Skip to content
GitLab
Next

FY20-Q3 Security Team OKR: Build next phase of Zero Trust Roadmap => 50%

  • KR: Work with Infrastructure to roll out WAF to staging => 50%, evaluated WAF, came to conclusion that WAF functionality cannot be successfully deployed because it would break GitLab (controlled code injection or/and display of code is a feature of GitLab)
  • KR: Work with Infrastructure to roll out WAF to canary => 50%, evaluated WAF, came to conclusion that WAF functionality cannot be successfully deployed because it would break GitLab (controlled code injection or/and display of code is a feature of GitLab)
  • KR: Work with Infrastructure to roll out WAF to production => 50%, evaluated WAF, came to conclusion that WAF functionality cannot be successfully deployed because it would break GitLab (controlled code injection or/and display of code is a feature of GitLab)
  • KR: Identify and roll out device management to beta group for pilot => 50%, this has been moved to IT Ops
  • KR: Develop a Ring Zero model to prioritize ZT coverage of existing assets => 100%, we are working with Infra on deploying Okta ASA and have started the discussion around BYOD/MDM.
Edited by Jan Urbanc