Gitlab hero border pattern left svg Gitlab hero border pattern right svg

CM.1.01 - Change Management Workflow Control Guidance

On this page

CM.1.01 - Change Management Workflow

Control Statement

Change scope, change type, and roles and responsibilities are pre-established and documented in a change control workflow; notification and approval requirements are also pre-established based on risk associated with change scope and type.

Context

Having a structured workflow and guidance on change management helps reduce the risk of GitLab experiencing platform or application instability by increasing the predictability and reproducibility of the change management process.

Scope

This control applies to all systems within our GitLab.com production environment. The production environment includes all endpoints and cloud assets used in hosting GitLab.com and its subdomains. This doesn't include third-party systems that support the business of GitLab.com, which can be found in CM.3.01.

Ownership

Additional control information and project tracking

Non-public information relating to this security control as well as links to the work associated with various phases of project work can be found in the Change Management Workflow control issue.

Examples of evidence an auditor might request to satisfy this control:

Policy Reference

Framework Mapping