Does confluence have acceptance/sign off capabilities without using a plug in? For auditing purposes

Question

Does confluence have any tool or system in place without having to integrate an approval plug in etc., that will preform an approval or sign off action that is recorded within confluence for auditing purposes?

For example, we are trying to create a solution with confluence current capabilities - that allows a "risk owner" to accept risk explained and documented by our cyber security team on confluence - and then essentially records the action of the the risk being accepted for auditing purposes.

Jack Brickey · Accepted Answer

Hi @skye.glandon , welcome to the Community.

unfortunately there is not a approval workflow macro OOTB. option you could consider:

* use JSM/JWM to capture approvals of pages
* Use the Status macro to indicate the page lifecycle: DRAFT, IN REVIEW, APPROVED, OBSOLETE. Control who can edit the page and/or trust the team to change status.

marc -Collabello--Phase Locked- · Accepted Answer

Hi @skye.glandon

Confluence Cloud has no built in signature type.

If your needs are simple, you can ask users to leave comment on the page like: "I approve this page, DATE, version 3."

However that may not fulfill your compliance requirements.  This is where the different addons from the marketplace play a role.

We make Document Control for Confluence Cloud, and you can configure it such that users can sign with a click (or with a separate password/code), and you can display an overview of signatures in a page.

Kristian Klima_gtcuat · Accepted Answer

Hello @skye.glandon

In theory, you can use a JIRA workflow. It would not, of course, have an impact on the Confluence doc itself, but it may satisfy auditors if the only thing they require is the PROCESS itself.

* Create a Jira workflow (say - Draft, Reviewed, Rejected, Approved).
* Create a document in Confluence.
* Optional: you can play with permissions I believe, for example, only allow specific people to change status to Approved.
* Create a Jira ticket with a link to the Confluence page (with smart links you can actually embed a page in Jira.
* In the Confluence document, create a link to the JIRA ticket, ideally embedded - this way, the approval status will show up right in the Confluence page.
* Assign to the Ticket to whoever does the review, they'd read the the doc, and change the status of the ticket to Reviewed - they may also put a comment under the Jira ticket.
* Then the Reviewer assigns the ticket to the Approver who, in turn, changes the status to Approved.

Again, it puts no brakes on the document itself, but you'd be able to prove, using JIRA, that every document that is subject to your approval process actually went thru it.

Chances are that this will satisfy the auditors

* you have the process
* you have the trace of the process being adhered to