### Problem to solve In https://gitlab.com/groups/gitlab-org/-/epics/13295+ we are making Compliance Frameworks and their Requirements/Controls customisable. This gives users the flexibility to create compliance frameworks as a label to identify that a project has certain compliance requirements or needs additional oversight. But with all this flexibility it will require users to configure everything, taking time and potential for mistakes. ### Proposal In https://gitlab.com/groups/gitlab-org/-/epics/16504+ we are exploring ways to overcome this problem through templates library within the product. But to quickly get users up to speed for configuring new Compliance Framework we want to create a repository of framework templates and the ability to upload/download them to a Compliance Framework through an API and UI ### Implementation plan - A public project repo and store 2-3 common framework templates - A API to upload a framework template to a compliance framework - If the compliance framework is already configured (requirements/controls) this will require an override key - A API to download a compliance framework in a defined format - A button in the UI to upload a framework template to a compliance framework - If the compliance framework is already configured (requirements/controls) this will require an override key - A button in the UI to download a compliance framework in a defined format Format should be in JSON format Research on the critical standards is being done in this issue https://gitlab.com/gitlab-org/ux-research/-/issues/2719+ <!-- triage-serverless v3 PLEASE DO NOT REMOVE THIS SECTION --> *This page may contain information related to upcoming products, features and functionality. It is important to note that the information presented is for informational purposes only, so please do not rely on the information for purchasing or planning purposes. Just like with all projects, the items mentioned on the page are subject to change or delay, and the development, release, and timing of any products, features, or functionality remain at the sole discretion of GitLab Inc.* <!-- triage-serverless v3 PLEASE DO NOT REMOVE THIS SECTION -->