Screen reference
One page per screen of the side menu: what it is for, who can do what, step by step, known limits.
The side menu of the app has 24 pages. Each page below says what the screen is for, who can do what on it, how to use it step by step, and what it does not do yet. Pages follow the order of the menu.
- HomeAn overview of your compliance posture: where you stand, what is late, and where to click to move forward.
- My workWhat falls to you in the compliance programme: the auditor's requests and vendor assessments.
- Getting startedEleven tasks in three phases to reach the ISO 27001:2022 certification audit ready.
- ReportsThe documents to hand over or keep: printable report, Excel workbook, audit pack and the export of your data.
- FrameworksThe frameworks you work on, and where you stand on each.
- AssessmentThe questionnaire that brings your gaps to light: each becomes a task of the action plan.
- ControlsThe library of common controls: their state, evidence, tests and the risks that rest on them.
- Statement of applicabilityFor each of the 93 Annex A controls: applicable or not, why, and where implementation stands.
- EvidenceAll the evidence in one place: files, references and frozen Jira queries, with their freshness.
- Tests and continuous monitoringDaily measurements, in Jira and in the app, to know whether the controls still hold.
- Context and interested partiesThe ten registers of ISO/IEC 27001:2022 clauses 4 to 10, in the same place as your controls.
- PoliciesThe text in force, the revision in progress, the approval and the acknowledgements of each policy.
- People and trainingWho joined, who left, which trainings are done and which policies remain to accept.
- RisksThe information-security risk register: level before and after treatment, response, controls.
- AssetsThe inventory of information assets, linked to risks, kept up to date, with an owner for each.
- IncidentsSecurity incidents, linked to the assets affected and the risks they call into question.
- VendorsThe register of third parties your services depend on: the risk they carry, the date of their last assessment.
- AI governanceInventory your AI systems, classify them under the AI Act categories and follow their obligations.
- Action planThe tasks born of the assessment, most urgent first, with their Jira tickets, evidence and statuses.
- Access reviewsReview who has access to what in Jira: campaigns, reviewers, decisions and the list of accesses to remove.
- AuditsThe internal audit programme, the findings, the management review and the follow-up of the external audit.
- Audit logWho changed what, and when: a chained history where any modification shows when you verify.
- Audit packEverything an auditor asks for, in a pack you generate whenever you want, and the export of your data.Edition: Advanced
- SettingsWho may edit and approve, continuous monitoring of Jira, and the language of messages. For Jira administrators only.Role: Jira administrator
Was this page helpful?