access to internal systems

Christos Markoulatos

Hi all my security asks the following question

"The hosting provider/SaaS provider must ensure that access to internal systems and applications of the provider is logged.

Logging should at least cover the last seven days and should include access to account management/system administration systems."

Can someone from Atlassian answer this.

Thanks alot

Charlie Misonne

Hi Christos,

By "internal systems" you do not mean the actual application (Jira) right?

Atlassian has a page about security and compliance, perhaps your security team can find what they're looking for in there? https://www.atlassian.com/trust