Bitsight Jira Service Management Integration Setup Guide

Prerequisites 

Before installing the application, ensure you have set up your Atlassian account and Bitsight API token.

• Atlassian Account: Visit atlassian.com, sign up, and create your Atlassian site.
• Bitsight Token: Learn how to generate an API token in the Bitsight portal here.

App Installation

1. Go to the Integrations page in the navigation menu inside the SPM app in Bitsight portal. Search for Jira and click on the Install button. 
2. On the new page opened for the app installation Click the Get App button.
3. Select the site where you want to install the app (you must be a site admin or org admin of the site) and click Install.

Post-Installation Steps for Jira Service Management 

Configuring fields in Jira Service Management requires adjusting the Work Item screens.

1. Click the gear icon (settings) in the top right corner of your Jira site and select Work items.
2. From the left sidebar under the 'Screens' section, select Work type screen schemes.
3. Click on the link for your space (e.g., BSM: Jira Service Management Issue Type Screen Scheme).
4. Select the specific work type you want to map Bitsight findings to (e.g., [System] Incident).
5. Click the link next to Create issue.
6. Scroll down, click on the Select Field... bar, and search for the following four fields to add them: Rolled Up Observation ID, Company GUID, Risk Vector, and Evidence Key.
7. Verify your fields by clicking the + Create button at the top, selecting your space and work type, and scrolling down to ensure the fields appear on the ticket.

Final Step: Bitsight Jira Application Configuration

1. Navigate to the Bitsight Jira ITSM app, paste your Bitsight API Token into the secured field, and click Validate.
2. Choose your finding filters. Mandatory selections include Findings Company, Severity Category, Asset Importance, Grade, and Risk Vector. You must also configure the Max Age Days (minimum of 3), which is permanent once saved.
3. Define your Work type, assignees, and ticket priority. You also need to configure Status Synchronization mapping (options include None, Jira to Bitsight, or Bidirectional).
4. Turn the Active toggle on and save your setup so the app scheduler begins creating tickets.