Process
- Identify and validate the event.
- Classify severity and affected systems.
- Contain access, deployment or data exposure.
- Preserve relevant evidence and logs.
- Investigate root cause and affected customers.
- Remediate and validate the fix.
- Notify Atlassian, customers or authorities where required.
- Perform post-incident review and track corrective actions.
Atlassian coordination
Where an incident affects StatusDeck, Jira data, Forge storage or Marketplace customers, QTI Labs will follow Atlassian's then-current Marketplace incident process and required notification timelines.
Customer notification
Notifications will be based on confirmed facts, legal obligations, contractual requirements, risk to customers and coordination needs. Notices may describe the incident, affected information, containment, recommended actions and remediation status.
Contact
Suspected incidents should be reported to support@qtilabs.com. StatusDeck operational issues may also be sent to marketplace@qtilabs.com.
Effective date: upon first public availability of StatusDeck on the Atlassian Marketplace. Review at least annually and after material product, scope, storage, subprocessor, security or legal changes.