====== Conformance ====== [[dido:99_annexes:annex-b-terms-and-definitions:start|Go to Terms and Definitions]] ===== Discussion ===== Conformance is the satisfaction of specified requirements. The specified requirements may originate from a specification, [[dido:99_annexes:annex-b-terms-and-definitions:b:baseline|Baseline]], policy, profile, standard, or other identified source. A determination of Conformance requires: * Identification of the applicable requirements * Identification of the subject being evaluated * Application of defined evaluation criteria * Collection of sufficient [[dido:99_annexes:annex-b-terms-and-definitions:e:evidence|Evidence]] * A determination that the subject satisfies the applicable requirements Conformance remains distinct from the activity used to determine Conformance. A conformance assessment evaluates whether a subject satisfies the applicable requirements. ===== Definition ===== //satisfaction of specified requirements// ===== Source ===== Dido Solutions, Inc. and Jackrabbit Consulting, Inc. ===== Note ===== Conformance applies only to identified requirements. A statement that a subject conforms without identifying the applicable requirements or their controlling source does not provide a complete conformance claim. Conformance may apply to an implementation, system, [[dido:99_annexes:annex-b-terms-and-definitions:a:artifact|Artifact]], [[dido:99_annexes:annex-b-terms-and-definitions:i:infrastructure_environment|Infrastructure Environment]], or another identified subject. Conformance with a selected Security Baseline means satisfaction of the requirements established by that Security Baseline. Conformance with a selected Compliance Baseline means satisfaction of the requirements established by that Compliance Baseline. ===== Example ===== An Infrastructure Environment conforms to a selected Security Baseline when the Environment satisfies each applicable requirement established by that Security Baseline. ---- © 2026 Dido Solutions, Inc. and Jackrabbit Consulting, Inc.