[COMMITTED] faq: Add 2 new entries with link to charter and SSDLC.

Add a question and answer about CTI's charter.

Add a question and answer about the GNU Toolchain SSDLCs.

Signed-off-by: Carlos O'Donell <[email protected]>
---
 source/faq/index.rst | 11 +++++++++++
 1 file changed, 11 insertions(+)

diff --git a/source/faq/index.rst b/source/faq/index.rst
index 81bdc3c..08e731f 100644
--- a/source/faq/index.rst
+++ b/source/faq/index.rst
@@ -59,6 +59,13 @@ Some of the major goals include:
 
 * Prepare for additional software supply chain requirements from
 
+Does the GNU Toolchain or the projects have documented security requirements?
+"""""""""""""""""""""""""""""""""""""""""""""""""""""""""""""""""""""""""""""
+
+Yes, in 2025 the CTI TAC worked with the community to write these requirements
+into a series of SSDLC documents. The project notes are documented
+here: `CY25: Define a SSDLC for the GNU Toolchain <https://cti.coretoolchain.dev/projects/glibc.html#cy25-define-a-ssdlc-for-the-gnu-toolchain>`_.
+
 Why are you currently using Linux Foundation IT as the service provider?
 """"""""""""""""""""""""""""""""""""""""""""""""""""""""""""""""""""""""
 The CTI TAC recommendation is to use Linux Foundation IT services for
@@ -171,6 +178,10 @@ Are there any presentations covering CTI?
 """""""""""""""""""""""""""""""""""""""""
 Yes, in October 2022 the CTI TAC gave an `FSF hosted community Q&A <https://media.libreplanet.org/u/libreplanet/m/the-gti-project-a-conversation-and-community-q-a/>`_.
 
+Does CTI have a governance charter?
+"""""""""""""""""""""""""""""""""""
+Yes, this is part of the associated directed funds governance documents and is located here: `The Core Toolchain Initiative Fund Charter <https://cti.coretoolchain.dev/gov/charter.html>`_.
+
 -----------------
 
 * :ref:`genindex`
-- 
2.52.0