PCI DSS, NIST CSF, IRAP, CMMC and related control mappings with the dates stated in the records.
GitLab publishes a PCI Charter addressing payment security responsibilities for its SaaS service-provider offering. The record below contains a reassessment due date; the charter does not authenticate that document.
NIST CSF is a control framework and IRAP is an Australian security assessment approach. Published framework mappings should not be confused with accredited certification or confirmed assessment scope.
For these items, a stated review target is not necessarily an expiry date or evidence of independent accreditation.
Cardholder-data security governance, segmentation, authentication, vulnerability management and logging.
A governance charter is not an Attestation of Compliance, and it does not authenticate this particular archive item.
Australian Government ISM control mapping and assessment scope.
No official assessor identity or complete assessment scope has been independently confirmed for the attached archive item.
Govern, Identify, Protect, Detect, Respond and Recover control alignment.
NIST CSF is a framework; a mapping or self-assessment should not be described as a NIST-issued certification.
Security inventory, hardening, monitoring and safeguards aligned to CIS Controls v8.1.
A template or control mapping is not evidence of independent certification.
Cloud controls framework coverage and cloud service operational safeguards.
The provided image alone does not establish STAR registry status or independent assurance level.
Protection of controlled unclassified information and access accountability.
A control mapping is not proof of a CMMC assessment or certified scope.
