We tagged the release for OpenFISMA 2.6 this week. This is a big milestone!

At a high level, this release includes the following new features:

1. Incident Response Module (More information will be posted next week about this module)
2. Comment Tab on Findings
3. New Administration Page: Modules (Allows you to selectively enable OpenFISMA features)

We also fixed a number of small bugs and usability issues. For example, we removed the Flash-based file upload progress bar and replaced it with one written purely in PHP and Javascript. This is one step in our eventual goal of removing Flash from the project entirely and replacing it with semantic, standards-compliant technologies.

Modularity is becoming an increasing focus for the project, and we are slowly building towards that goal. In this release, we have begun to move some of the user interface elements around (particularly in the main menu) to group administrative and reporting functionality with the business functions that they support. This will eventually enable a sysadmin to turn on those features which his/her organization wants to use in OpenFISMA, and to disable the undesired features.

We will be posting Release 2.6 on the website next week for public consumption.