Field Security Engagement in QBRs

Overview

GitLab conducts Quarterly Business Reviews during the first month of every quarter to review performance and lessons learned from the prior quarter, review forecasting, and prioritize requests that will help in future sales activity. In the spirit of Transparency and Collaboration, the Field Security participates in the QBR process to gather information and recommendations for future security related concerns.

Process

1. As part of the Field Manager QBR Roll Out schedule, Field EBAs will send a calendar invitation to the Field Security Team. Based on availability, members of the team will sign up for various QBR sessions.
2. Field Security team members will intake any security-related concerns or issues.
3. Field Security team members will evaluate the concerns and rate them using GitLab’s Observation Management procedure.
4. A summary issue is shared to relevant stakeholders for consideration. As applicable, security concerns may be added to the Annual Field Security Study.