From scope to audit-readiness — your ISMS is built inside your own Atlassian.
from €14,900
excl. VAT · 6–16 weeks
The conventional path to certification ends with a folder full of documents that begin to age the day they are handed over — and a team that never internalised the structure behind them. The next surveillance audit brings the same search all over again.
We do it differently. Your ISMS is built as a working system in your Jira and Confluence: risks are issues with owners and due dates, measures have a status, policies are versioned and approved, reports are generated from live data.
Sweet spot: 50 to 1,000 employees, Jira and Confluence Cloud in active use, a firm deadline in the background — customer requirement, tender, or audit date. What takes weeks of configuration work in conventional projects our ISMS app handles in hours — the time gained flows into your risks, your processes, your evidence.
ISMS app installation, module selection, roles and permissions, customisation to your organisation. Output: working ISMS skeleton — four configured Jira projects and a prepared Confluence space.
Define scope, context and interested parties, security objectives, ISMS policy, organisation and RACI. Output: approved governance documents as controlled documents in Confluence.
Build the asset inventory, define risk methodology, assess threats and vulnerabilities, calibrate the risk matrix, decide on risk treatment. Output: populated asset and risk register with traceable assessments.
Assess all 93 Annex A controls, set fulfilment levels, assign owners, define review cycles. Output: Statement of Applicability as a generated Confluence page, always current.
Derive measures from risks and control gaps, plan, schedule, set up effectiveness reviews. Output: running measure management with automatic escalation before and after due dates.
Adapt the policy package from our templates to your organisation, align, approve, and bring into force. Output: versioned, approved policies with documented control evidence.
Review evidence, set up KPIs, prepare and conduct management review, prepare for Stage 1 and Stage 2. Output: audit-ready ISMS and a team that can operate it.
| Ergebnis | Form |
|---|---|
| A configured, populated ISMS in your Atlassian — not a prototype, but the production state | in your Atlassian |
| Complete ISMS documentation: policy, procedures, registers, reports | controlled documents |
| Statement of Applicability, generated from live data | Confluence page |
| Risk treatment plan with prioritised, scheduled measures | Jira |
| KPIs and reports for management review and audit | Dashboard |
| Trained team — your people can operate the system, not just look at it | Training |
| Project documentation with decisions and open points for handover |
| Duration | 6–16 weeks depending on package |
| Effort on your side | realistically 4–8 hours per week for the project lead |
| Prerequisites | Jira and Confluence Cloud · maplee ISMS mit Jira & Confluence licence · designated project lead · management backing |
| Format | primarily remote, workshops on-site as needed |
| Price | Base from €14,900 · Standard from €24,900 · Certification from €39,900 — all excl. VAT |
We typically respond within one working day.