Skip to main content

Security Hub v1.2.1

I. Highlights​

FPT Smart Cloud introduces Issue Lifecycle Management in Security Hub v1.2.1 as part of the FPT Security Platform (FSP).

This release gives Tenant Admins full control over the lifecycle of security issues — from initial detection to resolution. A new Bulk Change Status action lets Admins classify issues as False Positive or Accepted Risk and reopen them in one step. The system automatically handles status transitions on rescan (Auto-Resolved and Auto-Reopen), and every event is recorded in a new Activity Log integrated into Issue Detail. The filter bar also gains a new Scan Type filter and an expanded Search scope.

warning

Breaking change: The "Ignored" status from previous versions has been fully replaced by two new statuses — False Positive and Accepted Risk — with clearer meanings aligned with standard security triage practices.

II. Released Features​

1. Issue Lifecycle Management​

a. Description​

Issue Lifecycle Management defines the complete lifecycle of a security issue — from detection through scan to resolution or archiving. It includes four statuses, rules for manual and automatic status transitions, bulk actions, and a full activity history in Issue Detail.

b. Features​

Statuses — new definitions:

  • "Ignored" status removed; replaced by two new statuses:
    • False Positive (gray badge) — Admin confirms this is not a real issue
    • Accepted Risk (yellow badge) — Admin accepts the risk, no immediate action required
  • Full status list: Open · False Positive · Accepted Risk · Resolved · Hidden (hidden from UI when the resource or rule is deleted)
  • Issues in Resolved status have a disabled checkbox — cannot be manually changed; tooltip: "Resolved issues are system-managed and cannot change status"

Bulk Change Status:

  • New Change Status ▾ button on Issue List — enabled when ≥1 non-Resolved row is checked
  • 3 manual actions:
    • Mark as False Positive — moves to False Positive
    • Mark as Accepted Risk — moves to Accepted Risk
    • Reopen — returns to Open from False Positive or Accepted Risk
  • Each action opens a confirmation dialog with an optional Comment field (up to 500 characters)
  • Save (N) button: N = the number of issues that will actually change status (selected non-Resolved issues minus those already at the target status)
  • Success toast: "Status updated for N issues"

Auto-Resolved:

  • System automatically moves issues to Resolved when a rescan confirms the misconfiguration no longer exists — applies to all active statuses (Open / False Positive / Accepted Risk)
  • Activity log entry: label "Auto-resolved" · Actor: System · Reason: "Issue no longer detected in the latest scan"

Auto-Reopen:

  • System automatically moves issues from Resolved back to Open when a rescan re-detects the misconfiguration on the same resource
  • Activity log entry: label "Reopened" · Actor: System · Reason: "Issue re-detected in the latest scan"

Activity Log:

  • New Activity section in Issue Detail — shows the complete event history, newest first
  • Timestamp format: DD/MM/YYYY HH:mm:ss; Actor: user email or "System"
  • 6 event types: Issue detected · Marked as False Positive · Marked as Accepted Risk · Reopened (manual) · Auto-resolved · Reopened (automatic)

Filter Bar — updates:

  • New Scan Type filter: CSPM / KSPM
  • Status filter updated: Open / False Positive / Accepted Risk / Resolved
  • Reference filter removed; reference search integrated into the Search field
  • Search expanded: issue name · description · asset name · reference · VPC; placeholder: "Search by issue, asset, reference or VPC"
  • Filter order (left to right): Search → Scan Type → Asset Type → Status

Issue List — new column:

  • Scan Type column added (after Asset): badge CSPM / KSPM

c. Capacity​

  • Bulk status change applies to all non-Resolved issues on the current page (per active filters)
  • Activity log stores full history — no limit on number of events

III. Bug Fixes & Improvements​

#DescriptionType
1"Ignored" status removed; replaced by "False Positive" + "Accepted Risk"Breaking change
2Reference filter removed from Filter Bar; reference search integrated into Search fieldImprovement