How to build a compliance program with ease
Jul 2, 2020Saumya Upadhyaya

Summary
This post details how GitLab can be used to build a compliance program by leveraging granular user roles and permissions for segregation of duties, integrating application security testing into pipelines, defining custom projects for compliance frameworks (e.g., HIPAA, SOX), utilizing audit events for traceability of user actions, and consolidating compliance signals in a compliance dashboard. It highlights the administrative overhead of traditional compliance programs and positions GitLab as a single application to automate these processes.