Managing your framework requirements can require coordination and collaboration with other members of your organization. Drata has the ability to integrate with your company’s ClickUp setup, create tasks, and assign them to members of your organization.
Prerequisite
Users with Admin or Information Security Leads roles can create and view ClickUp tasks within Drata, however, only Admin roles can set up or edit the ClickUp connection within Drata.
Drata pulls in the required ClickUp fields as determined by your specific ClickUp configuration, including Folders, Task Types, and other fields.
Connect ClickUp to Drata
Select 'Connections' on the side navigation menu.
Select the 'Available connections' tab and then search for 'ClickUp' to select the connect button for the ClickUp integration.
Follow the instructions in the slide-out panel carefully and ensure that the required fields are entered.
NOTE: If you do not use "Security" as the label or tag to categorize ClickUp tasks as security issues, update the Security Label field within the Drata drawer accordingly. This also applies to the other severity levels fields within the drawer.
To create ClickUp tasks within Drata, enable Write Access.
When connecting, you'll be redirected to ClickUp to select the workspace to link with Drata. Once you've chosen the workspace, you'll return to Drata. For further steps, refer to the sections below.
Create ClickUp tasks through Drata
The places you can create a ClickUp tasks is: Control Details, Test Details, or Risk Details (in Risk Management) drawer. If there are no tickets or tasks currently associated to a Control, Test, or Risk, you will be prompted to create one to get started. Select Create ticket to create a ClickUp task.
For the destination, you may have to search and select ClickUp if you have multiple ticketing systems connected to Drata. The rest of the steps will depend on how you organized your ClickUp tasks. It may differ from the following sections.
Then, choose a ClickUp Workspace for the Team field within Drata. After selecting a workspace, you can select the desired ClickUp space to sync the related folders and lists.
After selecting Next, you have the option to select a folder. If you select a folder it will sync the lists within the selected folder. If you do not select a folder, it will bring the lists related to the previous selected ClickUp space.
Then, you can select the ticket type. You can select a Task or Subtask that you can create in Drata.
If you select Subtask, you will be prompted to select a Parent Task that you want to associate with the Subtask. The options will be currently open Parent Tasks that have been created.
The final details are almost done. Now, you must verify and complete your ticket details. Drata will pull all the fields from your account for that ticket type. The Name and description will be auto-filled with information about the control, risk, or test.
The additional fields will follow the configurations set up in ClickUp. For example, if a field is set up to only accept numeric values, then you can only enter numbers in that field on Drata.
Select Create ticket once you are finished completing the ticket details you’d like to input.
View and Manage Tickets in Drata
When tickets have been created for a specific Control, Test, or Risk (in Risk Management), they will display within the drawer. The most recently added ticket will display at the top of the list.
Each ticket listing includes the following information:
Ticket Summary / Short Description – as entered by the user
Date the ticket was created
Date the ticket was updated
Ticket Status – as reported by ClickUp
Note: the ticket status is determined by the “section” name that a ticket is in on ClickUp.Name of Assignee – tickets can be assigned to any selectable ClickUp User. This user does not need to be a information security leads or admin in Drata.
Name of the person who created the ticket
To view, edit, and manage a ticket, click the Manage in ClickUp link and you'll be taken to ClickUp.
To download the ticket information, click on Download ticket. This will download a zip which will contain a pdf of the ticket details along with any attachments associated to that ticket.
To unlink a ticket from the control, test, or risk, click Remove. Unlinking a ticket will not delete the ticket in your account. Note: once a ticket is removed, it cannot be re-linked.
A maximum of three ‘In Progress’ tasks will display in the list in the drawer. To see all tickets associated with a particular Control, Test, or Risk (in Risk Management), click the ‘View all tasks’ link and a modal will open.
Here the tickets are divided into two standardized categories, 'In Progress' and 'Done':
In Progress – Tickets that are not marked as “complete” in your ClickUp instance.
Done – Tickets in a completed state in your ClickUp instance, i.e. Closed, Done, etc.
Only tickets created in Drata for that specific Control, Test, or Risk (in Risk Management) will display in Drata. Tickets created directly in ClickUp will not be pulled into the Drata application for ticket management.