Retire defunct CorpSec functions and realign Corporate IT documentation

Why is this change being made?

The Corporate Security and Corporate IT handbook sections had accumulated a large amount of documentation debt, to the point where they were actively misleading team members. The handbook advertised four teams that no longer exist, named people who have since left GitLab as DRIs and code owners, and pointed people at issue trackers and Slack channels nobody reads anymore.

This is a documentation cleanup, not a reorganization. Nothing here changes what Corporate IT or Corporate Security is responsible for — it writes down the norms both teams are already working to.

The split documented here reflects where things stand today. Alignment between Corporate IT and Corporate Security is ongoing, and these pages should be expected to change again as that work continues. This MR is a checkpoint that gets the handbook current, not a final statement of the boundary between the two teams.

Defunct teams and functions removed

• CorpSec Infrastructure Engineering and Infrastructure Services
• CorpSec SaaS Engineering — systems folded into Identity Engineering
• CorpSec Platform Engineering
• Identity Infrastructure Engineering and Identity Operations

Along with their org chart nodes, role tags, GitLab group handles, kanban boards, and issue labels.

Rosters brought up to date

Handbook references to team members who have left GitLab have been removed from rosters, org charts, on-call schedules, escalation DRIs, and CODEOWNERS. Twelve people were named across those pages who are no longer with the company or no longer in these teams.

Where a page needed a live owner, it now points at the current one:

Area	Current owner
Device Trust Engineering	Lenny Vaknine (manager), Nathaniel Strauss
Corporate IT	Rick Pollak
CorpSec engineering management and code ownership	David Zhu, Lenny Vaknine

Andrew Rishwain, Madison Spry, and Jenny Wong added to the Identity Engineering roster.

Ownership written down as it actually works

• End User Services and the IT helpdesk now live under Corporate IT in the Enterprise Technology and AI division, consolidated into one page instead of two near-duplicates.
• The split is stated explicitly on both sides: Corporate IT / EUS handles requests and enablement; CorpSec Identity Engineering handles architecture, security controls, and identity provisioning automation. CorpSec continues to own joiner/mover/leaver automation, Okta system management and authentication, Lumos access request flows, and Service Accounts.
• Domain Names and DNS Records point at Infrastructure Security and their dns-records project.
• Cloud resource administration attributed to Infrastructure Security and Infrastructure Platforms; CorpSec retains cloud IAM for AWS, Azure, and GCP.
• Zoom moved to Corporate IT. Nira retired.

New under Corporate IT: Compass

Compass is now documented as a Corporate IT system. It is the IT team's support request platform — the app team members use from Slack to raise IT support and service requests — and it was referenced throughout the handbook without ever having a page of its own.

1. New stub page at /handbook/eta/corporate-it/compass/, modelled on the Zoom system page
2. Listed under a new Our Systems section on the Corporate IT index, alongside Zoom
3. Listed in the End User Services help articles

This closes a gap where the single most-referenced IT tool in the handbook — every "contact IT via the Compass app in Slack" instruction points at it — had no page to link to.

Housekeeping

• Google Workspace applications consolidated into a single entry in ownership listings (the detailed per-app rows in the systems table are untouched)
• #security-corpsec and #security-corpsec-infra replaced with #security_help
• Basic Lumos instructions added to the top of the Access Requests page
• Broken links removed or repointed, including several already dead before this change
• Hugo aliases added to every moved page, so existing links and bookmarks keep resolving
• CODEOWNERS updated for departed owners and moved paths

Reviewer notes

• 51 file renames — reviewing with whitespace and rename detection on will make this much smaller than the diff stat suggests.
• The org charts in content/handbook/security/corporate/team/_index.md were rebuilt rather than edited in place; worth a visual check that the Mermaid renders as expected.
• content/handbook/company/working-groups/china-service.md is deliberately untouched as out of scope, so it still references two departed team members.

Author and Reviewer Checklist

Please verify the check list and ensure to tick them off before the MR is merged.

• Provided a concise title for this Merge Request (MR)
• Added a description to this MR explaining the reasons for the proposed change, per say why, not just what
• Assign reviewers for this MR to the correct
  • The when to get approval handbook section explains when DRI approval is required
  • The who can approve handbook section explains how to identify the DRI
  • If the MR does not require DRI approval, consider asking someone on your team, such as your manager.
  • The approver may merge the MR. If they approve but don't merge, you can merge.
• For transparency, share this MR with the audience that will be impacted.
  • Team: For changes that affect your direct team, share in your group Slack channel
  • Department: If the update affects your department, share the MR in your department Slack channel
  • Division: If the update affects your division, share the MR in your division Slack channel
  • Company: If the update affects all (or the majority of) GitLab team members, post an update in #whats-happening-at-gitlab linking to this MR

Commits

• e236c58c Add description frontmatter to CorpSec Identity Engineering and Services pages
• da94beba Restore UNDER CONSTRUCTION description on IT Business Systems page
• 244614c0 Fix three broken links on the CorpSec support page
• dd163377 Add splat redirect for access-requests child pages
• c20de3dc Replace frontmatter aliases with redirects; use ordered lists
• 6d91c95d Use ordered lists on the End User Services page
• bad76171 Apply 1 suggestion(s) to 1 file(s)
• 24ecdfef Add Compass stub page under Corporate IT systems
• 559d8962 Retire defunct CorpSec functions and realign Corporate IT documentation

---