Cloud Security- access logs and server hardening

[Andrew Andrew]

Hi- I have 2 questions regarding the security of JIRA using the Atlassian cloud. Is all application access logged (including administrator actions done by system administrators)? And does server hardening/AV updates comprise part of the regular maintenance of the servers that host the cloud service?

Thanks

Andrew Watson

[Nic Brough -Adaptavist-]

By default, no.  But you can enable the audit log to see what your admins have been up to.

For server hardening etc, Atlassian roll out updates quite aggessively on Cloud.  Most Cloud users see the rolling updates for better Atlassian applications, but in the background, yes, AV and security patching is applied to Cloud with a very good frequency compared with some vendors.