Micah Spieler

Stephanie Lorraine

Micah

Learn how to configure evidence collection integrations

Integrations Guidance

Programmatically post evidence and upload files to Strike Graph using our secure REST API

Evidence API

Use pre-built or custom scripts to collect evidence directly from your cloud environments

Script Runner for Integrations

Tips, tricks, and help with using integrations for evidence collection

General Integration Guides

Increase efficiency by establishing automated collection for routine evidence gathering.

Automated Evidence Collection

More than half of a typical SOC 2 customer’s evidence items can be automatically collected from one of our available integrations

Logical evidence candidates for Automated Collection

Pro tip: organize your security policies for easy, transparent compliance and automated collection.

Organizing your policies and procedures

Supported file types and size limit for evidence attachments

Best practices for keeping policy evidence current in Strike Graph using automated collection

Managing Compliance Policies and Signatures in Google Workspace and Microsoft 365

Monitoring Strike Graph Activity with Microsoft Sentinel

Learn how to use Security Assistant's new AI feature to help with advanced integration setup and evidence collection

Security Assistant for Integrations

Instructions for configuring and using specific Advanced Integrations

Advanced Integrations

Learn about our flexible low-code integration type that collects evidence from common cloud platforms and services

Terraform Integrations

Collect evidence from AWS using Script Runner or Terraform data blocks

AWS Integration - Script Runner and Terraform

Integrate with Azure Resource Manager to collect evidence from your Azure cloud systems

Azure Resource Manager Integration - Script Runner and Terraform

Use Terraform to collect evidence of your Application Firewall

Terraform data blocks for Application Firewall

Collect evidence from Azure Active Directory using Script Runner or Terraform data blocks

Azure AD Integration - Script Runner and Terraform

Automatically discover and configure evidence collection from your AWS infrastructure

Using Quick Start with the Terraform for AWS integration

Use these common data sources to automate evidence collection

Common Terraform for AWS Data Sources

Collect evidence from Azure DevOps using Script Runner or Terraform data blocks

Azure DevOps Integration - Script Runner and Terraform

Collect evidence from GitHub using Script Runner or Terraform data blocks, with PAT or GitHub App authentication

GitHub Integration - Script Runner and Terraform

Use this integration to evidence from your Google Cloud Platform (GCP) environment

Google Cloud Platform (GCP) Integration - Script Runner and Terraform

Use these ready-made templates to collect evidence from your GCP environment using Advanced Mode

Advanced Terraform Templates for Google Cloud Platform

Use this integration to collect evidence from HTTP endpoints

Terraform for HTTP

Collect evidence from GitLab using Script Runner or Terraform data blocks

GitLab Integration - Script Runner and Terraform

Use Terraform to collect evidence for admin access to Application, Database, or Network

Terraform data blocks for Administrator Access evidence

Use this integration to collect evidence from your DigitalOcean cloud infrastructure

Terraform for DigitalOcean

Use this integration to collect evidence from your Oracle Cloud Infrastructure (OCI) environment

Terraform for Oracle Cloud

Learn about our flexible API-driven style of integrations

Bridge Integrations

Learn how to collect evidence from ClickUp using Strike Graph's flexible Bridge integration

ClickUp Integration

Connect with ServiceNow to collect compliance evidence directly from your instance

ServiceNow Integration

Learn about our flexible API-driven integration type that collects evidence from external services through their APIs

Learn how to collect evidence from Slack using Strike Graph's flexible Bridge integration

Slack Integration

Learn how to collect evidence from KnowBe4 using Strike Graph's flexible Bridge integration

KnowBe4 Integration

Learn how to collect evidence from Okta using Strike Graph's flexible Bridge integration

Okta Integration

Learn how to collect evidence from Zoho products using Strike Graph's Bridge integration

Zoho Integration

Other Integrations

Connect your HR platform to collect employee information as evidence

Human Resource (HRIS) Integrations

Collect any file from Microsoft's online suite of Office applications with our O365 integration.

Microsoft Office 365 + Sharepoint Integration

Collect Jira issues, saved-filter populations, and system overviews as evidence

Jira Cloud

Highly scalable storage system offered by Amazon Web Services.

AWS S3

Connect your cloud storage to collect any file from Google's file storage platform as evidence

Google Drive Integration

Collect pages from Confluence as evidence

Confluence Cloud

Get started with the basics of the Strike Graph platform

Welcome to Strike Graph

How to add your teammates to the Strike Graph platform

Add users and invite teammates

Getting started with Strike Graph

Introductory overview of key compliance terms and getting started with Strike Graph

Getting started with Strike Graph video demonstration

Cayla Marshall

Laurel True-McCarthy

Elliott Harnagel

Learn how to navigate and leverage the Strike Graph platform

Strike Graph Basics

Risk Management Guide

A handful of custom risks can be added to the risk assessment to meet HIPAA requirements

Adding HIPAA risks to the Risk Management module

Learn your responsibilities as a risk owner

Risk ownership and scoring

Learn the basic principles of a risk assessment and how to manage one within the Strike Graph platform

Risk assessment basics

Choose how Strike Graph combines likelihood and impact into a risk score, and tailor the ratings, ranges, and colors to your organization

Risk scoring methodologies and custom risk scales

Glossary of security compliance terms

Create custom controls and evidence items, and link them to active criteria

Create custom controls and evidence items

Manage effective dates and expiration dates of items within the Evidence Repository

Update and manage evidence effective dates and expiration dates (FAQ)

How to access policy templates and best practices for customizing policies to your business

Access and utilize Strike Graph policy templates

Use the Audit Export feature for hand-off to an auditor or for your own records

Export your audit package

Understand how control statuses influence your framework coverage

Criteria marked as "Needs Attention" on the framework tree

How to deactivate controls and evidence items, and when it is appropriate to do so.

How to Deactivate Controls and Evidence Items

Create a project task list and link them to relevant items in your compliance program

Action Items (POAMs)

This article is your reference for all Strike Graph releases. Each update includes a summary of new features, enhancements, and fixes, organized chronologically from most recent to oldest. We update the product every 2 weeks.

Strike Graph Product Updates

User Management Guide

How to reset your Strike Graph password from the login page, and what to do if you use SSO

How to change my password

Understand what each role can do, and change a user's role in your workspace

User roles and permissions

Remember to offboard a user after they leave your organization

Remove or deactivate a user

Manage Strike Graph access and roles directly from your identity provider

SCIM provisioning for SSO

Set up SSO for your organization so your team can log in to Strike Graph with their existing company credentials

Single Sign-On (SSO) with SAML

Add an extra layer of security to your Strike Graph login with multi-factor authentication

Multi-Factor Authentication (MFA)

Control Library Guide

Customize control descriptions to align with your current business processes

Control descriptions

Guidance for assigning control progress flags and reasons to keep your control progress up-to-date

Control progress

Learn about control frequency and it differs from an evidence item's expiration schedule

Control frequency

Learn about why control owners and performers are not necessarily the same

Control owners vs. control performers

Learn your responsibilities as a control owner

Control ownership

Evidence Repository Guide

There are multiple ways to upload files to Strike Graph, but be aware of some limitations

How to successfully upload files

Vulnerability Assessments

There are two types of Information Security processes that assess vulnerabilities

Penetration tests vs. vulnerability scans

How to schedule your organization's Strike Graph pen test and answers to FAQs

Penetration test scheduling and FAQs

How to respond to and provide appropriate evidence regarding your penetration test results

Penetration test results

Key considerations to ensure that your organization pursues the appropriate penetration test and meets your specific objectives.

Penetration Test Scope Determination Guide

Information about other Strike Graph features

Additional Features

Upload your own framework and manage any compliance outcomes in your GRC

Custom Frameworks

Keep track of your Software Bill of Materials and scan for vulnerabilities

SBOM Manager

Learn about Security Questionnaires, Security Reports, and more

Trust Assets

Share your compliance documentation with the right people

Trust Center

Best practices for publishing and managing compliance content across your organization

Enterprise Content Management

Bugs happen! Tips on how to file a bug report

Filing a Bug Report

Track comments in your compliance instance in one central location

Comment Activity

Update multiple risks, controls, and evidence items at once with bulk editing

Bulk Editing

Provide insights into the evolution of risks, controls, or evidence items, including capturing decisions made along the way

Comments & Mentions

Specific input is needed from non-IT staff in IT compliance initiatives

Build your IT compliance dream team

Your compliance home base — see where your program stands and what needs your attention, tailored to your role

Compliance Dashboard

Use the Monitoring Dashboard to see evidence health, control status, and risk exposure in one place

Monitoring Dashboard

View detailed presentations that outline key features of the platform and compliance journey  

Video Demonstrations

Visual demonstration of how to easily navigate Strike Graph's Risk Management feature

Risk Management Video Demonstration

Visual demonstration of how to utilize the Vendor Risk Register template

Vendor Risk Register Video Demonstration

A visual demonstration of how to utilize the Asset Inventory template

Asset Inventory Video Demonstration

Visual demonstration of how to easily customize and navigate your Strike Graph control library

Control Library Video Demonstration

Visual demonstration of how to easily utilize and navigate your Strike Graph Evidence Repository

Evidence Repository Video Demonstration

A visual demonstration of how to utilize the ISMS Statement of Applicability template

ISMS Statement of Applicability Video Demonstration

Visual demonstration of how to easily customize and navigate your Strike Graph Control Library

A visual demonstration of how to utilize the System Description template