what is the best template to organize compliance requirements?

[pauline]

I want to organize security and privacy requirements imposed on the health care industry as the the various acts and laws become effective so that we can remain compliant.

Is there a template that I can use?

[Mike Rink · Accepted solution]

Hi Pauline! Are you looking to meet ISO 13485 requirements? Are those the requirements you're referring to? If so, you might want to check out Soft Comply's eQMS app which includes templates for everything you need: https://marketplace.atlassian.com/apps/1216218/softcomply-eqms?hosting=cloud&tab=overview

[pauline]

I am very familiar with the above regulatory requirements for the above which are for clinical laboratories.

I am looking for a way to manage the knowledge base of documents and rulings for getting our company and its ops to HITRUST certification?  I think that Atlassian is HITRUST certified?

I am looking for something that can organize and manage the knowledge base for ISO 27001/27002 and NIST SP-800 53 cybersecurity; and HIPAA and GDPR privacy.

[Mike Rink]

Thanks @pauline . Unfortunately, I don't know of an app that contains templates for all of that. One of our apps, Comala Document Control, can help with content management of a KB database, but it doesn't come with specific Confluence page templates. Essentially, you use our app to control the visibility and approval of pages within the KB. Not sure if that suits you needs. 

[pauline]

Not really helpful, guess I am on my own. 

Thank you for your help

[Mike Rink]

No problem, best of luck. 

[Li]

Hi Pauline,

What did you end up doing?

Do you know a template in Confluence to plan a GDPR compliance program?

Best Regards

[John Thompson]

Hi Pauline.  I am beginning to work on the very task you were asking about last year.  Would love to know what you came up with.

[pauline]

I abandoned trying to do it on Confluence, it has never worked well for me, so until they come up with a template that simplifies ISO and HITRUST templates to track the work and especially to capture all of our business decisions wrt to compliance strategies, I put together several different documents for the team to track progress including change control and design decisions.

[Thor]

Hi @pauline, since you asked for ISO 27001 maybe a plugin of our partner can help you. It is not yet released for the cloud but it will be soon.

Here is the link to the plugin on the Marketplace: https://marketplace.atlassian.com/apps/1223742/isms-for-confluence?hosting=server&tab=overview

Feel free to contact them if you have further questions.

[Shannon S]

Hello Pauline,

Thank you for contacting us about this.

While none of the built-in Confluence templates are built to be used for compliance requirements specifically, there are ways to get the templates you require.

1. The first option is to create your own template. In Confluence, you can create a new custom template. You can create it exactly to your company's requirements, and modify it for future pages whenever needed.
2.  Search Atlassian Marketplace for various compliance-related add-ons.
3. Have a look at available Confluence Templates for download. I wasn't able to find one specifically related to compliance, but have a look anyway and see if one matches your needs.

An example of a table you could create yourself to track compliance can be see on the article below, which I found:

• How to Create a Compliance Table in Confluence

This isn't an official Atlassian article, but it does give you some idea of how you can get that to look. Keep in mind, the example uses Confluence Server, which works a bit differently than Confluence Cloud, but you should be able to create a similar-looking table.

Let me know if you have any questions about that.

Take care,

Shannon

[pauline]

Much more complicated than needed - kind of thinking I should work outside of Atlassian for this.

[Shannon S]

Hi Pauline,

I understand that creating your own template for this is a bit more complicated than you were hoping for. You may then need to look at 3rd party templates to do what you need.

By the way, regarding the HITRUST compliance, I wanted to direct you to the following thread, since I believe you may be referring to a Confluence Cloud site.

There was a question about HIPAA compliance on our Cloud platform, which is not currently compliant. I believe that includes HITRUST as well. It's been updated recently, so please feel free to reply on this about your requirements for the Confluence Cloud compliance. The security team will be able to see your feedback on this thread.

Lastly, if you want a list of the compliance certifications we do hold, you can review this page:

• Atlassian Compliance 

Let us know if you have any questions!

Take care,

Shannon

[pauline]

Thank you for the link and the clarification -