How can I use JIRA to assign impact assessments to a team?

[Daniel Swann]

This is the use case that I am facing and trying to figure out a way to use JIRA for it.  A vulnerability is released on the internet.  I need to poll our product experts to see if we are affected by this vulnerability.  I need to be able to also see the progress of the team's validation of the vulnerability in the products and be able to set a due date.

[Mark Segall]

Hi @Daniel Swann and welcome to the community!

Let me start by saying you could go any number of ways with this so take my opinion as just one possibility:

1. New project for capturing vulnerabilities (maybe a new vulnerability issue type as well depending upon what type of information you want to capture)
2. Have subtasks on each vulnerability that are assigned to each "product expert". They could, in turn link any tasks they need to assign to their individual dev teams to the subtask for complete traceability on how vulnerability validation is coming along

[Daniel Swann]

Thanks Mark.  I will look into those options.