Contents

Start here

About the ISMS App

Purpose

ISMS with Jira & Confluence is an app for Jira Cloud and Confluence Cloud that sets up a complete Information Security Management System (ISMS) — aligned with standards and frameworks such as ISO 27001, BSI IT-Grundschutz and the GDPR. Instead of building fields, workflows, permissions and document pages by hand, you get a ready-made, coherent structure in a few clicks.

“ISMS team” dashboard: tiles per work area, Statement of Applicability, current/target risk matrix and “Action center”.

What the app sets up

  • One Jira project “ISMS Home” (key ISMS) with 17 issue types — all four domains live inside it: assets & risks, requirements, measures, and audits & nonconformities.
  • 51 predefined fields with ready-made option values plus protection-need and risk logic.
  • 10 ready-made workflows with 32 statuses in total, distributed per issue type.
  • 7 screens with domain-sorted tabs and 30 Jira filters as the basis for lists and reports.
  • A complete Confluence space “ISMS Home” — the ISMS documentation structure and live views from Jira (Installing the Confluence space).
  • 13 automations for routine work (risk calculation, deadlines, reminders) plus 3 reports at the click of a button (Managing automations, Generating reports).
  • Document control for Confluence pages — approvals and read confirmations with an audit-proof log (Using document control).
  • The ISMS Agent — an AI assistant based on Atlassian Rovo (Using the ISMS Agent (Rovo)).

Who it is for

Information security officers (CISO) and security teams, compliance and audit owners, and management. Especially suited to organisations working towards or maintaining an ISO 27001 certification.

One project instead of four

Earlier releases of the app created four separate Jira projects (ISMSANF, ISMSAUN, ISMSMM, ISMSRISK). The current version creates a single project, “ISMS Home”; the four domains live on inside it as issue types. The benefit: no project boundaries between risk, measure, deviation and requirement — everything can be linked and evaluated in one place. Existing legacy installations are left untouched; migration notes are at Language, project type and required entries.

Where your data lives

Screenshots from the development environment with sample data.

Documentation baseline: app version 1.1.15 · 2026-08-20