Our compliance team has built a validated QMS into our Atlassian products.
This is limiting how other teams use the project management systems- the validation team denies plug-ins (xcel/forms/crm etc) because they need to do a risk assessment on each add-on and provider. If not shut down, things get delayed so long we need to find workarounds anyway.
No only inefficient, but massively frustrating and making it very difficult to foster adoption within the organisation as only technically skilled people are capable of working around the limitations.
option 1: IT has an idea to somehow quarantine the validated areas within the system so they are locked away from the rest of the system and wont be affected by any changes made in the core setting. This is a hard sell. It was explained it to me i dont get it and that means the decision makers wont eith.
Option 2: we opt for a QMS that isn't part of our system (the compliance team will have to revalidate everything - so they wont help us sell this concept to the decision makers.
Option 3: we buy a new space and separate them completely within our cloud - very expensive annual fees as we need to double all our licences.
is there a solution I have missed, or some suggestions from the community on how to solve this issue in a less complex and expansive way?