access to internal systems

[Christos Markoulatos]

Hi all my security asks the following question

"The hosting provider/SaaS provider must ensure that access to internal systems and applications of the provider is logged.

Logging should at least cover the last seven days and should include access to account management/system administration systems."

Can someone from Atlassian answer this.

Thanks alot

[Charlie Misonne]

Hi Christos,

By "internal systems" you do not mean the actual application (Jira) right?

Atlassian has a page about security and compliance, perhaps your security team can find what they're looking for in there? https://www.atlassian.com/trust