ClassMark
Confidentiality levels for Confluence pages. With defaults per space, warnings about wrong permissions and a report for the audit.
The problem
Public, internal, confidential, strictly confidential: that's what the classification policy says. In Confluence, no page says it. And where one does, the confidential page is still readable by everyone. By the ISO 27001, TISAX or NIS2 audit at the latest, someone will notice.
What it does
- Levels according to ISO 27001 or TISAX, or your own. Visible right under the page title, changes only with a reason.
- Defaults per space, inherited by child pages. New pages get their level automatically, even when nobody thinks of it.
- A report on coverage, contradictions like "confidential, but readable by everyone" and a complete change log. As an export for the auditor.
Who it's for
Information security officers and ISMS owners who have to show that information isn't just supposed to be classified, but actually is.
Where things stand
The logic is in place and thoroughly tested, the Confluence app is being built. To be upfront: Confluence doesn't let an app block publishing. ClassMark labels, restricts after the fact and reports. If you want to help test, get in touch.
Your classification only exists in the policy?
Sign up as a test customer