Threat Manager for Jira Documentation

Group 1-4.png
Group 2.png
Group 3.png

Overview

Threat Manager for Jira is a Governance, Risk and Compliance (GRC) solution designed to streamline compliance efforts in Jira Cloud, and enhance the security of your organization by automatically performing malware scans on all file attachments uploaded to Jira. Our AI agent The malware scanner provides real-time detection of malicious content, instant alerts, and detailed audit logs to help your organization maintain compliance and protect sensitive data. The plugin integrates seamlessly into your existing Jira workflows, ensuring that security becomes a natural part of your team's daily operations.

Features

1. Compliance Settings

• Select the compliance standards that matter most to your organization.

• Choose the key elements of your response playbook for the Agent.

• Configure your malware scanner settings.

2. Playbook Settings

• Maintain complete visibility over every file scanned with audit logs.

• Each log entry records information such as the file name, upload date, user, scan results, and actions taken.

3. Real-Time Malware Scanning

  • Automatic Scans: When a user uploads a file to a Jira issue, the plugin immediately scans the file for known malware, viruses, and other malicious content.

  • Threat Detection: If the plugin detects any malicious content, it takes predefined actions based on your configuration (e.g., deleting the file and/or notifying the user).

  • Scan Results: Users receive instant feedback on whether the file is safe or has been deleted due to detected threats.

4. Audit Logs

  • Comprehensive Logging: Every scan is logged, capturing important details such as the file name, user who uploaded the file, scan date and time, scan result (healthy or infected), and the action taken.

  • Accessing Logs: Administrators can access these logs directly within Jira or export them for further analysis or compliance reporting.

  • Compliance Support: The logs help your organization demonstrate compliance with data protection regulations and internal security policies.

5. Rovo AI Agent

• Create compliance reports quickly for your Jira project.

• Get assistance in formulating incident response playbooks.

• Summarize audit log findings and extract unique insights.

• Supports HIPAA, SOC 2, GDPR, and more.

6. Alerts and Notifications

  • Real-Time Alerts: If a file is flagged as malicious, the plugin can generate an alert within Jira, notifying relevant team members or administrators.

  • Email Notifications: Email notifications are sent to administrators whenever a threat is detected, ensuring immediate attention to potential security incidents.

How to Use the Plugin

1. Installation and Setup

  • Install the Plugin: Find the Jira Malware Scanner plugin on the Atlassian Marketplace and click "Get it now" to install it in your Jira Cloud instance.

  • Initial Configuration: Upon install the plugin is immediately ready to be used with minimal configuration. Select your compliance and playbook settings, and the AI Agent will factor them into its summaries.

2. Compliance Manager

• Download from the Rovo Agent directory. The agent is ready to use immediately upon install.

3. Monitoring and Managing Audit Logs

  • View Logs: Access audit logs via the plugin’s log panel.

  • Export Logs: Export logs in CSV format for compliance reporting or deeper analysis. The logs provide a clear record of all scanned files and actions taken.

4. Handling Threat Alerts

  • Jira Notifications: When a threat is detected, you will receive an alert directly within the Jira issue and an email.

5. Best Practices

  • Regularly Review Audit Logs: Periodically review audit logs to ensure that the plugin is functioning correctly and that all threats are being appropriately managed.

  • Adjust Scanner Settings as Needed: As your organization’s needs evolve, update scanner settings to optimize performance and security.

  • Integrate with Your Security Processes: Ensure that alerts and notifications are integrated into your broader security processes to maximize the effectiveness of the plugin.

Troubleshooting and Support

Common Issues

  • File Scans Taking Too Long: Ensure that the file size limits are appropriately set. Files cannot exceed 2GB is size, take longer than 240 seconds to process, or be an archive (eg. ZIP) with over 10,000 additional files.