FinServ: How to implement GitLab's separation of duties features

What this post added

This post details how to implement GitLab's separation of duties (SoD) features, particularly for the financial services industry. It elaborates on using merge request approval policies (preventing author approval, requiring password, preventing committers from approving), compliance frameworks and controls (automating preventive measures, managing risks, enforcing regulatory compliance), permissions and roles (principle of least privilege, custom roles, protected environments for deployer roles), and protected features (branches, Git tags, environments, packages). It also highlights the role of audit events and the Compliance Center for monitoring and auditing these implementations.