GITLABOFF_COMPLIANCE

GitLab Compliance Training

This class covers all of the essential compliance capabilities of GitLab, including compliance frameworks, repository control, merge request approval policies, pipeline execution policies, scan execution policies, audit management, and reporting. Since most of these features are only available for customers with an Ultimate license, this course is intended for Ultimate customers only.

GitLab
✓ Official training GitLabLevel Intermediate⏱️ 1 day (7h)

What you will learn

  • Learn to use GitLab's essential compliance capabilities
  • Understand and apply compliance frameworks and project scoping
  • Control repository access and enforce code review processes
  • Manage merge request approval policies for licenses and security scans
  • Define and enforce pipeline and scan execution policies
  • Manage and consolidate audit events and logs
  • Generate audit, compliance, and SBOM reports
  • Use role-based access control to limit data access

Prerequisites

  • GitLab Fundamentals course or equivalent knowledge
  • GitLab CI/CD course or equivalent knowledge
  • Basic knowledge of Git, GitLab, and GitLab CI/CD
  • Computer with internet access and Git installed

Target audience

  • Compliance managers, Compliance program managers, Audit report analysts, Audit events analysts who are using GitLab with the Ultimate license

Training Program

8 modules to master the fundamentals

Topics covered
  • →Meet regulatory requirements
  • →Track your projects
  • →Enforce organizational standards
  • →Manage separation of duties
Topics covered
  • →Identify and enforce compliance requirements
  • →Scope projects based on risk level
  • →Create an audit trail
Topics covered
  • →Control what can be pushed to a repository
  • →Enforce code review processes
  • →Prevent force pushes
  • →Require approval from the correct people
Topics covered
  • →Manage the use of open-source licenses
  • →Automate license scanning
  • →Use security scan results
Topics covered
  • →Ensure projects use a required job
  • →Ensure standard pipeline across your organization
  • →Add custom logic and apply it at scale
Topics covered
  • →Ensure security scans are consistently applied
  • →Balance stringent security checks and developer productivity
Topics covered
  • →Stream audit events
  • →Consolidate audit logs
  • →Track security-related action
Topics covered
  • →Align with industry standards
  • →Generate audit reports, compliance reports, and SBOM reports
  • →Use role-based access control to limit access to data

Related Trainings

AWS

Security Engineering on AWS

Security is a concern for both customers in the cloud, and those considering cloud adoption. An increase in cyberattacks and data leaks remains top of mind for most industry personnel. The Security Engineering on AWS course addresses these concerns by helping you better understand how to interact and build with Amazon Web Services (AWS) in a secure way. In this course, you will learn about managing identities and roles, managing and provisioning accounts, and monitoring API activity for anomalies. You will also learn about how to protect data stored on AWS. The course explores how you can generate, collect, and monitor logs to help identify security incidents. Finally, you will review detecting and investigating security incidents with AWS services.

3 d
Intermediate
AWS

AWS Security Essentials

This course covers fundamental Amazon Web Services (AWS) security concepts, including AWS access control, data encryption methods, and how to secure network access to your AWS infrastructure. Based on the AWS Shared Responsibility Model, you learn your responsibilities related to implementing security in the AWS Cloud and which security-oriented services are available to you. You also learn why and how the security services help meet the security needs of your organization.

1 d
Fundamental
Google Cloud

Model Armor: Securing AI Deployments

This course explains how to use Model Armor to protect AI applications, specifically large language models (LLMs). The curriculum covers Model Armor's architecture and its role in mitigating threats like malicious URLs, prompt injection, jailbreaking, sensitive data leaks, and improper output handling. Practical skills include defining floor settings, configuring templates, and enabling various detection types. You'll also explore sample audit logs to find details about flagged violations.

0.5 d
Fundamental

Upcoming sessions

No date suits you?

We regularly organize new sessions. Contact us to find out about upcoming dates or to schedule a session at a date of your choice.

Register for a custom date

Quality Process

SFEIR Institute's commitment: an excellence approach to ensure the quality and success of all our training programs. Learn more about our quality approach

Teaching Methods Used
  • Lectures / Theoretical Slides — Presentation of concepts using visual aids (PowerPoint, PDF).
  • Technical Demonstration (Demos) — The instructor performs a task or procedure while students observe.
  • Guided Labs — Guided practical exercises on software, hardware, or technical environments.
Evaluation and Monitoring System

The achievement of training objectives is evaluated at multiple levels to ensure quality:

  • Continuous Knowledge Assessment : Verification of knowledge throughout the training via participatory methods (quizzes, practical exercises, case studies) under instructor supervision.
  • Progress Measurement : Comparative self-assessment system including an initial diagnostic to determine the starting level, followed by a final evaluation to validate skills development.
  • Quality Evaluation : End-of-session satisfaction questionnaire to measure the relevance and effectiveness of the training as perceived by participants.

790€ excl. VAT

per learner