How GitLab built a security control framework from scratch

2026-03-09

GitLab built a custom GitLab Control Framework after finding NIST SP 800-53 and other standards too rigid for its multi product cloud environment, creating 18 tailored domains with granular, metadata rich controls mapped to 1,300 requirements across eight certifications.