the relevant report views and can be used in the report manager
[Improvement]  New attributes in the "Deviations" category for the audit object type
[Bug]          An error message was displayed when saving categories without files
[Bug]          Some functions of the ISMS add-on were loaded when the add-on was deactivated

1.5
--------------------------------------------------------------------------------
[New feature] Added new object type "Event" with new category "Risk assessment (event)" to document risks following an event based approach
[New feature] Added new object type "Audit" with new category "Audit" to document audits
[New feature] Added new category "Deviations" to document deviations identified during audits
[New feature] Added new attributes in category "Risk assessment": "Risk assessor", "Interviewed persons" in section "Risk evaluation" and "Auditor", "Audit date", "Audit result", "Audit result (document)" in the new section "Check of effectiveness of the risk treatment"
[New feature] Usage of a new internal attribute type to upload documents directly into categories without usage of the category "file" to be able to set the permissions based on the corresponding category
[Improvement] Better graphic representation of the "Risk assessment" category
[Improvement] The implementation status of SOA controls is displayed in the risk assessment view
[Improvement] Adjustment of the report views in order to display events adequately
[Improvement] Update of the requirements in the import file of IT-Grundschutz to version 2021
[Change]      The report view "Risk Treatment Plan (RTP)" is no longer based on all available threats, but on all risks used (event or threat+vulnerability combination)
[Bug]         In the virtual category "Assigned controls", multiple assigned controls were also displayed multiple times
[Bug]         Not all Database tables were deleted if the add-on was uninstalled
[Bug]         Archived or deleted criteria and incident scenarios were still displayed sometimes
[Bug]         An error message was displayed when creating an object if the category "Assigned controls" should be displayed on the overview page
[Bug]         Fixing missing or incorrectly assigned translations
[Bug]         Correction of some typos in the CSV import catalogs
[Bug]         The position of the slider on "unrated" for the likelihood and impact was sometimes not saved correctly

1.4.1
--------------------------------------------------------------------------------
[New feature] New object type "Virtual ISMS location" available
[New feature] Risk assessments can be imported via CSV import
[Improvement] Visual improvements of the risk evaluation sliders
[Change]      SOA controls assigned to risk assessments are in reports now seperated with spaces instead of comma
[Bug]         In the list view of risk assessments, overruled risk classes were sometimes displayes incorrectly
[Bug]         With older PHP version there was an error message after installing the ISMS add-on
[Bug]         When sorting according to ISMS relevance, a database error was shown in the object list
[Bug]         The english translations of the risk formulas were incorrect
[Bug]         In the dialog admin some translations were missing
[Bug]         Horizontal scrolling in wide report views didn't work
[Bug]         The entries of some tables in the dialog admin couldn't be edited
[Bug]         The button "Copy assessment before treatment" didn't copy the value of the likelihood

1.4
--------------------------------------------------------------------------------
[New feature] Asymmetrical risk matrix, risk matrix colors ​​can now be overwritten
[New feature] Name, color and number of risk classes can now be configured
[New feature] New menu item "ISMS" in "Extras"
[New feature] New right "ISMS" in Authorization system
[Improvement] Extension of available output columns in the list view of risk assessments
[Improvement] Improved the print views of the report views, added print button
[Improvement] Adaptation of the wording in the risk assessment
[Improvement] The updated documentation for the ISMS addon can now be found here: https://isms.readthedocs.io (only in german yet)
[Change]      Configuration of the risk classes and formula in "Extras" - no longer in the Tenantsettings
[Change]      Required i-doit version is 1.14.2 or higher
[Change]      Adapt all categories and report views to the new risk classes
[Bug]         Wrong values ​​for attribute "Residual Risk Level" were displayed in the Report Manager
[Bug]         An error message appeared in the report manager for the Applicability category
[Bug]         There was an error duplicating Annex A Controls
[Bug]         Risk assessments with decimal numbers were sometimes not listed in the risk matrix
[Bug]         There were wrong links in risk assessments after duplicating objects
[Bug]         Report "ISMS residual risk by level" did not evaluate the level
[Bug]         Protection objectives were recreated when objects or object groups that had risk assessments were duplicated.
[Bug]         Risk Treatment options could not be edited
[Bug]         Incorrect wording in "Risk treatment plan" view
[Bug]         Applicability of SOA Controls was not automatically set to "Yes" when adding to a risk assessment if the Control category was nonexistent.
[Bug]         Archived and deleted objects should not be displayed in report views
[Bug]         The view "ISMS risk assessment object-based" showed all protection objectives and not just the assigned ones.
[Bug]         Reindexing the search index after CSV import threw an error message
[Bug]         After editing the ISMS object types, the relative paths to the object type icons were lost
[Bug]         In the report manager the column "Likelihood after treatment" the same value as "Likelihood"
[Bug]         The report view risk treatment plan did not work, if category "Threat" is empty
[Bug]         A database error was shown when deleting unfinished/archived/deleted category entries

1.3.3
--------------------------------------------------------------------------------
[Bug] Installation of ISMS addon does not work in fresh installed i-doit 1-.14

1.3.2
--------------------------------------------------------------------------------
[New feature] Report views can now be filtered by location
[New feature] The right "View" of "Category in Objects underneath a location" for category "ISMS" is taken into account in the ISMS report views
[New feature] New tenant settings: Filter report views with location based rights
[Bug]         The location isn't shown in the report view "ISMS Scope"
[Bug]         Filter for scope does not work in report views " ISMS Risk by Level" and "ISMS Residual Risk by Level"

1.3.1
--------------------------------------------------------------------------------
[New feature] Extended report view "ISMS Risk Matrix" erweitert with second risk matrix after risk treatment
[Improvement] Visual improvements in report view "ISMS Risk Matrix"
[Bug]         Reports are stored in the wrong database during a new installation in i-doit 1.13.1 (or higher)
[Bug]         Missing or faulty translations in report view "ISMS Risk Matrix"

1.3.0
--------------------------------------------------------------------------------
[New feature] Created new object-type "Control Annex A"
[New feature] Added new attribute to object-type "Criteria" to describe consequences
[New feature] New Report-view "SOA completeness check"
[Improvement] New icons and images for ISMS object types
[Improvement] Splitted BSI elementary threads to threads and vulnerabilitys and published them as csv-import
[Improvement] Added new attribute to risk assessment: "Date of risk-evaluation"
[Improvement] Report-view "Statement of Applicability (SOA)" extended
[Improvement] Report-view "Risk Matrix" uses new attribute for consequences
[Improvement] Requirements from "BSI-Grundschutzkompendium" are published as csv-import
[Improvement] Threads, vulnarabilities and controls from "Guidelines on content and requirements for industry-specific security standards (B3S) according to §8a(2) BSIG" (KRITIS) are published as csv-import
[Change]      Object-type "Threat" renamed in german language
[Change]      Removed the unused treshold value in the ISMS section of the Tenantsettings
[Change]      Options for risk treatment adjusted to values of ISO 310000
[Change]      Renamed "Control" to "SOA-Control"
[Bug]         Missing object title in Report-view "ISMS risk assessment object based"
[Bug]         Unrated incident scenarios lead to false representation in Report-Views "ISMS risk assessment" and "... object based"
[Bug]         False order of incendent scenario ratings in Report-Views "ISMS risk assessment" and "... object based"
[Bug]         Authentication error in multi-edit for category "Advised by ISO27002"
[Bug]         SQL-Error thrown at multi-edit for attribute "Applicability"
[Bug]         Category "Advised by ISO27002" cannot be added to list-view
[Bug]         Error in variable Report
[Bug]         Attribute "ISMS relevant" cannot be saved in multi-edit
[Bug]         Missing english translation of report view "ISMS treatment plan (RTP)"
