How can I use JIRA to assign impact assessments to a team?

Question

This is the use case that I am facing and trying to figure out a way to use JIRA for it.  A vulnerability is released on the internet.  I need to poll our product experts to see if we are affected by this vulnerability.  I need to be able to also see the progress of the team's validation of the vulnerability in the products and be able to set a due date.

Daniel Swann · Answer

Thanks Mark.  I will look into those options.

Mark Segall · Answer

Hi @Daniel Swann and welcome to the community!

Let me start by saying you could go any number of ways with this so take my opinion as just one possibility:

* New project for capturing vulnerabilities (maybe a new vulnerability issue type as well depending upon what type of information you want to capture)
* Have subtasks on each vulnerability that are assigned to each "product expert". They could, in turn link any tasks they need to assign to their individual dev teams to the subtask for complete traceability on how vulnerability validation is coming along