Trust & Security
Created Dec 2, 2020, Last active today
-
G’day everyone and happy 2022! My name is Filiberto Selvas and I’m a Principal Product Manager focused on data management and compliance in highly regulated industries ! At Atlassian, we unde...
-
Overview System and Organization Controls (SOC) Reports are independent third-party examination reports that provide detailed information and assurance about controls in place at service organizati...
-
After the discovery of the vulnerability of version 1.2.17 of Log4j when is Atlassian intending to add the latest version of Log4j as part of the standard on premise installation?
-
On December 9, Atlassian became aware of the vulnerability CVE-2021-44228 - Log4j. Impact on Cloud Products This vulnerability has been mitigated for all Atlassian cloud products previously ...
-
...hat conducts an ongoing vulnerability assessment of our publicly available Applications and Services, the program is available at: https://bugcrowd.com/atlassian. To learn more about our results v...
-
hi, since the official statement about log4j is pretty brief (not to say lame), i'm looking for answers here. The vulnerability has been disclosed 4 days ago and still Confluence does not give any up...
-
Atlassian’s 2020 reporting consisted of 8 SOC 2 reports individually attesting compliance for our cloud products. With each weighing-in at ~90 pages, we saw duplication of content, effort, inconsiste...
-
Hello everyone, How you guys are mitigating Security Vulnerability CVE-2021-42574? I am still unable to understand the risk, impact and mitigation done by Atlassian. Is there any other workaround th...
-
Hey there! If you’re looking for more tips and best practices for protecting your data and using Atlassian products securely and you’re part of the public sector, check out the Atlassian G...
-
Hello! We know that security and data management are top priorities for you, so they remain a top priority for us. We’ve heard from many of you that BYOK (bring your own key) encryption is an importa...
-
Icarus Labs is Atlassian's experimental security research team. It’s inspired by research groups like Google's Project Zero and Facebook’s Red Team X (which research new vulnerabilities), but for any...
-
Atlassian Cloud 製品の管理者が 事業継続計画 (BCP; business continuity planning) を立案するときに役立つ情報を紹介します。 ■ 前提知識 システムにより担保されている回復性は アトラシアンによる顧客データの管理 をご参照ください。以降、本稿では各製品の管理者が行えるアクションを紹介します。 &n...
-
What are Standard Contractual Clauses (SCCs)? OnJun 4, 2021, an updated version of the Standard Contractual Clauses (or SCCs) was published by lawmakers in the European Union (EU) and they gave...
-
Atlassian primarily relies on our Atlassian Bug Bounty Program and our own internal testing by our Security Engineers to test and identify security issues or vulnerabilities ...
-
We’re excited to announce that Trello has successfully completed their annual FedRAMP security assessment. For those not aware, Trello is now on its second year of having FedRAMP Tailored authorizati...
-
Hi, Last year there was a security program where 73 questions had to be answered through Whistic and a green-yellow-red rating could be obtained. Will this program be continued?
-
Hi, Recently regulators in the EU and US have become more active in trying to prevent fake reviews in marketplaces. For example see https://www.theregister.com/2021/10/14/fake_reviews_ftc/ . The ...
-
Hello. A user of the Atlassian platform uses it to send spam with blackmail and extortion. This user's address is: jira@trans-l3eerf55.atlassian.net Смогут ли руководители Atlassian сотрудничать с...
-
Atlassian maintains submissions to the Cloud Security Alliance (CSA) STAR Registry for our major Cloud Services. The STAR Registry hosts the Consensus Assessment Initiative Questionnaire (CAIQ), whic...
-
...uestions: What are your tried-and-true security measures or best practices? What are the absolute must-haves / minimum requirement? What is your wishlist security initiative to accomplish? What w...
-
What's the best way to get "pushed" security related announcements from Atlassian? Other vendors have mailing lists you can subscribe to or RSS feeds. Atlassian has a security announcements pa...
-
We have re-certified for Payment Card Industries (PCI) for all of our major products. Specifically, we achieved certification for Jira, Confluence, Bitbucket, Trello, Statuspage, Opsgenie, Ha...
-
We maintain an always on bug bounty to identify and triage issues in our products and services. Many customers ask us for ‘penetration reports’ or similar - basically a report from a third-party that...
-
Hi there! Where can I find following info please: Is data encrypted on Jira Cloud? Is encryption done by keys dedicated to the customer? Thank you!
-
As we highlight each quarter, we maintain an always-on bug bounty to identify and triage security vulnerabilities in our products and services. Many customers ask us for ‘penetration reports’ or simi...
Description
The Trust & Security community group is Atlassian's go-to space for all things Security, Compliance, Privacy and more. This group is to share information, tips, and best practices for protecting your data and using Atlassian products in a secure and reliable way.
Copied to clipboard