Product update
New in fullCircle: March 2026
Vendor risk, at portfolio scale
March made vendor management work at scale, with bulk actions across your vendor list, a richer bulk upload and questionnaires that adapt to every answer. CMMC clients can also follow their score as the assessment unfolds.
Manage your whole vendor list at once
Vendor Management
Vendors
- Report period covers Jan 1 – Dec 31, 2025; unqualified opinion.
- 1 exception noted in change management (CC8.1) — suggested vendor risk created.
- 4 complementary user entity controls to confirm on your side.
Updating owners, statuses and tags one vendor at a time doesn't scale past a few dozen vendors. Select any group of vendors to set status, owners, tags and category together, export them or delete them. Bulk upload now takes your full vendor inventory, from contacts and review dates to impact, likelihood and criticality, and flags invalid cells before you import.
Vendor questionnaires that adapt to every answer
Vendor Security Assessment
1. Is multi-factor authentication enforced for all workforce accounts?
2. Do you perform annual third-party penetration tests?
3. Describe your data retention and disposal practices.
Questionnaire Responder
3 questions detected · Scan Page & Create
Is multi-factor authentication enforced for all workforce accounts?
Do you perform annual third-party penetration tests?
Describe your data retention and disposal practices.
Long questionnaires full of irrelevant questions frustrate vendors and slow reviews down. Branch questions now work in vendor questionnaires. Follow-ups appear only when an answer calls for them, stay out of the progress count until then and tell the vendor why they appeared.
Follow your CMMC score as the assessment unfolds
Controls
Frameworks
Deployed Frameworks (4)
Deploy Framework(s)ISO 27001:2022
116 Framework Controls
Controls Coverage:96%
Evidence Coverage:92%
SOC 2
61 Framework Controls
Controls Coverage:100%
Evidence Coverage:95%
PCI DSS v4.0.1
252 Framework Controls
Controls Coverage:89%
Evidence Coverage:84%
ISO 42001
66 Framework Controls
Controls Coverage:74%
Evidence Coverage:61%
Waiting for the final report to learn where you stand turns CMMC prep into guesswork. When your assessor publishes it, a color-coded CMMC Score appears on your Formal Findings, calculated from 110 with deductions for unmet controls, so you can prioritize remediation while testing is still underway.
On CMMC engagements with risk3sixty.
Also in this release
Smaller changes that make everyday work smoother.
See March's release in action.
Book a demo and we'll show you what's new, using the frameworks and workflows your team runs today.