This is the second instalment on how Atlassian manages our risks and compliance obligations using Jira.
In Part 1 we created the issue types and the custom fields - now we need to create the workflows and the screen transitions.
We really tried to keep the workflows simple for all the issuetypes. The reason was that we often found ourselves clicking through workflow as a way of evidencing that work had been done - when the actual work had happened in a meeting with the business teams. If you need to add steps to evidence approval then put them in - but consider using comments as a way to make that easier on yourselves.
We tried to keep the information requested at each of the transitions really simple. We also made most of it non mandatory - the reason was that we wanted to get people using the system and capturing information - we then reported on the missing data and used that as an excuse to go and talk to people about their risks and controls.
|GRC_Control Activity Workflow||Activate||GRC_Control Activity Activate Screen||Summary|
|GRC_Control Effective Date|
|GRC_Control Test Workflow||Verified||GRC Control Test Verified Screen||Summary|
|GRC_Control Workflow||Activate||GRC Control Activate Screen||Summary|
|GRC_Exception Workflow||Approved||GRC Exception Approve Screen||Compensating Control|
|GRC_Policy Workflow||Approve||GRC Policy Approve Screen||Assignee|
|GRC_Risk Workflow||Active||RM Risk Active Transition Screen||Required Fields|
We will be sharing information on the control objectives that we have and how we went about building them - we have really enjoyed the risk and compliance journey so far and want to share our travel stories.
We hope you enjoyed this piece and would love to hear your risk and compliance stories as well.
Scaling an agile organization and setting it up for success over the long term is a hard thing to do. We hear a common set of questions from customers all the time, questions like: Can agile scal...
Connect with like-minded Atlassian users at free events near you!Find an event
Connect with like-minded Atlassian users at free events near you!
Unfortunately there are no Community Events near you at the moment.Host an event
You're one step closer to meeting fellow Atlassian users at your local event. Learn more about Community Events