GitLab for SOC 2 change management
Using GitLab merge requests, approvals, protected branches and pipelines as evidence for SOC 2 CC8.1 change management, from authorization and testing to emergency changes.
GitLab compliance
Using self-managed GitLab as the system of record for change management and secure development evidence.
GitLab for PCI DSS requirement 6
Supporting PCI DSS v4.0.1 requirement 6 with GitLab: independent code review before release, security scanning, component inventory and change approval records.
GitLab for SOX ITGC program change controls
Using GitLab to evidence SOX IT general controls over program changes: authorization and approval, keeping developers out of production, and detecting unauthorized changes.
GitLab for NIST SP 800-53 change control
Mapping GitLab to NIST SP 800-53 CM-3 configuration change control and related controls, using GitLab's own NIST hardening guidance and audit events.
GitLab for ISO 27001 secure development and change control
Mapping GitLab merge request approvals, protected branches, security scanning and audit events to ISO 27001 Annex A secure development and change management controls, and what evidence auditors can pull.
GitLab for CMMC and NIST SP 800-171 configuration management
Using self-managed GitLab in a CUI enclave: change approval, audit logging, FIPS images and offline operation that support CMMC Level 2 configuration management and audit practices.
GitLab for DORA ICT change management
How financial entities use GitLab approvals, protected environments, audit events and pipeline records as evidence for the EU Digital Operational Resilience Act ICT change management requirements.
GitLab SBOMs and vulnerability handling for the EU Cyber Resilience Act
Producing CycloneDX SBOMs, dependency vulnerability lists and build provenance from GitLab pipelines to support Cyber Resilience Act obligations for products with digital elements.
GitLab for NIS2 supply chain and secure development measures
Using GitLab scanning, security policies, SBOMs and audit trails as evidence for NIS2 Article 21 measures on supply chain security and secure development, and where GitLab evidence stops.
