ROADMAP.md

Deming Roadmap

This document contains the evolutions planned in 2026

Important

• Dashboard for auditees : #556
• Risks register : #562
• Security exceptions : #590
• Configurable control scoring system
• Export set of controls for audit
• Send notifications to Slack with Laravel Notification Framework : #540
• Non-regression tests

Improvements

• Update documentation
• Convert Markdown to ODT in reports
• Put configuration in database in place of PHP file (for Docker)
• Import Security Controls from OSCAL

Evolutions made in 2024/2025

• Create action plans not linked to a measurement
• Change Logs
• Continuous integration in GitHub
• Measurement not linked to a control
• Measurement linked to multiple controls
• Groups management
• Automatically remove measurements after a defined number of months
• Docker version
• Migrate to Metro5
• Dark theme
• Improve action plan with status (%)

Evolutions made in 2023

Important

• Code Quality controls

Improvements

• Database search tool
• ISO 27002:2022 - update metrics based on the new version of ISO 27002
• Attributes (tags) - add attributes on security measures
• Improve test data generation
• User documentation
• Implement import/export of controls
• Fix column sort with date
• Send email notification to users for carrying out controls
• API
• Introduce controls by scope
• Report of applicable/non-applicable controls by scope