How SoftComply and Xray Enable Risk-Based Testing in Jira Cloud
Risk management is a critical part of product development and QA, especially in regulated industries where every feature must meet strict safety and compliance standards. Yet, as teams move faster in agile environments, managing the connection between risk and testing often becomes messy or manual. What if your risk management and testing were seamlessly linked […]
Frictionless Information Security Management in Jira
What if your next ISO 27001 audit required almost no preparation? That’s exactly how Lemuel Valdez, CISO at Cobham Satcom, approaches security. Instead of scrambling to collect evidence before an audit, he builds systems where audit readiness is simply a byproduct of everyday work. “Controls, risk approvals, documents and evidence are linked in a system […]
Best E-Signature Apps for Confluence Cloud (2026 Buyer’s Guide for Regulated Industries)
Not every Confluence e-signature app is designed for regulated industries. This guide explains how to evaluate Atlassian Marketplace apps against 21 CFR Part 11 and choose the right solution for MedTech, pharma, and biotech teams. Looking for an E-Signature App for Confluence? Open the Atlassian Marketplace and search for electronic signatures. You’ll find approval apps. […]
Road to ISO 27001: SoftComply’s Journey
Anyone who’s ever looked at ISO 27001 knows the feeling. You download the standard, start reading… and after a few pages you think: “Okay… but what does this actually mean in practice?” That’s exactly where we found ourselves. At SoftComply, we’re currently working toward ISO 27001 certification — not just because it’s required for Atlassian […]
Navigating Enterprise Trust in Atlassian Cloud
At Atlassian Team26, the Compliance Alliance hosted the 5th Compliance Workshop on May 7th that focused on one of the biggest questions facing regulated industries today: How can organizations adopt AI on Atlassian Cloud without compromising security, governance, compliance, or trust? The workshop brought together Atlassian Marketplace Partners and Solution Partners working with highly regulated […]
Preparing Organizations for Uncertainty and Crisis: Risk Management Lessons from Sailing
On March 19th, SoftComply was invited to join Not Another Webinar and present our Risk Management solution – ideally in a way that didn’t sound like, well… another webinar. So naturally, I ended up talking about sailing. Here’s a short recap of my sailing adventures and how they translate into proactive risk thinking that helps […]
From Missing Buses to Cyber Threats: Why SoftComply Risk Manager Plus Makes Risk Management a Breeze!
Remember that time you raced for the bus, only to watch it drive away at the last second? Risk is everywhere – even in everyday life. While missing a bus is a personal risk, organizations face more significant risks every day, from data breaches to compliance infractions. That’s where SoftComply’s Risk Manager Plus comes in, […]
How to Implement NIST CSF 2.0 Cybersecurity Risk Management in Jira
Introduction Hey there, brave souls navigating the wild seas of cybersecurity! 🌊 If you’ve ever embarked on the treacherous journey of implementing NIST Cybersecurity Risk Management, only to end up with a mountain of spreadsheets and a profound sense of existential dread, you’re not alone. But fret not, for today, we dive into how you […]
How to Build a Living GRC System in Jira and Confluence
Welcome to the wondrous world of GRC! Don’t worry, you’re not alone if GRC sounds like a magic spell from “Harry Potter.” For most of us, Governance, Risk, and Compliance (GRC) is one of those terms that sounds important in meetings, like when someone mentions “synergy.” But the truth is, GRC means different things in […]
Why Your Risk Register Fails and the Jira Fix for It
If your risk register lives in a spreadsheet, chances are it’s already failing you – even if it looks fine. It was probably created with great intentions at a project kickoff meeting as something every good project manager should do. It might even get reviewed once a quarter (on a good quarter). And yet, risks […]
