How to Implement NIST CSF 2.0 Cybersecurity Risk Management in Jira

Introduction Hey there, brave souls navigating the wild seas of cybersecurity! 🌊 If you’ve ever embarked on the treacherous journey of implementing NIST Cybersecurity Risk Management, only to end up with a mountain of spreadsheets and a profound sense of existential dread, you’re not alone. But fret not, for today, we dive into how you […]

How to Build a Living GRC System in Jira and Confluence

Welcome to the wondrous world of GRC! Don’t worry, you’re not alone if GRC sounds like a magic spell from “Harry Potter.” For most of us, Governance, Risk, and Compliance (GRC) is one of those terms that sounds important in meetings, like when someone mentions “synergy.” But the truth is, GRC means different things in […]

7 Key Tips for AI Tool Developers in Regulated Industries

If you’re an Atlassian Marketplace app vendor or you’re exploring how to bring AI capabilities like Rovo into your products and services, this article is for you. AI is no longer optional – and neither is compliance. What used to be the domain of a few highly regulated sectors like medical devices, pharma, or aerospace […]

Stop Juggling Spreadsheets! Build Your ISO 27001 or SOC 2 ISMS Right Inside Jira and Confluence

Is your organization struggling to keep up with crucial information security (InfoSec) management requirements? Today, every company faces a constant stream of threats, from ransomware and phishing to third-party vulnerabilities. In response, an increasing number of companies are standardizing their InfoSec efforts by following frameworks like ISO 27001 or SOC 2. These standards demand a […]

Why Document Control Can Make or Break Your Regulated Business (and how SoftComply can help)

Picture this: You have just finished writing your requirements specification and saved it as “Requirements_final.doc” Then come the edits, code reviews, and compliance feedback. Suddenly you’re looking at three files: “Requirements_final_v2.doc”, “Requirements_final_really_final.doc”, and “Requirements_fixed_final.doc”. Which one’s actually the final one? You send one to the team, but they build from another. Suddenly, the project’s out […]

Inside the 4th Compliance Alliance Workshop: Building Trust and Compliance on Atlassian Cloud

During Atlassian Team25 Europe, the Compliance Alliance hosted the 4th Compliance Workshop in Barcelona. Despite a wild thunderstorm, nearly 30 compliance enthusiasts braved the rain to join the workshop – a session packed with insights on AI in regulated industries, Atlassian Isolated Cloud, Cybersecurity of Marketplace Cloud apps, and selling must-have compliance solutions to Atlassian […]

How to Manage Organizational Risks with ISO 31000 in Jira

Most companies have informal risk discussions in meetings. You know the type – “What happens if our lead developer leaves?” or “What if this big deal doesn’t close?”. These conversations usually end without any real action plan and you find yourself talking about the same risks over and over again.  That’s where ISO 31000 comes […]

5 Steps to Implement ISO 27001 ISMS in Jira

Information security isn’t optional anymore. Whether you’re handling customer data at a startup or managing intellectual property at a global enterprise, a single security incident can cost you financially, damage your reputation and destroy customer trust. That’s where ISO 27001 comes in. It’s the world’s leading standard for information security management systems (ISMS) and it […]