HERE'S WHY
Managing your security compliance can require coordination and collaboration with other members of your organization. Drata makes this easier by integrating with the tools you already use on a daily basis, including Height. By connecting Height to Drata with write access enabled, you can create and assign tickets for Controls (DCF and Custom), Tests, and Risk Management in Drata and have them accessible in your Height account.
Before Diving In…
Users with admin, information security leads, and workspace manager access can create and view Height tickets within Drata, however a user must have Admin access in order to set up or edit the Height connection
'Write Access' is already enabled when creating the initial Height connection
Tickets can be created in primary and secondary workspaces
HERE'S HOW
Connecting Height To Drata
In your Connections page, click on Available connections and select the Ticketing type. Scroll down to Height and click on Connect Now
The slide-out panel will provide step-by-step instructions to set up the connection.
Creating Height Tickets via Drata
When 'Write Access' is enabled you are able to create tickets from any Control Details, Test Details, or Risk Details (in Risk Management) drawer.
If there are no tickets currently associated with a Control, Test, or Risk, you will be prompted to create one to get started.
Choose a project.
Complete your ticket details. The title and description will be auto-populated. Note that you cannot fill in a field with only numbers as they are not accepted in the platform. You can enter both numbers and letters into a field however.
Click on Create ticket once you are completing the ticket details you’d like to input.
Viewing and Managing Tickets in Drata
When Height tickets have been created for a specific Control, Test, or Risk (in Risk Management), they will display within the drawer. The most recently added ticket will display at the top of the list.
Each ticket listing includes the following information:
Ticket Summary / Short Description – as entered by the user
Date the ticket was created
Date the ticket was updated
Ticket Status – as reported by Height
Name of Assignee – tickets can be assigned to any selectable Height User. This user does not need to be a information security leads or admin in Drata.
Name of person who created the ticket
To view, edit, and manage a ticket, click the Manage ticket and you'll be taken to Height.
To download the ticket information, click on the save icon next to the trash bin. This will download a zip which will contain a pdf of the ticket details.
To unlink a ticket from the control, test, or risk, click the trash bin. Unlinking a ticket will not delete the ticket in your Height account. Note: once a ticket is removed, it cannot be re-linked.
A maximum of three ‘In Progress’ tasks will display in the list in the drawer. To see all tickets associated with a particular Control, Test, or Risk (in Risk Management), click the ‘View all tasks’ link and a modal will open.
Here the tickets are divided into two standardized categories, 'In Progress' and 'Done':
In Progress – Tickets in any open state as defined in your Height instance.
Done – Tickets in any completed state as defined in your Height instance, i.e. Closed, Done, etc.
Only tickets created in Drata for that specific Control, Test, or Risk (in Risk Management) will display in Drata. Tickets created directly in Height will not be pulled into the Drata application for ticket management.