Introducing Custom Compliance Frameworks in GitLab
Apr 17, 2025Ian Khor
Summary
Introduces Custom Compliance Frameworks and 50 out-of-the-box (OOTB) controls for various compliance standards (ISO 27001, CIS Benchmark, SOC 2). Enables mapping of multiple, overlapping controls into a single framework. Automates compliance enforcement directly within CI/CD pipelines. As of GitLab 18.0, Custom Compliance Frameworks are enabled by default, and "Standards" are removed from the Compliance Center, with existing controls converted to framework labels and checks to controls. Only GitLab Ultimate customers can define requirements, map controls, and enforce frameworks.