FY23 ISO/IEC 27001 Certifications Update

[#1]

January 4th 2023

Overview

The International Organization for Standardization (ISO) is an independent, non-governmental international organization with a membership of 167 national standards bodies. ISO brings together experts to share knowledge and develop voluntary, consensus-based, market relevant International Standards that support innovation and provide solutions to global challenges.

Atlassian has implemented and is certified with the below ISO standards:

• ISO/IEC 27001 outlines and provides requirements for an information security management system (ISMS).

• ISO/IEC 27002 gives guidelines regarding the management of controls taking into consideration in the organization's information security risk environment

• ISO/IEC 27018 is focused on the protection of personally identifiable information (PII) and also supports compliance with GDPR.

What Atlassian Products have ISO Reports?

Atlassian is proud to announce we have received ISO/IEC 27001:2013 certification renewals for:

• Jira Cloud

• Confluence Cloud

• Bitbucket Cloud

• Trello

• Statuspage

• Opsgenie

• Jira Align

• Jira Service Management.

• Halp

• Compass

• Forge

• Data Lake

• Insight

• Bitbucket Pipelines

In addition, we have obtained certification for the following this audit cycle:

• Atlassian Access

• Atlas

• Atlassian Analytics

• Jira Product Discovery

• Jira Work Management

The Atlassian Trust Management System supporting the operations underlying these cloud offerings are governed by the implemented controls in accordance with the organizational Statement of Applicability, which further extends to the additional controls defined within ISO/IEC 27018:2019. The Statement of Applicability (SoA) is available upon request via support.

You can download this certificate from our Compliance Page: Compliance at Atlassian | Atlassian.

How long is the Atlassian ISO report valid?

The certificate was issued in November 28th, 2022 and expires on January 21st 2025.

[Stuart Capel - London]

Congratulations! Having gone through ISO audits myself I can relate to him much work would have been involved @Kaito Lee well done to you and the team.

[Meli _SW_]

Is there plans for ISO 27001: 2022 recertification after Jan 2025?