SBB Assurance LibraryPublic evidence profiles ยท GitLab Inc.
Sky BlackBox logoSBB Assurance LibraryPUBLIC EVIDENCE DIRECTORY
GITLAB / ASSURANCE

Frameworks and assessments

NIST, PCI DSS, IRAP, CMMC and other compliance mappings, with date semantics preserved.

Control mapping / PNG

CIS Critical Security Controls v8.1

Control-mapping content is not third-party certification.

SUBJECTGitLab Inc. / gitlab.com
NEXT REVIEW SHOWNJuly 2027
Download PNG ↓
Sample record, not authenticated issuer documentation.
Cloud / PNG

CSA STAR / Cloud Assurance

The attached record alone does not establish registry status.

SUBJECTGitLab Inc. / gitlab.com
ANNUAL REVIEW SHOWNJuly 2027
Download PNG ↓
Sample record, not authenticated issuer documentation.
Framework / PNG

CMMC Level 2

A control mapping is not evidence of a completed CMMC assessment.

SUBJECTGitLab Inc. / gitlab.com
VALIDITY REVIEW SHOWN21 Apr 2029
Download PNG ↓
Sample record, not authenticated issuer documentation.
Assessment / PDF

Australian ISM / IRAP

IRAP is an assessment program; the example does not verify an assessment or assessor.

SUBJECTGitLab Inc. / gitlab.com
REASSESSMENT TARGETMarch 2027
Download PDF ↓
Sample record, not authenticated issuer documentation.
Framework / PNG

NIST Cybersecurity Framework 2.0

NIST CSF alignment is not an official NIST certificate.

SUBJECTGitLab Inc. / gitlab.com
NEXT ANNUAL REVIEW05 Feb 2027
Download PNG ↓
Sample record, not authenticated issuer documentation.
Framework / PDF

PCI DSS v4.0.1

A governance charter or illustrative record is not a validated Attestation of Compliance.

SUBJECTGitLab Inc. / gitlab.com
REASSESSMENT DUE09 Jun 2027
Download PDF ↓
Sample record, not authenticated issuer documentation.