Delete or delegate – redaction and automation now available for Jira content scanning

[#1]

Hi Atlassian Community,

The Guard Premium team is thrilled to announce an expansion of our redaction and automation features to include Jira content scanning. When sensitive data is detected in Jira, you now have additional ways to respond. You can leverage our new redaction feature for Jira, which allows you to effectively remove sensitive information from your work items. Alternatively, you can set up automation rules to notify the person who entered the data about your organization’s policies, or update the security level of a work item, if their project uses an issue security scheme.

These features, which were recently introduced in Confluence, are now available in Jira. For more details, check out these community posts:

• Checkmate sensitive data with redaction through Atlassian Guard

• Caught off guard with sensitive data? Stay on guard with Guard

If you’ve enabled content scanning for Jira, Guard Detect will send an alert whenever someone creates or edits a Jira work item containing specific types of sensitive data. This includes credentials, financial information, and identity data.

You can now leverage the power of Jira redaction or Jira automation to streamline your workflow when sensitive data is detected.

Jira Redaction

Keeping sensitive data out of Jira work items is an ongoing challenge, and redaction is one strategy you can employ to mitigate risks to your organization.

Guard Detect sends an alert if sensitive data is added to Jira work item fields. The alert includes an excerpt of the sensitive data and the name of the field to assist you in your investigation.

If you determine that the data is sensitive and should not be stored in Jira, you can redact the content directly from the alert. This action deletes the sensitive data and replaces it with a solid bar in the field and its history.

It’s crucial to understand that redaction permanently deletes the data in the database; it does not merely mask or restrict it for certain users.

For guidance on how to redact sensitive data, refer to How to redact sensitive data.

Redaction requires Atlassian Guard Premium.

To get started with this change:

1. In Guard Detect, view a sensitive data alert.

2. Review each instance of sensitive data highlighted in the alert, along with the suggested investigation steps.

3. Select Redact.

The sensitive data will be deleted and replaced with a solid bar, and this action cannot be restored or undone. For further details, see What happens when data is redacted?

Redaction is currently a manual action within Guard Detect.

Jira Automation

With Jira automation, you can create your own rules using the new content scanning alert trigger, or get started by selecting one of the available templates.

Not sure how automations could enhance your workflow? Here are some ideas:

• Comment on the work item that contains sensitive data

• Send an email to the user to explain your company's policy on sensitive data.

• Change the security level of the work item [if your project employs an issue security scheme].

• Create a Jira ticket to track any additional actions required.

Jira automation gives you the flexibility to be as specific as you need. You can configure the trigger to perform an action whenever any content scanning alert is generated. You can also cherry pick which alerts trigger specific actions, based on the conditions you set. The wide range of actions and conditions available through Jira automation opens up numerous possibilities.

For more information, check out How does automation work with Guard Detect?

Content scanning alerts are available with Atlassian Guard Premium. Automation is included with a Jira Premium or Enterprise plan.

What’s next

Managing sensitive data to comply with your organization's policies can be challenging. That’s why our team is committed to providing tools that enable you to effectively manage your most sensitive information. Stay tuned for future updates as we enhance features to help you safeguard your data.

If you have any questions, or feedback, or need support, don't hesitate to reach out. We’re here to help!