With our Jira Cloud integration, you can attach Jira issues (sometimes referred to as tickets) as evidence directly from your Atlassian account. Using the integration to collect tickets as evidence helps increase efficiency (one less step in collecting evidence), data security (no need to download sensitive files onto your desktop first), and reduce clutter (collect directly from the single source of truth).
Types of evidence might collect from Jira Cloud
Many organizations use project management software like Jira to keep track of change management and access management related security controls.
Access log reviews
Change management adherence
Security or other system reviews
Follow the instructions on this page to get started collecting evidence from Jira Cloud.
Step 1: Configure the integration
This integration connects directly with your Jira Cloud/Atlassian account and each user who would like to collect evidence using Jira Cloud will need to configure the integration for themselves.
Go to the Integrations Manager and click on the Jira Cloud card to access the integration configurations. Note: If you do not see Integrations Manager in your main navigation, you may not have access to this feature. Please contact your customer success manager for more information.
Click on the "+ Connect " button. You will be redirected to Atlassian to Authorize the integration, which may require you to log into your Atlassian account to continue.
Click on the "Accept" button to approve the authorization request. You will be redirected back to the Integrations Manager.
If your configuration was successful, you should see your account listed in the Jira Cloud integration card.
Each user within your organization who would like to use the Jira integration to collect evidence will need to authorize access from the Integrations Manager screen.
Step 2: Using Jira Cloud to attach issues/tickets to evidence
Using an Issue ID / Key
If you know exactly which issue from Jira you would like to collect, using the issue ID is the most straightforward method. Once you have activated a Jira Cloud integration for your account, you can use it to attached issues directly from your Jira Cloud to your evidence items.
Open the evidence where you want to attach a file
Click on the "Add Attachment" button to open the attachment modal
In the attachment modal, select the integrations tab and then select your Jira Cloud integration from the list
Make sure that 'Issue Key' is selected from the dropdown and then paste in the issue ID (usually the the project abbreviation + a numerical ID value, for example "XY-1234") into the text field.
Click "Attach" – Note: it may take a minute while the integration fetches the details from Jira.
Using a JQL statement
If you want to dynamically collect issues from Jira, using a JQL (or Jira Query Language) statement allows you more flexibility. This option will collect the first issue returned from the JQL. This is ideal for selecting the most recent issue that meets a certain criteria, and can be paired with automated collection for streamlined evidence collection.
Open the evidence where you want to attach a file
Click on the "Add Attachment" button to open the attachment modal
In the attachment modal, select the integrations tab and then select your Jira Cloud integration from the list
Make sure that 'JQL' is selected from the dropdown and then paste in the JQL that you would like to use as a selection criteria into the text field
Click "Attach" – Note: it may take a minute while the integration fetches the details from Jira.
Notes about Jira Cloud attachments
Issues attached from the Jira Cloud integration will be attached as text files in JSON format. They are lightly formatted to be more more human readable by removing minor unnecessary data elements.
Removing your Jira Cloud integration
You can remove the integration at any time. Please note that removing an integration does not delete any files that were attached used during that integration. Removing an integration may also disrupt automated collection.
To remove:
Go to the Integrations Manager and click on the Jira Cloud card to access the integration configurations.
Click the "Deactivate" button next to your user name.
Note: You may have access to remove integrations for other users on your team.
Using Jira with Automated Collection
With Automated Collection, Strike Graph can recollect evidence attachments from Jira a few days before expiration so that your evidence remains in an effective 'audit ready' state. More information is available here about configuring Automated Collection for your evidence.
This is best paired with the JQL method described above, as it provides more dynamic selection criteria for the automated collection. Two quick examples:
resolution = Done ORDER BY resolved DESC– a JQL like this will select the most recent resolved issue based on resolution date.project = SG AND resolution = Done AND labels = SOC-2 ORDER BY resolved DESC– a JQL like this will select the most recent resolved issue from a specific project that also has a 'SOC-2' label based on resolution date.
Troubleshooting
Integration requirements
To use the Jira integration, you must have an Atlassian account and access to Jira. You may also need permissions to install or authorize Apps on behalf of your Jira administrator.
400 Unable to get resource from Jira API error
This error likely means that your currently configured integration does not have the appropriate permission scopes to get the resource you attempted to collect. This happens most often when trying to use an integration configured before October, 2023 to collect attachments using the JQL method.
To resolve this issue, simply navigate to the Integration Manager, locate your Jira integration, and push the "reconnect" button. This will take you through the authentication workflow again and refresh your configuration with the appropriate scopes.