Sec FY27 reorg (3/5): move Security Governance group pages

Mark Mishaevrequested to merge
sec-reorg-3-security-governance-pages into sec-reorg-1-scaffold-stage-pages

What does this MR do?

Third of five merge requests restructuring the Sec section handbook pages for the FY27 reorg. Moves the Security Governance group pages out of the retired security-risk-management/ and software-supply-chain-security/ directories.

This MR targets sec-reorg-2-security-platform-pages so the diff stays clean. GitLab retargets it as the earlier MRs merge.

Moves

All moves use git mv, so page history follows.

From To
security-risk-management/security-policies/ security-governance/policy-management/
software-supply-chain-security/compliance.md security-governance/compliance/
security-risk-management/srm-planning.md security-governance/planning.md

Security Policies keeps its page lineage on Policy Management, matching the label decision: group::security policies was renamed to group::policy management, so the history follows Policy Management. Policy Engine is a new page (added in MR 1) and its work items are retagged after cutover.

The stage-level SRM planning page becomes the Security Governance planning page, since Security Governance is the successor stage.

Redirects

Old URLs get 301 redirects in layouts/index.redirects, marked for removal 2027-08-06. Every inbound internal link was updated in this MR too, including the cross-page links inside the moved Policy Management pages and engineering/devops/_index.md.

Renames applied

Page titles and group identity lines only. Body content is left for each team to refresh.

  • Security Risk Management, Security Policies is now Policy Management Group
  • Security Risk Management Planning is now Security Governance Planning

Verification

  • markdownlint clean
  • vale clean (0 errors, 0 warnings)
  • No internal handbook link to a moved page remains. Remaining software-supply-chain-security/compliance matches are gitlab.com project URLs, which are unaffected by the handbook restructure.

Related

Merge request reports