With our Confluence Cloud integration, you can select Confluence pages as evidence directly from your Atlassian account. Pointing this integration to the pages in your wiki where you document policies, procedures, or other compliance-related items can help you increase efficiency (one less step in collecting evidence), data security (no need to download sensitive files onto your desktop first), and reduce clutter (collect directly from the single source of truth).

Types of evidence might collect from Confluence Cloud

Many organizations use documentation software like Confluence to house their InfoSec policies, system procedures, and other documentation related to their security controls.

• Data Management policy

• Patch Management procedure

• Secure password requirements

Follow the instructions on this page to get started collecting evidence from Confluence Cloud.

Step 1: Configure the integration

This integration connects directly with your Confluence Cloud/Atlassian account and each user who would like to collect evidence using Confluence Cloud will need to configure the integration for themselves.

1. Go to the Integrations Manager and click on the Confluence Cloud card to access the integration configurations. Note: If you do not see Integrations Manager in your main navigation, you may not have access to this feature. Please contact your customer success manager for more information.

2. Click on the "+ Connect " button. You will be redirected to Atlassian to Authorize the integration, which may require you to log into your Atlassian account to continue.

3. Click on the "Accept" button to approve the authorization request. You will be redirected back to the Integrations Manager.

If your configuration was successful, you should see your account listed in the Confluence Cloud integration card.

Step 2: Using Confluence Cloud to attach evidence

Once you have activated a Confluence Cloud integration for your account, you can use it to attached pages directly from Confluence to your evidence items.

1. Open the evidence where you want to attach a file

2. Click on the "Add Attachment" button to open the attachment modal

3. In the attachment modal, select the integrations tab and then select your Confluence Cloud integration from the list

4. Type in the title of the page you want to select (or similar keywords) and click "Search"

5. Select the desired page from the search results or perform another search

6. Click "Attach" – Note: it may take a minute while the integration fetches the details from Confluence.

Notes about Confluence Cloud attachments:

• Pages attached from Confluence will be converted into PDFs. Styling and formatting may change slightly in the process. At this time, images are not included directly in the PDFs, however absolute links to those images in your Confluence space are available.

Removing your Confluence Cloud integration

You can remove the integration at any time. Please note that removing an integration does not delete any files that were attached used during that integration. Removing an integration may also disrupt automated collection.

To remove:

1. Go to the Integrations Manager and click on the Confluence Cloud card to access the integration configurations.

2. Click the "Deactivate" button next to your user name.

Note: You may have access to remove integrations for other users on your team.

Using Confluence with Automated Collection

With Automated Collection, Strike Graph can recollect evidence attachments from Jira a few days before expiration so that your evidence remains in an effective 'audit ready' state. More information is available here about configuring Automated Collection for your evidence.

Troubleshooting

Integration requirements

To use the Confluence integration, you must have an Atlassian account and access to Confluence. You may also need permissions to install or authorize Apps on behalf of your Confluence administrator.

Multiple Confluence sites

At this time, the Confluence Cloud integration can only be connected to one Confluence site at a time. To connect with a different site, you will need to deactivate your integration and reconfigure it. Please note: Deactivating your integration will disable any automated evidence collection that may be utilizing this integration.