Discussions
-
Same report, two checksums. How to prove which version you gave the auditor
Generate the same Jira report twice, a minute apart, from the same filter. Hash both files. You get two different SHA-256 values, and nothing in the report changed. We ran into this while building document control into a Jira export, so we measured it. In the .docx, the only part that differed between the two runs was…
-
Your ISO 27001 evidence is already in Jira. Here's how to hand it to an auditor
If your team logs changes, incidents and corrective actions in Jira, most of the evidence an ISO 27001 auditor asks for already exists. The hard part comes the week before the audit, when someone has to turn hundreds of work items into something an auditor can read, sign and file. This guide covers three things. What the…