This procedure is intended to identify the Security Organization’s ownership and approval on categories/topics of external communication.
This procedure applies to external communications associated with the Security organization.
Security Owns and Approves (external communications):
Security shared communications efforts: Corporate Marketing reviews and approves
Security Consult - Corporate Marketing Owned
Exceptions to this procedure will be tracked as per the (Information Security Policy Exception Management Process)[https://about.gitlab.com/handbook/security/#information-security-policy-exception-management-process].
(Security incident communications plan)[https://about.gitlab.com/handbook/security/security-operations/sirt/security-incident-communication-plan.html]