v1.4.0 - 2 July 2026
Five skills updated to reflect newest changes in the framework guidelines:
-
FedRAMP - CR26 overhaul: Certification Classes A–D replace Low/Moderate/High; FedRAMP 20x is now the primary pathway; FedRAMP Ready retires July 28, 2026; JAB P-ATO fully retired; corrected POA&M SLAs (Critical=15d, High=30d, Moderate=90d, Low=365d); OSCAL mandate September 30, 2026.
-
SWIFT CSP - CSCF v2026: Control 2.4 (Back-Office Data Flow Security) promoted from advisory to mandatory; framework now 24 mandatory + 7 advisory; attestation window July 1–December 31, 2026.
-
CCPA/CPRA - ADMT regulations effective January 1, 2026 (compliance deadline January 1, 2027); cybersecurity audit and risk assessment rules live; 2026 enforcement: Disney $2.75M, PlayOn Sports $1.1M, Ford Motor $375K.
-
LGPD - Brazil-EU mutual adequacy adopted January 26–27, 2026; SCCs and BCRs no longer required for Brazil↔EU transfers.
-
EU AI Act - Digital Omnibus formally adopted June 29, 2026; Annex III standalone extended to December 2, 2027; Annex I extended to August 2, 2028; GPAI AI Office enforcement activates August 2, 2026.
Benchmarks (iteration 2): FedRAMP 100%/96%/+4pp · SWIFT CSP 100%/80%/+20pp · LGPD 100%/52%/+48pp · EU AI Act 100%/80%/+20pp · CCPA 100%/96%/+4pp (unchanged). All 953 tests pass.