GitLab Security Controls - Revision 2

Why is this change being made?

Major revision to GitLab security control framework based on lessons learned in FY20 and through the course of the SOC2 Type 1 external audit. Additional details here: https://gitlab.com/gitlab-com/gl-security/compliance/compliance/-/issues/1664

Does this MR meet the acceptance criteria?

Assign to DRI

• Did you assign this change to the correct DRI of the page or information you are changing?

Conformity

• Added description to this MR explaining the reasons for the proposed change, per say-why-not-just-what