Gitlab hero border pattern left svg Gitlab hero border pattern right svg

SG.1.01 - Policy and Standard Review Control Guidance

SG.1.01 - Policy and Standard Review

Control Statement

GitLab's policies and standards are reviewed, updated if required, approved by management, and communicated to authorized personnel annually.

Context

The purpose of this control is to ensure GitLab's policies and procedures are kept up-to-date and relevant, changes are appropriately reviewed and approved, and GitLab team members have a way to track those changes.

Scope

Policies and Standards

Ownership

Control Owner:

Process Owner:

Guidance

Create process to have policies and standards reviewed and updated on a recurring, annual basis.

Additional control information and project tracking

Non-public information relating to this security control as well as links to the work associated with various phases of project work can be found in the Policy and Standard Review control issue.

Policy Reference

Framework Mapping