Tactical Priorities - Compliance

The following page may contain information related to upcoming products, features and functionality. It is important to note that the information presented is for informational purposes only, so please do not rely on the information for purchasing or planning purposes. Just like with all projects, the items mentioned on the page are subject to change or delay, and the development, release, and timing of any products, features or functionality remain at the sole discretion of GitLab Inc.

Last edited: 2023-07-21

This page captures our priorities at a finer-grained level than the what's next section does. It shows major topics and projects that we are working on and prioritizing. It is stack ranked, which means that items at the top of the list are higher priority than items lower on the list.

This list highlights major initiatives but is not comprehensive. For specific work being done in an inidividual milestone, please refer to the appropriate milestone planning issues.

Priorities

Priority	Name	DRI	Target release
1	Compliance Framework report show linked Security Policies MVC	`xanf`	`16.9`
2	Migrate Audit Events to ClickHouse Cloud	`harsimarsandhu`	`16.10`
3	Standards Adherence Report Improvements	`jmontal`	`16.9`
4	Compliance pipelines maintenance mode and deprecation	`sam.figueroa`	`16.10`
5	Consolidation of tables for streaming audit events to various external destinations	`hraghuvanshi`	`16.10`
6	Improved Admin and Group-level branch protection settings	`harsimarsandhu`	`16.9`
7	Show compliance progress for SOC2 based on the starting seven criteria	`huzaifaiftikhar1`	`17.0`
8	Streaming audit events to AWS S3	`huzaifaiftikhar1`	`16.9`
9	Allow filtering of streamed audit events	`hraghuvanshi`	`16.10`
10	Comprehensive instance level audit log	`jmontal`	`17.0`
11	Increase E2E test coverage for Govern:Compliance	`huzaifaiftikhar1`	`17.0`
12	External Status Check Approval	`jmontal`	`16.9`
13	SAML SSO authentication for merge request approval	`sam.figueroa`	`16.9`
14	Improve manage/edit compliance frameworks MVC	`xanf`	`16.9`
15	Compliance Pipeline to Security Policy Migration	`TBD`	`TBD`
16	Add event type information for all streaming audit events	`TBD`	`TBD`
17	Compliance Violations Report improvements	`TBD`	`TBD`
18	Comprehensive audit log	`TBD`	`TBD`
19	Enforce project settings with compliance frameworks	`TBD`	`TBD`
20	Improve manage/edit compliance frameworks improvements	`TBD`	`TBD`
21	Compliance Framework report ability to link Security Policies	`TBD`	`TBD`
22	Compliance violation export	`TBD`	`TBD`
23	Streaming audit events to Azure Blob Storage	`TBD`	`TBD`
24	Streaming audit events to Google Cloud Storage	`TBD`	`TBD`
25	Instance Streaming Audit Events Improvements	`TBD`	`TBD`
26	Compliance feature exports MVC	`TBD`	`TBD`
27	Streaming audit events to Datadog	`TBD`	`TBD`
28	Expand audit event usability	`TBD`	`TBD`
29	Streaming audit events to Snowflake	`TBD`	`TBD`
30	Add a version field to the audit event schema	`TBD`	`TBD`
31	Compliance Framework report add change history	`TBD`	`TBD`
32	Compliance Framework report add Adherence Report	`TBD`	`TBD`
33	Compliance Adherence Report Checks	`TBD`	`TBD`
34	Timeout and retry failed external status checks	`TBD`	`TBD`
35	Destination streaming audit events improvements	`TBD`	`TBD`
36	Streaming audit events to Splunk	`TBD`	`TBD`
37	Audit Event data retention settings	`TBD`	`TBD`
38	Create commit custody report	`TBD`	`TBD`
39	Compliance Center Improvements	`TBD`	`TBD`
40	Add availability level to audit events	`TBD`	`TBD`
41	Support for OCSF	`TBD`	`TBD`
42	New policy type: overwrite group/project general settings	`TBD`	`TBD`

*This page may contain information related to upcoming products, features and functionality.

It is important to note that the information presented is for informational purposes only, so please do not rely on the information for purchasing or planning purposes.

Just like with all projects, the items mentioned on the page are subject to change or delay, and the development, release, and timing of any products, features, or functionality remain at the sole discretion of GitLab Inc.*