Correct CorpSec Devices name and ownership

Lenny Vakninerequested to merge
lv/fix-corpsec-devices-handbook into main

Why

MR !20565 (merged) documented the current CorpSec endpoint team as "Device Trust Engineering," but the active team is CorpSec Devices. The merged change also used the nonexistent @lenny-glab account in CODEOWNERS and team links, omitted Peter Hansen and Steve Sagan from the team directory while retaining them in the system-owner table, and moved endpoint-security documentation under Corporate IT without preserving CorpSec Devices review ownership.

This follow-up corrects those inaccuracies while keeping device trust as the name of a technical security capability, not an organizational team. The current name and roster are documented in confidential work item gitlab-com/gl-security/corp/issue-tracker#5138.

What changed

  • Rename organizational references from Device Trust Engineering to CorpSec Devices.
  • Replace the placeholder team page with a concise ownership boundary between CorpSec Devices and Corporate IT / End User Services.
  • Move the team page to /handbook/security/corporate/engineering/devices/ and redirect the old path.
  • Restore Nathaniel Strauss, Peter Hansen, and Steve Sagan consistently in the directory and org charts.
  • Replace invalid @lenny-glab references with @lennyv-glab.
  • Add shared CODEOWNERS coverage for endpoint-security documentation under Corporate IT.
  • Clarify that CorpSec Devices owns endpoint policy and control-plane configuration while Corporate IT owns user support, logistics, and delegated routine actions.

Validation

  • npx markdownlint-cli2 <11 changed Markdown files>: 0 errors
  • git diff --check: passed
  • Repository build attempted with local Hugo 0.159.1, but that version has removed the getJSON template function used by the pinned theme. Docker is installed but the local daemon is not running. CI uses the repository-pinned Hugo 0.151.0 image and is the authoritative build check.

Review focus

  • CorpSec Devices: team name, roster, and endpoint control-plane scope
  • Corporate IT: support, logistics, delegated-action boundary, and shared endpoint documentation ownership
  • CorpSec Identity: adjacent identity boundary
  • Handbook maintainers: redirects and CODEOWNERS behavior

Follow-up to !20565 (merged).

Merge request reports