Is anyone using Confluence for managing security policies and standards?

[Frank Cortes]

Would like to know if anyone is using Confluence to manage the lifecycle of security governance documents, approval, renewal, and retirement. Is it use for proof during audits like SOC2 or PCI?

[Levente Szabo _Midori_ · Accepted solution]

@Frank Cortes the solution you should consider is Better Content Archiving and Analytics, a Confluence content lifecycle management tool widely used by enterprise customers (many in regulated industries).

Here is a "manifesto" about how we think Confluence content lifecycle management should work. The key differentiator is that it applies automation at scale for:

1. Automatically refreshing page statuses - Manual updates are possible but not required if you have tens of thousands of pages

2. Notification emails - Content owners and subject matter experts are automatically notified based on your preset rules, with your custom email, calling them to review, confirm, approve or otherwise update status

3. Automatic archiving/deletion - At preset intervals or by manual action content is archived or disposed of complying with company or regulatory rules

Additionally, Better Content Archiving and Analytics brings you Confluence usage stats, user analytics, and dashboards on any tier, not just Premium.
You can stay on Standard and enjoy many capabilities (automation, bulk-archiving, analytics) that would otherwise require you to upgrade to Confluence Premium. Check out this calculation of license fee savings.

Feel free to start a free trial, read more and reach out to me for a demo and discussion about your use case.

(I'm part of the team at Midori developing Better Content Archiving and Analytics since 2008.)

[Frank Cortes]

Thanks for the information and will look at your suggestions.

[marc -Collabello--Phase Locked- · Accepted solution]

Hi @Frank Cortes ,

We make Document Control for Confluence, which allows you to assign reviewers, lock and sign documents in Confluence.  Some of our customers use this to manage documents for audits including in pharma, banking, aerospace and other sectors.  Feel free to ask us for help.

[Frank Cortes]

Thanks for the update.

What is the cost of this add-on?

[marc -Collabello--Phase Locked-]

It's free for up to 10 users, and then depends on the user count, you can see the pricing here: https://marketplace.atlassian.com/apps/1217765?tab=pricing&hosting=cloud

[Frank Cortes]

Thanks for the quick reply.

What is considered a user? 

[marc -Collabello--Phase Locked-]

A user is a Confluence user.  Currently all addons for Confluence are priced per Confluence user.  So if you have 100 Confluence users, you'd need to pay for 100 addon users.  This pricing model is determined by Atlassian.

[Hubert Kut · Accepted solution]

Hi @Frank Cortes ,

Yes, at CrossALM GmbH, we have successfully implemented document lifecycle management in the medical sector in Germany, including the migration of documents from SAP and other systems. If you'd like to learn more or discuss your specific needs, feel free to reach out to us.

Best regards,
Hubert

[Frank Cortes]

Yes I am interested on seeing how you accomplished the task. 

Where in Germany are you located, I lived in Germany for 17 Years.

[Hubert Kut]

Berlin 🙂

[Frank Cortes · Accepted solution]

Was stationed there when the wall came down.  

Do you have any documentation on how to convert confluence into a document management system?  Would definitely be interested in anything you can provide or suggestion that you can assist with. 

[Hubert Kut]

I think I do not have any documents that I can provide without NDA etc. 
The overall concept is to have digital signature and app to create approvals like Comala Document management +  simple reporting like statusview for confluence. 
Also we have Jira+Qtest+Vera to have another layer of document approvals.

[Frank Cortes]

Thanks for the information I will research the options that you have included to see how it would work. 

[Chris Cairns - Digital Rose]

Hi @Frank Cortes 

eSign Document Management & Training is an alternate Confluence app designed to implement a QSM solution for GxP and CFR Part 11 environments.   It supports electronic signatures and custom document control life cycles.  It also includes document publishing and staff initial/recurring training without having to buy any addons.   

Free to try and free forever for small teams (<10)

PM me or contact support@esign-app.com if you have any questions.

Regards,

Chris Cairns
Digital Rose