Marion Lepmets _SoftComply_ Community Champion

Choosing a risk management tool or a platform that fits your methodology is an important and time-consuming task. We hope this comparison will help you. The right risk app for Jira Cloud depends on how your organization assesses risks. A team building its first risk register may prioritize ready-made content and…

Highlights from the Compliance Alliance Lunch Workshop at Team26 Europe, exploring AI governance, sovereign and isolated cloud, and validation for regulated industries. On 8 October, the Compliance Alliance (SoftComply, Izymes and Redmoon Software) organised its 6th Compliance Lunch Workshop during Atlassian Team ’26…

Your procedure is approved. But does it still describe how your team should work? Since its release, you may have changed your development tools, introduced a new supplier or reassigned responsibilities. Findings from a complaint investigation may have highlighted a gap in your processes. Your development team may have…

SoftComply has been helping companies manage their risks in Jira for over 10 years and we believe that risk management works best when it happens where the work is done. Managing risks inside Jira keeps them connected to the people, deadlines and activities that help reduce and determine whether they actually were reduced.…

Highlights from the Compliance Alliance Lunch Workshop at Team26 Europe, exploring AI governance, sovereign and isolated cloud, and validation for regulated industries. On 8 October, the Compliance Alliance (SoftComply, Izymes and Redmoon Software) organised its 6th Compliance Lunch Workshop during Atlassian Team ’26…

Implementing risk management in highly regulated industries isn’t just about passing audits – it’s about creating processes that scale across the business. That was exactly the challenge facing Cobham Satcom, a leading provider of satellite communication solutions for safety-critical industries. Working…

Risk management is a critical part of product development and QA, especially in regulated industries where every feature must meet strict safety and compliance standards. Yet, as teams move faster in agile environments, managing the connection between risk and testing often becomes messy or manual. What if your risk…

What if your next ISO 27001 audit required almost no preparation? That's exactly how Lemuel Valdez, CISO at Cobham Satcom, approaches security. Instead of scrambling to collect evidence before an audit, he builds systems where audit readiness is simply a byproduct of everyday work. "Controls, risk approvals, documents and…

When it comes to managing risks in project management, using Jira for risk management can significantly improve your team's productivity and effectiveness. Risk management involves identifying, assessing, and prioritizing risks to minimize their impact. With Jira's flexible tools and plugins, you can streamline this…

SoftComply was recently invited to join Not Another Webinar and present our Risk Management solution – ideally in a way that didn’t sound like, well… another webinar. So naturally, I ended up talking about sailing. Here’s the video recap of my sailing adventures and how they translate into proactive risk thinking that…

Remember that time you raced for the bus, only to watch it drive away at the last second? Risk is everywhere - even in everyday life. While missing a bus is a personal risk, organizations face more significant risks every day, from data breaches to compliance infractions. That's where SoftComply Risk Manager Plus comes in,…

Vendor risk is no longer a back-office formality. A weak supplier can disrupt your operations, expose customer data, or increase your regulatory risk overnight. Join us for a practical, demo-driven session on March 11 at 4pm CET where we’ll show you how to transform your vendor risk process in Jira and Jira Service…

Introduction Hey there, brave souls navigating the wild seas of cybersecurity! 🌊 If you’ve ever embarked on the treacherous journey of implementing NIST Cybersecurity Risk Management, only to end up with a mountain of spreadsheets and a profound sense of existential dread, you’re not alone. But fret not, for today, we dive…

Welcome to the wondrous world of GRC! Don’t worry, you’re not alone if GRC sounds like a magic spell from “Harry Potter.” For most of us, Governance, Risk, and Compliance (GRC) is one of those terms that sounds important in meetings, like when someone mentions “synergy.” But the truth is, GRC means different things in…

Featuring: Elisa Lo Blanco, QA/RA Manager at Amiko Relevant for: Atlassian Solution Partners, Confluence/Jira administrators, MedTech software teams, and regulated-industry customers evaluating document control solutions When digital health innovator Amiko set out to achieve CE marking under the MDR for its respiratory…

If your risk register lives in a spreadsheet, chances are it’s already failing you - even if it looks fine. It was probably created with great intentions at a project kickoff meeting as something every good project manager should do. It might even get reviewed once a quarter (on a good quarter). And yet, risks don’t get…

If you’re an Atlassian Marketplace app vendor or you’re exploring how to bring AI capabilities like Rovo into your products and services, this article is for you. AI is no longer optional – and neither is compliance. What used to be the domain of a few highly regulated sectors like medical devices, pharma, or aerospace has…

Today, every company faces a constant stream of threats, from ransomware and phishing to third-party vulnerabilities. In response, an increasing number of companies are standardizing their information security management efforts by following frameworks like ISO 27001 or SOC 2. These standards demand a core focus on…

If you’re developing a medical device, you must prove that it’s safe and effective, and that proof lives in your documents: your procedures, design records, risk assessments, and test reports. Managing those documents properly is called “document control”. At first, this might sound like an administrative detail — a few…

Picture this: You have just finished writing your requirements specification and saved it as “Requirements_final.doc” Then come the edits, code reviews, and compliance feedback. Suddenly you’re looking at three files: * “Requirements_final_v2.doc”, * “Requirements_final_really_final.doc”, and *…

Compliance Alliance hosted the 4th Compliance Workshop during Atlassian Team25 Europe in Barcelona. Despite a wild thunderstorm, nearly 30 compliance enthusiasts braved the rain to join the workshop – a session packed with insights on AI in regulated industries, Atlassian Isolated Cloud, Cybersecurity of Marketplace Cloud…

Every company depends on others to survive. From your cloud provider to your payroll processor, your business is connected to a web of vendors. But here’s the reality: over 60% of data breaches originate from third-party vendors. This is why managing your vendor security risks has become more important than ever. Although…

Most companies have informal risk discussions in meetings. You know the type – “What happens if our lead developer leaves?” or “What if this big deal doesn’t close?”. These conversations usually end without any real action plan and you find yourself talking about the same risks over and over again. That’s where ISO 31000…

Project managers know that uncertainty is the enemy of successful delivery. You’ve got potential risks lurking around every corner, assumptions that might prove wrong, current issues demanding attention and dependencies that could slip at any moment. This is where RAID comes in (and no, I’m not talking about the data…

Information security isn’t optional anymore. Whether you’re handling customer data at a startup or managing intellectual property at a global enterprise, a single security incident can cost you financially, damage your reputation and destroy customer trust. That’s where ISO 27001 comes in. It’s the world’s leading standard…

👋 Join the Compliance Alliance (SoftComply, Izymes, Opus Guard, Polymetis Apps and HYCU) for an exclusive one-hour webinar that provides a preview into building secure and compliant cloud solutions for regulated industries. We’ll explore Atlassian Cloud, cybersecurity best practices, compliance challenges, and the role of…

GRC (Governance, Risk and Compliance) isn’t just corporate bureaucracy – it’s your company’s shield against costly surprises. Too many organizations scramble during audits, struggle with scattered risk registers and face regulatory nightmares that could be avoided. Watch the full video above to see exactly how to implement…

Medical device companies face a constant challenge: how do you validate cloud software tools that update daily? If you’re using Confluence Cloud for your quality management system, you need validation documentation that keeps pace with Atlassian’s frequent updates. I’ll walk you through exactly how to automate this process…

Risk reporting isn’t just another checkbox on your compliance list. It’s the backbone of effective risk management that keeps your team informed, your management happy, and your auditors satisfied. When you’re managing risks in Jira, you need clear, current reports that don’t require endless manual updates or screenshot…

Risk reporting isn’t just another checkbox on your compliance list. It’s the backbone of effective risk management that keeps your team informed, your management happy, and your auditors satisfied. When you’re managing risks in Jira, you need clear, current reports that don’t require endless manual updates or screenshot…