How Atlassian Manages Risk and Compliance with JIRA Software and Confluence

•

0 j'aime•15,589 vues

Traditional Governance, Risk & Compliance (GRC) tools are big, expensive, and challenging to manage and integrate. They typically require an army of people to implement and maintain. At Atlassian, we use the power and flexibility of JIRA Software and Confluence to manage our GRC for a low cost, while seamlessly integrating with our existing processes and teams. Join us if you manage risk and compliance, work in information security, conduct audits, or if you are just tired of chasing audit remediations. We will share best practices that organizations in all industries or geographic locations can leverage to manage their governance, risk & compliance needs. George Totev, Head of Risk & Compliance, Atlassian

Logiciels

How Atlassian Manages
Risk and Compliance
with JIRA and Confluence
GEORGE TOTEV | HEAD OF RISK & COMPLIANCE | ATLASSIAN

Is This How You Feel…
Before Or After An Audit?

Compliance
Delivery
System
Efficient
Scalable
Low Cost
Easy to Use
Spreadsheets & Documents
Really?!
Specialized Tools
Unwieldy, $$$
What else is out there?
Hmmm….

Recipe
Ingredients
• One Vanilla JIRA
• One Vanilla Confluence
• Several GRC Experts
• Lots of Coffee & Pizza
• Mix and stir for about a week
• Taste and improve

Compliance Objects
• Standard
• Control Objective
• Control Activity
• Control Test
• Finding
• Remediation
• ….
JIRA
+
Confluence
Issue
Workflow
Links
Dashboards
Confluence

Lifecycle
• Stages
• Transitions
JIRA
+
Confluence
Issue
Workflow
Links
Dashboards
Confluence

Links
• Within GRC
• With Other Projects
• With Confluence
• With Other Systems
JIRA
+
Confluence
Issue
Workflow
Links
Dashboards
Confluence

Dashboards
• Built-in Reports
• Dashboards
• Confluence
JIRA
+
Confluence
Issue
Workflow
Links
Dashboards
Confluence

Rich Documents
• Reports
• Narratives
• Risks and Controls Matrices
• Data-Driven Roadmaps
JIRA
+
Confluence
Issue
Workflow
Links
Dashboards
Confluence

Audit
Subtasks in Control Test
Linked PBCs
Findings in JIRA
Linked Remediations
Used Cases
Risk
Risk Issue Type
Risk Driver Issue Type
Links with Controls
Policies
Policy in Confluence
Policy Lifecycle in JIRA
Policy Exceptions in JSD

Efficient
Scalable
Integrated
Low Cost
Easy

Thank you!
GEORGE TOTEV | HEAD OF RISK & COMPLIANCE | ATLASSIAN

Recommandé

Focus, Governance, and Innovation: How LinkedIn Scaled to 3M Jira Issues and ...Atlassian

How Atlassian Manages Risk and Compliance with Jira Software and ConfluenceAtlassian

What’s hot in the world of atlassianACA IT-Solutions

Managing Product Development Chaos with Jira Software and ConfluenceAtlassian

Scaling Agile in the Enterprisecolleenfry

How to Build an Open Culture with the Tools You Use Every DayAtlassian

JIRA Keynote Summit 2014Atlassian

Rock Solid Projects With Atlassian Dev ToolsACA IT-Solutions

Recommandé

Focus, Governance, and Innovation: How LinkedIn Scaled to 3M Jira Issues and ...Atlassian

How Atlassian Manages Risk and Compliance with Jira Software and ConfluenceAtlassian

What’s hot in the world of atlassianACA IT-Solutions

Managing Product Development Chaos with Jira Software and ConfluenceAtlassian

Scaling Agile in the Enterprisecolleenfry

How to Build an Open Culture with the Tools You Use Every DayAtlassian

JIRA Keynote Summit 2014Atlassian

Rock Solid Projects With Atlassian Dev ToolsACA IT-Solutions

How Nespresso Uses JIRA Software for Release ManagementAtlassian

How Tempo Adds More Value To Your JIRAACA IT-Solutions

Deployment Flexibility: Introducing Support for Microsoft AzureAtlassian

WeWork Connect: Shaping Confluence to Reflect Our CultureAtlassian

Portfolio Management in JIRA - Karen Branham and Scottie BrimmerAtlassian

The Power of Process: How Samsung Implemented ITILAtlassian

Scaling Atlassian - What's New in Data CenterAtlassian

Everything You Need to Know about JIRA CoreAtlassian

Enabling Business Management with JiraAtlassian

Summit 2014 KeynoteAtlassian

JIRA 7 for Developers - Bartek Gatz Filip Rogaczewski Ian GrunertAtlassian

Spiking Your Way to Improved Agile Development - Anatoli KazatchkovAtlassian

Extending JIRA to Enable High Volume KPI Benchmarking - Keyur PatelAtlassian

Portfolio for JIRA & Kanban: How Thrillist Manages Their Product RoadmapAtlassian

6 Strategies to Uncover Growth Opportunities for Your BusinessAtlassian

Scaling Agile with JIRA Software and Portfolio for JIRAAtlassian

Innovation & Regulation - How Eli Lilly Customizes Atlassian to Find the BalanceAtlassian

Managing Scaled Agile at Rosetta StoneAtlassian

AUG NYC Presentation Feb 13 EventAUGNYC

Deep Dive Into Automation: Scaling Jira Service DeskAtlassian

A Brave Journey in Merge Waters: How Paysafe Consolidated Their Atlassian ToolsAtlassian

Evolving a Worldwide Customer Operations Center Using AtlassianAtlassian

Contenu connexe

Tendances

How Nespresso Uses JIRA Software for Release ManagementAtlassian

How Tempo Adds More Value To Your JIRAACA IT-Solutions

Deployment Flexibility: Introducing Support for Microsoft AzureAtlassian

WeWork Connect: Shaping Confluence to Reflect Our CultureAtlassian

Portfolio Management in JIRA - Karen Branham and Scottie BrimmerAtlassian

The Power of Process: How Samsung Implemented ITILAtlassian

Scaling Atlassian - What's New in Data CenterAtlassian

Everything You Need to Know about JIRA CoreAtlassian

Enabling Business Management with JiraAtlassian

Summit 2014 KeynoteAtlassian

JIRA 7 for Developers - Bartek Gatz Filip Rogaczewski Ian GrunertAtlassian

Spiking Your Way to Improved Agile Development - Anatoli KazatchkovAtlassian

Extending JIRA to Enable High Volume KPI Benchmarking - Keyur PatelAtlassian

Portfolio for JIRA & Kanban: How Thrillist Manages Their Product RoadmapAtlassian

6 Strategies to Uncover Growth Opportunities for Your BusinessAtlassian

Scaling Agile with JIRA Software and Portfolio for JIRAAtlassian

Innovation & Regulation - How Eli Lilly Customizes Atlassian to Find the BalanceAtlassian

Managing Scaled Agile at Rosetta StoneAtlassian

AUG NYC Presentation Feb 13 EventAUGNYC

Deep Dive Into Automation: Scaling Jira Service DeskAtlassian

Tendances (20)

How Nespresso Uses JIRA Software for Release Management

How Tempo Adds More Value To Your JIRA

Deployment Flexibility: Introducing Support for Microsoft Azure

WeWork Connect: Shaping Confluence to Reflect Our Culture

Portfolio Management in JIRA - Karen Branham and Scottie Brimmer

The Power of Process: How Samsung Implemented ITIL

Scaling Atlassian - What's New in Data Center

Everything You Need to Know about JIRA Core

Enabling Business Management with Jira

Summit 2014 Keynote

JIRA 7 for Developers - Bartek Gatz Filip Rogaczewski Ian Grunert

Spiking Your Way to Improved Agile Development - Anatoli Kazatchkov

Extending JIRA to Enable High Volume KPI Benchmarking - Keyur Patel

Portfolio for JIRA & Kanban: How Thrillist Manages Their Product Roadmap

6 Strategies to Uncover Growth Opportunities for Your Business

Scaling Agile with JIRA Software and Portfolio for JIRA

Innovation & Regulation - How Eli Lilly Customizes Atlassian to Find the Balance

Managing Scaled Agile at Rosetta Stone

AUG NYC Presentation Feb 13 Event

Deep Dive Into Automation: Scaling Jira Service Desk

En vedette

A Brave Journey in Merge Waters: How Paysafe Consolidated Their Atlassian ToolsAtlassian

Evolving a Worldwide Customer Operations Center Using AtlassianAtlassian

Building Trust for Adoption at Enterprise ScaleAtlassian

The Four Principles of Atlassian Performance TuningAtlassian

Simplicity at Scale - Growing Teams at AtlassianAtlassian

Be Prepared for Growth - Confluence at ThalesAtlassian

Scaling IT Operations in a DevOps WorldAtlassian

Enterprise Ready - What's New in Data CenterAtlassian

How JIRA Core Helps 300,000 Houses Become SmarterAtlassian

How Archimedes Uses Atlassian Tools Across All TeamsAtlassian

From Start-up to Grown-up – FlixBus's Journey with Trello + AtlassianAtlassian

Agile Incident Response and Resolution in the Wold of DevopsAtlassian

How HipChat Ships and Recovers Fast with DevOps PracticesAtlassian

Software Delivery at Warp Speed: Five Essential TechniquesAtlassian

SecOps - Bringing Agility into SecurityAtlassian

How Trade Desk Built a Connected Team of 100+ Service AgentsAtlassian

Unleashing Docker with Pipelines in Bitbucket CloudAtlassian

A Day in the Life of a HipChat DeveloperAtlassian

Modern Operations at Scale within Viasat – How to Structure Teams and Build A...Atlassian

Scrum Control or Kanban Agility? You Can Have both, Using MetricsAtlassian

En vedette (20)

A Brave Journey in Merge Waters: How Paysafe Consolidated Their Atlassian Tools

Evolving a Worldwide Customer Operations Center Using Atlassian

Building Trust for Adoption at Enterprise Scale

The Four Principles of Atlassian Performance Tuning

Simplicity at Scale - Growing Teams at Atlassian

Be Prepared for Growth - Confluence at Thales

Scaling IT Operations in a DevOps World

Enterprise Ready - What's New in Data Center

How JIRA Core Helps 300,000 Houses Become Smarter

How Archimedes Uses Atlassian Tools Across All Teams

From Start-up to Grown-up – FlixBus's Journey with Trello + Atlassian

Agile Incident Response and Resolution in the Wold of Devops

How HipChat Ships and Recovers Fast with DevOps Practices

Software Delivery at Warp Speed: Five Essential Techniques

SecOps - Bringing Agility into Security

How Trade Desk Built a Connected Team of 100+ Service Agents

Unleashing Docker with Pipelines in Bitbucket Cloud

A Day in the Life of a HipChat Developer

Modern Operations at Scale within Viasat – How to Structure Teams and Build A...

Scrum Control or Kanban Agility? You Can Have both, Using Metrics

Similaire à How Atlassian Manages Risk and Compliance with JIRA Software and Confluence

Happy & Healthy - Automated Process and System Health Checks for your Atlassi...Cprime

A Roadmap to Enterprise QualityJeff Bramwell

Building the Foundation: Creating a Results Driven Information Architecture S...Tallan

Best Practices for a Successful SharePoint Migration or Upgrade to the CloudPerficient, Inc.

Deeper dive into dashboards video slidesrrice2000

Test Automation for Data Warehouses Patrick Van Renterghem

AUG NYC June 12 - Event PresentationsMadhusudhan Matrubai

Developing a Comprehensive QA Program (Connect 2016) - David A. Miles, Ph.D. (2)David Miles

DataCanvas: Big Data Analytic Flow in CloudLei Fang

Agile Network Chennai 2023 - Leadership behaviours for new age empiricism.pptxJennysWonders

Data Visualization Workshop using TableauRaghu Kalyan Anna

Scaling on Atlassian: Avoiding The Top 5 Pitfalls When Migrating From a Legac...Cprime

Ladies Be Architects - Study Group II: Data Governancegemziebeth

Engaging Agile Teams for Data Governance ProfessionalsJoe McFadden

Lviv PMDay: Юрій Малий Прозорість в роботі команди для керівництваLviv Startup Club

ALM with TFS: From the Drawing Board to the CloudJeremy Likness

Tableau workshop during ICCTAC 2018Raghu Kalyan Anna

Governance - O365 How It's Affected & Where Do I StartStacy Deere

Data Governance: Why, What & HowSenturus

2015 ISACA NACACS - Audit as Controls FactoryNathan Anderson

Similaire à How Atlassian Manages Risk and Compliance with JIRA Software and Confluence (20)

Happy & Healthy - Automated Process and System Health Checks for your Atlassi...

A Roadmap to Enterprise Quality

Building the Foundation: Creating a Results Driven Information Architecture S...

Best Practices for a Successful SharePoint Migration or Upgrade to the Cloud

Deeper dive into dashboards video slides

Test Automation for Data Warehouses

AUG NYC June 12 - Event Presentations

Developing a Comprehensive QA Program (Connect 2016) - David A. Miles, Ph.D. (2)

DataCanvas: Big Data Analytic Flow in Cloud

Agile Network Chennai 2023 - Leadership behaviours for new age empiricism.pptx

Data Visualization Workshop using Tableau

Scaling on Atlassian: Avoiding The Top 5 Pitfalls When Migrating From a Legac...

Ladies Be Architects - Study Group II: Data Governance

Engaging Agile Teams for Data Governance Professionals

Lviv PMDay: Юрій Малий Прозорість в роботі команди для керівництва

ALM with TFS: From the Drawing Board to the Cloud

Tableau workshop during ICCTAC 2018

Governance - O365 How It's Affected & Where Do I Start

Data Governance: Why, What & How

2015 ISACA NACACS - Audit as Controls Factory

Plus de Atlassian

International Women's Day 2020Atlassian

10 emerging trends that will unbreak your workplace in 2020Atlassian

Forge App ShowcaseAtlassian

Let's Build an Editor Macro with Forge UIAtlassian

Meet the Forge RuntimeAtlassian

Forge UI: A New Way to Customize the Atlassian User ExperienceAtlassian

Take Action with Forge TriggersAtlassian

Observability and Troubleshooting in ForgeAtlassian

Trusted by Default: The Forge Security & Privacy ModelAtlassian

Designing Forge UI: A Story of Designing an App UI SystemAtlassian

Forge: Under the HoodAtlassian

Access to User Activities - Activity Platform APIsAtlassian

Design Your Next App with the Atlassian Vendor Sketch PluginAtlassian

Tear Up Your Roadmap and Get Out of the BuildingAtlassian

Nailing Measurement: a Framework for Measuring Metrics that MatterAtlassian

Building Apps With Color Blind Users in MindAtlassian

Creating Inclusive Experiences: Balancing Personality and Accessibility in UX...Atlassian

Beyond Diversity: A Guide to Building Balanced TeamsAtlassian

The Road(map) to Las Vegas - The Story of an Emerging Self-Managed TeamAtlassian

Building Apps With Enterprise in MindAtlassian

Plus de Atlassian (20)

International Women's Day 2020

10 emerging trends that will unbreak your workplace in 2020

Forge App Showcase

Let's Build an Editor Macro with Forge UI

Meet the Forge Runtime

Forge UI: A New Way to Customize the Atlassian User Experience

Take Action with Forge Triggers

Observability and Troubleshooting in Forge

Trusted by Default: The Forge Security & Privacy Model

Designing Forge UI: A Story of Designing an App UI System

Forge: Under the Hood

Access to User Activities - Activity Platform APIs

Design Your Next App with the Atlassian Vendor Sketch Plugin

Tear Up Your Roadmap and Get Out of the Building

Nailing Measurement: a Framework for Measuring Metrics that Matter

Building Apps With Color Blind Users in Mind

Creating Inclusive Experiences: Balancing Personality and Accessibility in UX...

Beyond Diversity: A Guide to Building Balanced Teams

The Road(map) to Las Vegas - The Story of an Emerging Self-Managed Team

Building Apps With Enterprise in Mind

Dernier

The Real-World Challenges of Medical Device Cybersecurity- Mitigating Vulnera...ICS

Diamond Application Development Crafting Solutions with PrecisionSolGuruz

call girls in Vaishali (Ghaziabad) 🔝 >༒8448380779 🔝 genuine Escort Service 🔝✔️✔️Delhi Call girls

Define the academic and professional writing..pdfPearlKirahMaeRagusta1

W01_panagenda_Navigating-the-Future-with-The-Hitchhikers-Guide-to-Notes-and-D...panagenda

How To Troubleshoot Collaboration Apps for the Modern Connected WorkerThousandEyes

Exploring the Best Video Editing App.pdfproinshot.com

Reassessing the Bedrock of Clinical Function Models: An Examination of Large ...harshavardhanraghave

CHEAP Call Girls in Pushp Vihar (-DELHI )🔝 9953056974🔝(=)/CALL GIRLS SERVICE9953056974 Low Rate Call Girls In Saket, Delhi NCR

Shapes for Sharing between Graph Data Spaces - and Epistemic Querying of RDF-...Steffen Staab

Optimizing AI for immediate response in Smart CCTVshikhaohhpro

Direct Style Effect Systems -The Print[A] Example- A Comprehension AidPhilip Schwarz

Microsoft AI Transformation Partner Playbook.pdfWilly Marroquin (WillyDevNET)

AI & Machine Learning Presentation TemplatePresentation.STUDIO

Software Quality Assurance Interview QuestionsArshad QA

Unlocking the Future of AI Agents with Large Language Modelsaagamshah0812

8257 interfacing 2 in microprocessor for btech studentsHimanshiGarg82

Tech Tuesday-Harness the Power of Effective Resource Planning with OnePlan’s ...OnePlan Solutions

call girls in Vaishali (Ghaziabad) 🔝 >༒8448380779 🔝 genuine Escort Service 🔝✔️✔️Delhi Call girls

Learn the Fundamentals of XCUITest Framework_ A Beginner's Guide.pdfkalichargn70th171

Dernier (20)

The Real-World Challenges of Medical Device Cybersecurity- Mitigating Vulnera...

Diamond Application Development Crafting Solutions with Precision

call girls in Vaishali (Ghaziabad) 🔝 >༒8448380779 🔝 genuine Escort Service 🔝✔️✔️

Define the academic and professional writing..pdf

W01_panagenda_Navigating-the-Future-with-The-Hitchhikers-Guide-to-Notes-and-D...

How To Troubleshoot Collaboration Apps for the Modern Connected Worker

Exploring the Best Video Editing App.pdf

Reassessing the Bedrock of Clinical Function Models: An Examination of Large ...

CHEAP Call Girls in Pushp Vihar (-DELHI )🔝 9953056974🔝(=)/CALL GIRLS SERVICE

Shapes for Sharing between Graph Data Spaces - and Epistemic Querying of RDF-...

Optimizing AI for immediate response in Smart CCTV

Direct Style Effect Systems -The Print[A] Example- A Comprehension Aid

Microsoft AI Transformation Partner Playbook.pdf

AI & Machine Learning Presentation Template

Software Quality Assurance Interview Questions

Unlocking the Future of AI Agents with Large Language Models

8257 interfacing 2 in microprocessor for btech students

Tech Tuesday-Harness the Power of Effective Resource Planning with OnePlan’s ...

call girls in Vaishali (Ghaziabad) 🔝 >༒8448380779 🔝 genuine Escort Service 🔝✔️✔️

Learn the Fundamentals of XCUITest Framework_ A Beginner's Guide.pdf

How Atlassian Manages Risk and Compliance with JIRA Software and Confluence

1. How Atlassian Manages Risk and Compliance with JIRA and Confluence GEORGE TOTEV | HEAD OF RISK & COMPLIANCE | ATLASSIAN

2. Is This How You Feel… Before Or After An Audit?

3. Compliance Delivery System Efficient Scalable Low Cost Easy to Use Spreadsheets & Documents Really?! Specialized Tools Unwieldy, $$$ What else is out there? Hmmm….

4. Recipe Ingredients • One Vanilla JIRA • One Vanilla Confluence • Several GRC Experts • Lots of Coffee & Pizza • Mix and stir for about a week • Taste and improve

5. Compliance Objects • Standard • Control Objective • Control Activity • Control Test • Finding • Remediation • …. JIRA + Confluence Issue Workflow Links Dashboards Confluence

6. Lifecycle • Stages • Transitions JIRA + Confluence Issue Workflow Links Dashboards Confluence

7. Links • Within GRC • With Other Projects • With Confluence • With Other Systems JIRA + Confluence Issue Workflow Links Dashboards Confluence

8. Dashboards • Built-in Reports • Dashboards • Confluence JIRA + Confluence Issue Workflow Links Dashboards Confluence

9. Rich Documents • Reports • Narratives • Risks and Controls Matrices • Data-Driven Roadmaps JIRA + Confluence Issue Workflow Links Dashboards Confluence

10. Audit Subtasks in Control Test Linked PBCs Findings in JIRA Linked Remediations Used Cases Risk Risk Issue Type Risk Driver Issue Type Links with Controls Policies Policy in Confluence Policy Lifecycle in JIRA Policy Exceptions in JSD

11. Efficient Scalable Integrated Low Cost Easy

12. Is This How You Feel… Before Or After An Audit?

13. Thank you! GEORGE TOTEV | HEAD OF RISK & COMPLIANCE | ATLASSIAN