NIST800/171 CMMC compliance / FEDRAMP

[Ivan Cardenas]

We need to be compliant with NIST800/171 security standards.  FEDRAMP is a stepping stone.  Any ideas?  Hosting JIRA on AWS gov cloud would be fine too.

[Trudy Claspill]

Hello @Ivan Cardenas 

Welcome to the Atlassian community.

Atlassian's Jira Cloud product is not FedRAMP certified at this time, per this article:

https://community.atlassian.com/t5/Trust-Security-articles/Update-Atlassian-s-path-to-FedRAMP/ba-p/2193560

The Jira product would need to be self-hosted. If you hosted it in AWS, the same FedRAMP compliance standards applied to any AWS hosted product would apply.