27k1 RMS Release Notes

RMS Version 6.2.0.0 
Released: 25 September 2025
  • This update makes changes to the structure of one database table.
  • An exciting new timesaving feature "SharePoint Collaboration" is now included in the RMS at no additional cost.
  • Part II Section 6.3 to 6.6 now integrate with your SharePoint Sites.
  • Reporting instructions are added directly from the Part II Section 6.4 to 6.6 pages.
  • Assessment Scope Finalization updated.
    • The Save button has been removed.
    • Options to update or not update the narratives.
  • Part I Section 4 "Not Applicable" auto inserted if required.
  • Microsoft frameworks updated with the lates security patches.

The full installation package is available at https://rmsv5.27k1.net/fullinstallationpackage/27k1 RMS.zip

RMS Version 6.1.0.0 
Released: 2 September 2025
  • The ability to export to Excel completed PCI DSS Requirements is added.
  • A Progress filter is added to the Blank fields page.
    • The progress of all blank field PCI DSS Requirements is updated to "Ready for QA" when 'Fill All with Blanks' is submitted.
  • ROC Part I changing status to QA Complete is disabled for QSAs.
  • Charts:
    • Two new charts added to the main Requirements chart page, showing 'In Place' and the 'Not Applicable' progress.
    • Requirement charts audited and updated as necessary.
    • All section charts removed from Part I and Part II 'Sampling and Evidence'.
    • Part I and Part II 'Sampling and Evidence' charts appearance changed and audited for errors, then corrected.
  • A subtitle is added to each reporting instruction on the PCI DSS Requirement page reflecting the bold print in the ROC.
  • Assessment Scope
    • Electronic media storage updated, Requirement 7.2.6 added and PCI DSS Requirements in Requirement 3 removed, please check the applicable requirements on the Assessment Scope page.
    • Selection of SAQ Merchant Eligibility checkboxes updated to prevent clicking errors.
  • A teaching tip is added to the finding response on the PCI DSS Requirement page.
  • The QSA Certificate field in ROC Part I filling with credentials, not the certificate type.
  • PCI DSS Requirement 7.2.6. Missing 'Electronic data storage' narrative, added to the narrative library.
  • Unnecessary sample set drop downs removed in Document and Interview Evidence dialogs Section 6.

The full installation package is available at https://rmsv5.27k1.net/fullinstallationpackage/27k1 RMS.zip

RMS Version 6.0.1.0 
Released: 19 August 2025
  • Assessment findings filter added to ROC Part II Blank field check.
  • AOC Tab in Part I Section 4.4 not showing correctly.
RMS Version 6.0.0.0 
Released: 12 August 2025
  • A new feature is added which checks for blank Reporting Instruction responses and Assessment Findings fields in the output to the ROC.
    • Blank Reporting Instruction responses can be one-click auto-filled with 'Not Applicable'.
  • Part I Section 4.4 - Third Party Service Providers are now assigned to individual PCI DSS Requirements.
  • Requirements status showing 'Waiting for evidence from the Entity' is a new feature on the Requirements page.
    • The requirement finding is set to 'Not in Place' and an Excel report of 'Evidence waiting' for the assessment is available.
    • A chart is added to show the status of the 'Assessment findings' .
  • ROC Part II Section 6 Sampling and Evidence - Sampling sets for reporting, Assignment of Documents, Interviews and Other Evidence to Part II appearance and performance improved. Selection capability improved when assigning evidence to Part II PCI DSS Requirements.
  • Part II Section 6.3 Sampling sets for reporting shows the related 'Other evidence' and the underlying PCI DSS Requirements.
  • Merchants - Assessment scope finalizing inserts 'Not Applicable' where required.
  • Service Provider Eligibility - SAD shows info box with the relative requirements.
  • PCI DSS Requirement 12.5.2 now shows as 'In Place' for Merchants. (As per PCI Council rules)
  • Part I Segmentation is set to be used when Requirements 1.3.1, 1.3.2 and 1.3.3 are applicable.
  • Home page shows ROC Credit status.
  • Access to the RMS Admin area in 'Settings' can optionally be achieved by a new license key feature.
  • Requirements page - The evidence does not get refreshed after editing - fixed.
  • Requirements page - The evidence references are now in alphabetical order.
  • Part II Section 6. Adding Sample Sets, Document, Interview and Other Evidence dialogs includes all fields as per the Edit dialog.
  • Assessment Scope - Electronic media storage and Cardholder data media Info icons now showing the correct requirements.
  • Assessment Scope - If a Requirement is set to Customized Approach then the Requirement is marked In Place and the Response is not replaced with Narrative - fixed.
  • Selecting evidence in the Requirement Reporting Instruction is now a one step process.
  • Cannot add duplicate references to sample sets and all evidence types - fixed.
  • Part I Chart - In Remediation removed.
  • Stats removed from main index pages to improve performance when many assessments are listed.
RMS Version 5.4.1.0 (Important update) 
Released: 16 July 2025
  • Cardholder data Requirements 9.4.4 to 9.4.7 "Not applicable" narratives added to the default and custom profiles.
  • Performance improvements when adding Sample Evidence in Part 2 Section 6.
  • When deleting Sample Evidence, the deletion was not reflected in the Part 2 Requirements.
RMS Version 5.4.0.0 
Released: 27 June 2025
  • Error message now shows if the imported ROC template is corrupt on the 'Date of Assessment' page.
  • ROC not writing correctly after Requirement 6.4.1, caused by best practice updates.
  • Default 'In Place' narratives updated for Requirement 3, please check the default profile and contact us for new narrative text if required.
RMS Version 5.3.3.0 
Released: 5 June 2025
  • Several issues with response narratives and ROC Lite Credits fixed.
  • ROC Lite Credits for SAQ A, B, SAQ B-IP, C-VT, P2PE, SPoC including a combination of these SAQs. Please refer to our pricing page for further information.
RMS Version 5.2.0.0 
Released: 2 June 2025
  • Random narratives for SAQs/Combined SAQs removed and replaced with a defined narrative for each requirement.
  • ROC Lite Credits introduced for SAQ A, B, SAQ B-IP, C-VT, P2PE, SPoC including a combination of these SAQs. Please refer to our pricing page for further information.
RMS Version 5.0.3.0 
Released: 23 May 2025
  • License key error message response "No Network" is more informative.
  • The full installation package is now available here on the release notes page.
RMS Version 5.0.2.0 
Released: 22 May 2025
  • Reporting instruction 10.4.2.1.b evidence type changed from "Other" to "Documentation".
  • Reporting instruction 10.5.1.b evidence type changed from "Documentation" to "Other".
  • When the user name is suffixed to the domain name, the domain name is not correctly processed. This had the side effect of incrementing the license key's domain count.
RMS Version 5.0.1.0 
Released: 19 May 2025
  • When finalizing Service Provider the status was set to in place but the color was set to Red instead of Orange.

RMS Version 5.0.0.0

Released: 6 May 2025
  • We are pleased to announce the release of the 27k1 RMS version 5. This version is packed with new time-saving features such as narratives with profiles. Another important update is how ROC Credits are managed. The ROC Credit is now activated at the time of a new assessment, providing access to the printed ROC immediately.
  • We have changed how additional ROC Credits are purchased.  Additional ROC Credits can now be purchased individually with discounts for larger volumes.
  • Version 5 does require training so please contact us to arrange this.
RMS Version 4.2.1.0
Released: 23 April 2025
  • Part I Section 3.1 text boxes can now accept 5000 characters.
RMS Version 4.2.0.0
Released: 22 April 2025
  • The feature to disable 27k1 RMS updates at the user's computers is added and available in Settings / License Keys.
RMS Version 4.1.1.0
Released: 14 April 2025
  • The app had to be regressed due to the incorrect printing of ROCs which was related to the legacy best practises, this is now fixed.
  • Any existing assessments cans now be updated to post best practise (after 31 March 2025).
  • An improved Part I QA Interface with quick keys being introduced.
  • Sample set text boxes increased to accommodate 5000 characters from 2000.
  • All the features in Version 4.0.0.0 reintroduced.

This release updates the database.

RMS Version 4.0.1.0
Released: 4 April 2025
  • ROCs not being printed to the correct format. Fixed.
RMS Version 4.0.0.0
Released: 3 April 2025
  • The PCI DSS Requirements are updated to align with the PCI DSS ROC v4.0.1 best practices after the 31st March 2025.
  • Save more time with the introduction of "IN PLACE" narratives in the 'Response Library'. A narrative is predefined for each PCI DSS Requirement which can be edited accordingly.
  • Improvements to the User Roles which did not correctly recognise non email sign-in accounts.
RMS Version 3.7.1.0
Released: 27 March 2025
  • Part I Section 4.7 In-scope system component types page not showing (introduced in RMS Version 3.7.0.0)
RMS Version 3.7.0.0
Released: 24 March 2025
  • PCI DSS Version 4.0 removed.
  • The RMS can optionally be signed into using M365.
  • An additional role has been added called "QSA Assistant" which allows an administrator to prepare Part I and Part II for the QSA. Please contact us if training is required.
  • The progress colors and text in the Part II Requirements was unclear. This is now improved.
  • Requirement A1.2.1 was incorrectly set to Best Practice.
  • The app now starts in the same position on your screen as when closed.
  • Part II Requirement charts updated to show the correct data.
  • Part I messages sometimes showing in the wrong place. Part I Messages completely overhauled.
  • Part II Section 6.x Evidence sample sets can now be removed while editing.
  • NB. There is a database change in this release

PS. We are looking forward to releasing the 27k1 RMS Version 4.0.0.0 with exciting new features: In Place narrative in the response library, to save even more time. The updated PCI DSS Requirements.  Flexibility when updating the assessment scope to allow selected items to be overwritten in the ROC.

RMS Version 3.5.3.0
Released: 27 February 2025
  • The ROC R3 validated but was not available when creating a new ROC - fixed.
  • ROC release dates now showing correctly.
  • Quick keys added to the Requirement progress drop-down. (Shift-Z, Shift-X, Shift-C)
RMS Version 3.5.2.0
Released: 13 February 2025
  • Parts 6.2, 6.3 and 6.4 of the ROC not auto filling following the update, fixed.

AOC Completing not applicable reasons with unnecessary text which is now removed.  We wait for the new AOC to be released in April for "reason" to be added if then required.

RMS Version 3.5.0.0
Released: 3 February 2025
  • Getting Started - TPSPs and Entities can now be imported using the Excel Copy/Paste function.
  • A bug is fixed when the app would close when using the Excel Copy/Paste import function if the text to be imported was too long.
RMS Version 3.4.0.0
Released: 29 January 2025
  • ROC v.4.0.1 Release 3 January 2025. Supported.
    • Please upload your new ROC Template in "Utilities".
RMS Version 3.3.0.0
Released: 24 January 2025
  • Microsoft's application framework updated to dot net 9.
  • Narrative Response library item - 'Last changed by' and 'Date last changed' now updating.
  • Certificate not found error message - Error message updated to enable further investigation.
  • Small font sizes remaining on some pages replaced with larger font.
RMS Version 3.2.3.0
Released: 2 January 2025
  • Assigning Document, Interviews and Other to Part II Requirements.
    • Search and combo boxes rearranged.
  • Text in Requirement 8.1.1 corrected
RMS Version 3.2.2.0
Released: 2 January 2025
  • Improvements made to 27k1 RMS Update Server in the admin center.
  • Changes made to the Office 365 Admin sign-in. Required to support the updated Microsoft Framework.
  • Text in Requirement 8.3.1 corrected
RMS Version 3.2.1.0
Released: 28 November 2024
  • Part I Section 4.4 Edit dialog not showing all fields. Scrollbar added to show the hidden area.
  • 27k1 Support moved to the top main menu.
RMS Version 3.2.0.0
Released: 27 November 2024
  • Page links to Part 2 from Assessment scope page corrected.
  • Section Part I sorting order corrected.
  • Copy paste TPSP in Requirement now pasting the contract.
  • Link from Part II requirement - TPSP to P1 S4 added.
  • "QSA Complete" text changed to "Ready for QA".
  • Quantities in Part I Charts and menus corrected.
  • Security and performance updates applied.
RMS Version 3.1.1.0
Released: 5 November 2024
  • Assessment Scope / Part II Summary - page links to Part II Requirements corrected.
  • Create Final ROC Reports page now shows the ROC Created and ROC Expiry dates.
RMS Version 3.1.0.0
The PCI DSS v4.0.1 October 2024 Revision 2 ROC is now available

Released: 31 October 2024

  • Import the latest ROC Template v4.0.1 Revision 2 October 2024 into the 27k1 RMS using the "Utilities" menu.
  • Text changes to three PCI DSS Part II Requirements to comply with ROC v4.0.1

Welcome to RMS Version 3.0.0.0

RMS Version 3.0.2.0

Released: 30 October 2024

  • When assigning evidence in Part II, app closes when no evidence has been previously assigned.
RMS Version 3.0.1.0

Released: 29 October 2024

  • Items fixed when assigning documentation, interview and other evidence from Section 6 to the PCI DSS requirements.
    • Subrequirements not filtering correctly.
    • Link to Part II, lining to incorrect page.

Released: 28 October 2024

  • Major update to PCI DSS v4.0.1 / ROC Part II Findings and Observations to enable a faster and more efficient method to update assessor findings and responses.
  • A new QA system to improve the QA workflow.
  • Fixes and changes which increases the overall performance and reliability of the application.
RMS Version 2.1.4.0

Released: 16 October 2024

  • When assigning evidence to PCI DSS requirements from Section 6, items could be assigned to requirements marked as Not Tested.
  • 27k1 RMS App regressed to support Windows minimum version 10.0.19041.0.
RMS Version 2.1.3.0

Released: 12 October 2024

  • Deployment issues with previous update - fixed.
RMS Version 2.1.2.0

Released: 10 October 2024

  • Bugs fixed following v2.0 update
  • Charts now showing correct colors where remediations are added.
RMS Version 2.1.1.0

Released: 26 September 2024

  • Reporting instruction text changed to reference section 6 Part II,
  • Part II PCI DSS Requirement, skipping to the next item is temporarily disabled. This feature will to be updated and enabled in the next release.
RMS Version 2.1.0.0

Released: 26 September 2024

  • Continual improvement tab removed from Part II PCI DSS Requirement.
  • Part I Section 5 Subcontractors, ROC Checkbox "No" not checked when there are no subcontractors.

27k1 RMS Version 2.0.0.0

Released: 24 September 2024

  • PCI DSS v4.0.1 fully supported.
  • Upload your v4.0.1 ROC template for auto updating from the RMS.
  • Save even more time by assigning evidence directly from Part II Sampling and Evidence to the reporting instructions.
  • Improved flow for QA to approve PCI DSS requirements.
  • Many more enhancements.

This update also updates the tables within the database.

Contact us for a short training session on how to use the new features.

Image

Version: 1.17.0.0
Released: 27 August 2024

  • Creating a ROC with compensating controls could fail due to issues relating to the ROC Template. The compensating controls have been removed from the ROC Appendix C template to a separate "Compensating Controls Worksheet" Word document.
  • As a temporary measure the Customized Approach Worksheet will not be auto-filled by the RMS.

Version: 1.16.1.0
Released: 8 August 2024

Thank you all for great feedback.

  • Part II (Appendix A2, 11.4.7). The default narrative library incorrectly populated "Service Provider" instead of "Deprecated Protocols" and "Multi-Tenant".
  • The filter on the Part II menu can now filter on Findings and Evidence types.
  • The filter on the Part II menu now filters the Evidence type "Any" correctly.
  • Part II menu progress is now dependent on the child menu items.
  • Appendix A3 now showing correctly on the Part II charts.
  • Part II 10.2.1.1 text incorrect, now corrected.
  • Misplaced text in Part II 9.3.3
  • There are NO changes to the database in this release.

Version: 1.15.0.0
Released: 2 August 2024

  • There are NO changes to the database in this release.
  • Part I Section 4.9 - Links to Part II Reporting Instructions added.
  • Part II. To complete a PCI DSS Requirement now depends whether the child Sub-requirement is complete.

Version: 1.14.2.0
Released: 31 July 2024

  • There are NO changes to the database in this release.
  • Part 1 Section 1.3.4 list, sometimes not updating due to race condition.
  • Improvements to some page appearances.

Version: 1.14.1.0
Released: 25 July 2024

  • Part I Section 6.3 Interviewee field length not updated in 1.14.0.0 - fixed to accommodate 2000 characters.

Version: 1.14.0.0
Released: 24 July 2024

  • Major improvement to the Assessment Scope (related to Part I 3.1) procedure. Items are now finalized then can be updated without affecting previous Part II entries, this does depends on the type of changes made to the SAQ Eligibility. 
  • The error message when validating a ROC is more informative.
  • Part I 6.2 interview roles field length increased to 2000 characters.
  • Part I 6.2, 6.3, 6.4 and 6.5, the list scrolls to the top after a change is made, fixed.
  • Requirement 3.5.1.2 Updating ROC to Finding "In Place", now updated correctly to "Not Applicable".
  • To show "QSA Complete" in assessment scope tab.
  • Part I sections which are auto-filled from Part II now show informative comments.

Version: 1.12.0.0
Released: 8 July 2024

  • AOCs now show the TPSPs in Part 2f Third-Party Service Providers. Go to the assessment Part I Section 4.4 to set the services being validated.
  • ROC Part I reports and charts not counting status correctly.
  • App crashes when adding System evidence in Part II under certain conditions.
  • Reporting instruction: after adding a System Evidence - Other responses cannot be clicked.
  • Part II showed that Part I had to be finalised before a ROC could be created, this is now linked to the Assessment Scope.
  • The reference in Part I 4.9 Sample Sets can now be edited.
  • Minor text changes

Released: 2 July 2024

  • Due to 11.11.2.0 update, the app cannot be installed, fixed.

Version: 1.11.2.0
Released: 1 July 2024

  • Quarterly rescan dates showing on the ROC are now showing in Part I Section 5.3
  • Copy from Excel and pasting into the Part I sections sometimes shows leading and trailing double quotes, these are now removed.
  • Several new page links added from Part I to Part II requirements.

Version: 1.11.1.0
Released: 7 June 2024

  • App closes when a Part I Non-finalized assessment is selected
  • Assessment Scope Finalization - 3.1 not updating correctly since 1.11.0.0, now corrected

Version: 1.11.0.0
Released: 6 June 2024

IMPORTANT NOTICE: Please remember that if you have version 1.9.x.x installed, please uninstall and reinstall the 27k1 RMS app and reinstall.

How to install the 27k1 RMS | 27k1 RMS / ISMS Knowledge Base

  • PLEASE NOTE: Finalising the assessment and setting the SAQ Eligibility has moved from "ROC Part I Assessment Overview" to "Assessment Scope".

rms-release-notes 1

  • Part II Assessor evidence responses in the reporting instructions are now fully flexible. For example to allow evidence responses for items "Not Tested".

rms-release-notes 2

rms-release-notes 3

Version: 1.10.0.0
Released: 29 May 2024

IMPORTANT NOTICE - We have recently changed our registered office to a permanent location, which changes the 27k1 RMS application's security certificate. Please uninstall your existing 27k1 RMS and install this new version to benefit from this and future updates.

  • Help introduced on the Part II Reporting Instruction pages
  • New digital certificate including the 27k1 Ltd.'s new company registered office is embedded in the application.

Version: 1.9.2.0
Released: 20 May 2024

  • The finding type in the PCI DSS requirement now includes mouseover guidance.
  • Part I 1.8.1 Requirements occasionally showing in the wrong order.
  • Part I 4.4 TPSP whether the third party is included in Part II not filling.
  • Some default evidence types have been updated.
  • Part II index of assessments showing the incorrect count (DESV were always included).

Version: 1.9.1.0
Released: 1 May 2024

  • Part I 3.1b) Eligibility consolidation. Requirements marked as "Not applicable" are now set to In Progress, rather than QSA Completed. The previous method did not apply with the standard which facilitated the change.

Version: 1.9.0.0
Released: 1 May 2024

  • Part I 3.1 Eligibility consolidation updated. Section 9.5 re-audited and updated to better reflect the standard.
  • Part I Section 3.1b). A new "Part II Summary" tab shows a summary report to quickly identify changes made to the Part II requirements following consolidation.
  • Page links directly to Part II are added in Part I Sections 3.1b), 5.1, 5.3 and 3.2.
  • The assessment lists in the "Assessment Manager" are updated to show QA Approved.

Version: 1.8.3.0
Released: 26 April 2024

  • Various Part I and Part II items not updating to QA Approved

Version: 1.8.2.0
Released: 24 April 2024

  • Minor update to the ROC Credits

Version: 1.8.1.0
Released: 20 April 2024

  • Part I Section 3.1b) Requirement 4.2.1 added to SAQ B-IP for merchants.
  • Part I Section 3.1b) Requirement 9.5 Minor corrections implemented for POI devices and POI devices (future dated).
  • Visual improvements to the chart layouts.

Version: 1.8.0.0
Released: 9 April 2024

  • Zoom feature using Ctrl+ mouse wheel added to the charts.
  • Activating ROC credits can now be restricted to signed-in Entra or alias accounts (Go to the Settings menu).
  • Copy from Excel and pasting into sections of Part I visuals improved.

Version: 1.7.0.0
Released: 2 April 2024

  • Progress charts added to Part I and Part II
  • Default Evidence menu item moved from Getting Started to Utilities

Version: 1.6.1.0
Released: 28 March 2024

  • Update to fix several bugs in version 1.6.0.0

Version: 1.6.0.0
Released: 28 March 2024

  • Assigning evidence to Part II Reporting Instruction pages, appearance visually improved.
  • Part II Reporting Instruction - Changes to adding and editing sample sets and system components to improve QSA workflow.
  • ROCS now have an expiry period of 6 months from when the first ROC is created.
  • Part I 3.1b SAQ eligibility settings updated to improve QSA workflow.
  • POI and deprecated protocols options added in Part I 3.1b  for Multi-tenant and standard Service providers.
  • Roles not saving correctly - fixed.

Version: 1.5.0.0
Released: 20 March 2024

  • INFI discontinued by the PCI SSC on 19 March 2024. - INFI templates removed from the app and the INFI tab in the ROC Part II is replaced with Continual Improvements.

Version: 1.4.0.0
Released: 16 March 2024

  • Massive performance improvements when using Azure SQL Database
    • ROC Part I 3.1b Final Assessment process now less than 10 seconds.
    • Creating a new Assessment now less than 10 seconds.
    • ROC Part II menu improved performance.
  • QA now shows in all assessment lists
  • Mousing over the assessment lists is now highlighted.

Version: 1.3.4.0
Released: 13 March 2024

  • Assessors responses which have no Section 6 evidence is now reflected in the ROC.
  • Direct link to TPSPs added in Section 4.4

Version: 1.3.3.0
Minor change to Not applicable assessor responses

Version: 1.3.2.0
Released: 11 March 2024

  • Performance issue related to updating Part I 3.1b Eligibility resolved.
  • TPSP assignment in Getting Started / Entities is removed.
  • Assignment of TPSPs to Part I 4.4 is from the global list of TPSPs in the Getting Started menu.
  • App closing intermittently when working in Part I 3.1b fixed. Issue due to legacy code being removed in the latest Microsoft framework.
  • Part II Assessor Responses updated to provide more flexibility.
  • Any updates to the app now opens the browser to show the latest release notes.

Version: 1.3.1.0
Released: 2 March 2024

  • An error shows "dxUserLogs" when app first installed - fixed.
  • ROC Part I Contact Information, Assessors and Associate assessors cannot now be added unless the other items have been saved.

Version: 1.3.0.0
Released: 27 February 2024

  • Changes to role based management.
  • User sign-in log created.
  • license key unlock feature added for Clients not on a domain.

Version: 1.2.2.0
Released: 22 February 2024

  • Sign-in procedure changed whereby a username is manually entered if a domain and username is not available from the network.

Version: 1.2.1.0
Released: 21 February 2024

  • Database Trusted Connection and Encrypt settings now configurable on the database settings page.
  • SQL Server connection message improved.
  • Change to TPSP narrative in Part II

Version: 1.2.0.0
Released: 17 February 2024

  • For networks not on a domain, the machine's MAC address is now assigned to the license key for security reasons.

Version: 1.1.1.0
Released: 12 February 2024

  • Changes to the further improve the ROC creation times for QSAs.

    Version: 1.0.0.0
    Released: 19 January 2024

    • 27k1 RMS Version 1 released

     Additionally, a software update can include but is not limited to:

      • Stability improvements and bug fixes.
      • Further improvements to performance.