CorpSec Services

This is a placeholder page. Please see the links below for any child pages that exist.


2FA and Password Account Resets for Team Members
This is a placeholder page. Please see the links below for any child pages that exist.
Access Requests (AR) Services
Access Requests are owned by the Corporate Security Helpdesk team. All onboarding, offboarding and role change (career mobility) requests are owned by the People Connect Team. If you have any access requests related questions, please reach out to #it_help in Slack or the tool provisioner in Slack. FAQs Baseline Entitlements Temporary service providers access requests and onboarding Issue Trackers Team Members (use this by default): Access Request Issue Tracker Temporary Service Providers: Lifecycle Issue Tracker Employment Onboarding: Employment Issue Tracker Employment Career Mobility: Employment Issue Tracker Employment Offboarding: Employment Issue Tracker Team Member Issue Templates Specific Application Requests (use Individual or Bulk Person Access Request if not listed) Slack, Google Group, 1Password Groups or Vaults PagerDuty Tableau ZenDesk Federal Customer Creation Standard Access Requests (Use this by default) Individual or Bulk Person Access Request: One or multiple people requesting access to systems Create one issue for one or multiple people to get access to the same system Create one issue for one person to get access to multiple systems (checklist) Create multiple issues (one per system) to grant multiple people to the each (same) system When access is being requested for multiple people who report to different managers but are part of the same department or division, approval can be obtained by the manager at the highest level (ex.
CorpSec Change Management
This is a placeholder page. Please see the links below for any child pages that exist.
CorpSec Helpdesk
Need Help? Visit the Corporate Security Support and/or Corporate Security Systems handbook page to get help. This page provides the “what” and links to the services that we provide and our internal processes. The support page provides the “how” that you will find helpful. Overview We have 24x5 coverage provided by Helpdesk Support Analysts that can help you with access requests, account lockouts, authentication issues, laptop hardware, laptop software configuration problems, 1:1 training for unfamiliar technologies, and triage problems for any Corporate Security Systems.
CorpSec Infrastructure Services
This is a placeholder page. Please see the links below for any child pages that exist.
CorpSec Mobile Devices (Phones and Tablets) Services
Overview Many services that team members use such as Slack and Zoom have mobile applications that can be loaded onto iOS or Android devices, allowing for use of those resources from a mobile phone. Refer to the acceptable use policy for more information on using a mobile device. Most major applications (Slack, Zoom, Okta Verify) have been examined and vetted by the Security Team, but there are some applications which are not only of limited scope in the data they can access, but also have security issues.
CorpSec Offboarding Services
This is a placeholder page. Please see the links below for any child pages that exist.
CorpSec Onboarding Services
The Corporate Security Helpdesk provides day-to-day support and handles the provisioning of accounts, hardware, and software for new team members (aka employees), temporary service providers (aka contractors), and any external collaborators (aka customers, partners, and vendors). If you need any help with onboarding that isn’t answered in the handbook or you’re overwhelmed, simply ask in the #it_help Slack channel. Related Services External Collaborators (Customers, Partners, Vendors) Team Members (Employees) Access Requests Career Mobility (Role Changes) Laptops Offboarding Temporary Service Providers (Contractors) Contractors (Temporary Service Providers) Laptops Overview At GitLab, we use the term onboarding to refer to the first few weeks after a team member was hired and enabling you to be productive.
CorpSec Role Change Services
This is a placeholder page. Please see the links below for any child pages that exist.
Email Security Standards
Overview Do not configure email forwarding of company emails (@gitlab.com) to a non-company email address. Acceptable Use Policy - Unacceptable Email and Communications Activities
External Collaborators (Customers, Partners, Vendors)
This is a placeholder page. Please see the links below for any child pages that exist.
Identity Management Services
This is a placeholder page. Please see the links below for any child pages that exist.
Laptops and Logistics
Purpose This page displays different pieces of information surrounding GitLab laptop procurement and management. Scope At GitLab, we use centralized laptop management for company-issued laptops. If you are in possession of a company-issued laptop, the details below apply to you. However, not all endpoint management technologies GitLab deploys will be required for Apple, Linux, and Windows laptops. Some technologies may be specific to the hardware platform or operating system. Roles & Responsibilities Role Responsibility GitLab Team Members Responsible for following the requirements in this procedure Corporate Security Responsible for implementing and executing this procedure Corporate Security Management (Code Owners) Responsible for approving significant changes and exceptions to this procedure Guides Policies Procurement Guide and Shipping Times Hardware Models and Specs Operating System Standards Apps and Software Standards Security Configuration Standards Apple ID for Work Backups Disk Encryption Firewall Hostnames and Usernames iCloud Drive Locking When Unattended Password Management Personal Use Remote Management (MDM and EDR) Software Updates Touch ID (Biometric Passwords and 2FA) Web Browsers Wireless Networks and VPN New Laptops 👀 Onboarding Hardware Ordering Guide Onboarding Software Setup Guide Apple macOS Setup Guide Linux Setup Guide Laptop Replacement and Repairs Refresh/Replace Guide Repair Guide Old Laptops Wipe (Factory Reset) Guide Buy Back Guide Donation Guide Recycle/Return Guide Legal Holds and Investigations If the team member is under an active Legal Hold or possesses material related to an active Company investigation, they must comply with the notice requirements.
Service Accounts
This is a placeholder page. Please see the links below for any child pages that exist.
Temporary Service Provider Services (Contractor Users)
This is a placeholder page. Please see the links below for any child pages that exist.