{"componentChunkName":"component---src-templates-blog-post-js","path":"/blog/tech-blog-october-2026","result":{"data":{"contentfulBlogPost":{"id":"04911256-7fc6-5541-b405-1a7dc0e2c1fb","title":"Tech Blog - October 2026","description":{"childMarkdownRemark":{"html":"<p>New features added and issues addressed in the TurboQSA product. October 2026.</p>","excerpt":"New features added and issues addressed in the TurboQSA product. October 2026."}},"body":{"childMarkdownRemark":{"html":"<p>October was a landmark month for TurboQSA. We shipped four new assessment standards, cross-standard evidence mapping, and a reworked dashboard that puts what needs your attention front and center. Let's recap our progress in October 2026:</p>\n<h2>A milestone for TurboQSA: welcome to Turbo Assessment</h2>\n<p>TurboQSA is growing into something bigger. We're proud to introduce Turbo Assessment - <a href=\"https://www.turboassessment.com/\">turboassessment.com</a> - our growing portfolio of assessment tools, built to take our assessment technology beyond PCI.</p>\n<p>TurboQSA remains our dedicated PCI offering, supporting PCI DSS and PCI PIN assessment work. Turbo Assessment expands that foundation to more assessment standards - ISO 27001, SOC 2, HIPAA, FedRAMP, NIST, GDPR, CMMC, and more - with TurboAI private AI functionality built for assessment teams handling sensitive information.</p>\n<p>Rooted in PCI. Built to go further.</p>\n<h2>New Features</h2>\n<ul>\n<li><strong>CMMC Level 2 assessments:</strong> We now support CMMC Level 2 assessments with 110 practices and 320 objectives, SPRS scoring, POA&#x26;M tracking, Word export, and a dedicated C3PAO Assessor role.</li>\n<li><strong>SOC 2 assessments:</strong> We now support SOC 2 Type I and Type II assessments with all 61 Trust Services Criteria, project lifecycle, sub-report assembly, and Word and Excel matrix exports, plus a dedicated CPA assessor role.</li>\n<li><strong>ISO/IEC 27001:2022 assessments:</strong> We now support ISO 27001 assessments with templates, Word export, and Statement of Applicability export in spreadsheet and JSON formats, plus a dedicated ISO Lead Auditor role.</li>\n<li><strong>FedRAMP 20x assessments:</strong> We now support FedRAMP 20x assessments end to end, from scoping through Word and JSON exports, with an interactive glossary and NIST SP 800-53A finding states.</li>\n<li><strong>FedRAMP rev5 package checklist:</strong> The package checklist now has modernized interactive controls and rendering.</li>\n<li><strong>Cross-standard evidence mapping:</strong> You can now reuse one piece of evidence across up to 8 standards in the Client Evidence Library, with assessor-confirmed mapping suggestions and annotated-set export.</li>\n<li><strong>SAQ as its own project type:</strong> SAQ projects now have their own project type with a guiding panel and unrelated ROC items hidden.</li>\n<li><strong>Report table of contents:</strong> Report view now has a Contents panel, docked to the side and off by default.</li>\n<li><strong>Dashboard \"needs your attention\":</strong> The main dashboard now surfaces mentions grouped by project with a guided walkthrough, plus response requests and upcoming interviews.</li>\n<li><strong>PCI PIN dashboard support:</strong> PCI PIN projects now appear on the dashboard with proper annex and control-objective sections.</li>\n<li><strong>PCI PIN summary of findings:</strong> Part I, section 1.5 now auto-populates with a single option per hierarchy.</li>\n<li><strong>Clone from project overview:</strong> You can now clone a project right from its overview page.</li>\n<li><strong>Integration API key admin:</strong> The API key grid is now cleaner, with an active/inactive filter and pagination.</li>\n</ul>\n<h2>Bug Fixes &#x26; Improvements</h2>\n<ul>\n<li><strong>Project list performance:</strong> We fixed the project list slowdown and the memory blowup behind it.</li>\n<li><strong>Large file uploads:</strong> Files over 250 MB are no longer sent to AI processing or decoded during Word rendering, so huge uploads can't crash AI features.</li>\n<li><strong>Evidence uploads and cloning:</strong> We fixed same-file upload handling, missing-file handling, and orphaned files, so cloning no longer loses or duplicates evidence.</li>\n<li><strong>User search:</strong> We fixed the search error and made matching case-insensitive.</li>\n<li><strong>AI finding suggestions:</strong> They no longer write an error message into the rationale box on non-PCI standards, where manual entry applies instead.</li>\n<li><strong>Status and progress displays:</strong> We corrected progress display for SAQ items and for the new standards.</li>\n<li><strong>Default RFT responses:</strong> They now appear on all control types, not just requirements, and the N/A override delete is fixed.</li>\n<li><strong>Vectorized-font PDFs:</strong> Pages with no extractable text are now treated as images, so AI can process them.</li>\n<li><strong>Translations:</strong> PCI DSS ROC, DESV, and SAQ text is now fully translated into Spanish and Portuguese, the Attestation of Compliance UI is translated, and engagement tasks are fully translated.</li>\n<li><strong>Report view:</strong> It now has an actions menu and universal search, fixed loading overlay races, and controls that wrap instead of overflowing on long translations.</li>\n<li><strong>Faster page loads:</strong> Login and dashboard now load on demand, and English renders immediately.</li>\n<li><strong>Disabled users:</strong> Disabled-but-assigned users remain visible (read-only) in Manage participants.</li>\n<li><strong>Requirement Report timezones:</strong> Timezone handling in the Requirement Report is now correct.</li>\n<li><strong>Engagement task assignees:</strong> A search field is added and overflow is fixed for large teams.</li>\n<li><strong>Eligibility SAQ table:</strong> Column widths are fixed for P2PE and SAQ A.</li>\n<li><strong>Usage screen layering:</strong> The layering glitch in system and observation lists is fixed.</li>\n<li><strong>Text fields:</strong> They no longer jump scroll to top while editing.</li>\n<li><strong>Cloning dialog:</strong> The 'Requirement responses only' choice now applies only to selected tree sections, and the dialog is fully translated.</li>\n</ul>\n<p>Stay tuned for more updates as we continue expanding TurboQSA's capabilities - and subscribe to our <a href=\"https://www.linkedin.com/company/mqsa/\" title=\"TurboQSA @ LinkedIn\">LinkedIn page</a>!</p>"}},"featuredImage":{"gatsbyImageData":{"images":{"sources":[{"srcSet":"//images.ctfassets.net/3b1c87ettdg5/7iGYyaJPdNdMVuzqbf4riR/35e57bf6d749cb44e059a695e04f3c44/Tech-Blog-October-2026-featured-image.webp?w=300&h=200&q=50&fm=webp 300w,\n//images.ctfassets.net/3b1c87ettdg5/7iGYyaJPdNdMVuzqbf4riR/35e57bf6d749cb44e059a695e04f3c44/Tech-Blog-October-2026-featured-image.webp?w=600&h=400&q=50&fm=webp 600w,\n//images.ctfassets.net/3b1c87ettdg5/7iGYyaJPdNdMVuzqbf4riR/35e57bf6d749cb44e059a695e04f3c44/Tech-Blog-October-2026-featured-image.webp?w=1200&h=800&q=50&fm=webp 1200w","sizes":"(min-width: 1200px) 1200px, 100vw","type":"image/webp"}]},"layout":"constrained","width":1200,"height":800,"placeholder":{"fallback":"data:image/jpeg;base64,UklGRk4AAABXRUJQVlA4IEIAAACQAwCdASoUAA0APpE6l0eloyIhMAgAsBIJZ2HgU0ATjaukRaIAAP7vQ9ZWt9NxqZa8dXbF8jghw8hcYLiDZxsQAAA="}},"fluid":{"base64":"data:image/jpeg;base64,UklGRk4AAABXRUJQVlA4IEIAAACQAwCdASoUAA0APpE6l0eloyIhMAgAsBIJZ2HgU0ATjaukRaIAAP7vQ9ZWt9NxqZa8dXbF8jghw8hcYLiDZxsQAAA=","aspectRatio":1.5,"src":"//images.ctfassets.net/3b1c87ettdg5/7iGYyaJPdNdMVuzqbf4riR/35e57bf6d749cb44e059a695e04f3c44/Tech-Blog-October-2026-featured-image.webp?w=1200&q=100","srcSet":"//images.ctfassets.net/3b1c87ettdg5/7iGYyaJPdNdMVuzqbf4riR/35e57bf6d749cb44e059a695e04f3c44/Tech-Blog-October-2026-featured-image.webp?w=300&h=200&q=100 300w,\n//images.ctfassets.net/3b1c87ettdg5/7iGYyaJPdNdMVuzqbf4riR/35e57bf6d749cb44e059a695e04f3c44/Tech-Blog-October-2026-featured-image.webp?w=600&h=400&q=100 600w,\n//images.ctfassets.net/3b1c87ettdg5/7iGYyaJPdNdMVuzqbf4riR/35e57bf6d749cb44e059a695e04f3c44/Tech-Blog-October-2026-featured-image.webp?w=1200&h=800&q=100 1200w,\n//images.ctfassets.net/3b1c87ettdg5/7iGYyaJPdNdMVuzqbf4riR/35e57bf6d749cb44e059a695e04f3c44/Tech-Blog-October-2026-featured-image.webp?w=1800&h=1200&q=100 1800w,\n//images.ctfassets.net/3b1c87ettdg5/7iGYyaJPdNdMVuzqbf4riR/35e57bf6d749cb44e059a695e04f3c44/Tech-Blog-October-2026-featured-image.webp?w=1920&h=1280&q=100 1920w","sizes":"(max-width: 1200px) 100vw, 1200px"}},"tags":[{"label":"AI"},{"label":"MCP"},{"label":"DSS"}]}},"pageContext":{"id":"04911256-7fc6-5541-b405-1a7dc0e2c1fb"}},"staticQueryHashes":["2026470958","2461330136","3450805815"]}