====== Governance Policy ====== [[dido:99_annexes:annex-b-terms-and-definitions:start|Go up to Terms and Definitions]] ===== Discussion ===== A Governance Policy is a [[dido:99_annexes:annex-b-terms-and-definitions:p:policy|Policy]] that establishes the authority, rules, constraints, responsibilities, and decision processes used to govern an entity, activity, resource, or domain. A Governance Policy can govern: * An [[dido:99_annexes:annex-b-terms-and-definitions:o:organization|Organization]] * A [[dido:99_annexes:annex-b-terms-and-definitions:c:community_of_interest|Community of Interest]] * A [[dido:99_annexes:annex-b-terms-and-definitions:g:governance_domain|Governance Domain]] * A [[dido:99_annexes:annex-b-terms-and-definitions:u:user|User]] * A [[dido:99_annexes:annex-b-terms-and-definitions:r:role|Role]] * A [[dido:99_annexes:annex-b-terms-and-definitions:n:node|Node]] * A [[dido:99_annexes:annex-b-terms-and-definitions:n:node_set|Node Set]] * A [[dido:99_annexes:annex-b-terms-and-definitions:t:test_environment|Test Environment]] * A [[dido:99_annexes:annex-b-terms-and-definitions:t:test_object|Test Object]] * A [[dido:99_annexes:annex-b-terms-and-definitions:t:test_run|Test Run]] * A [[dido:99_annexes:annex-b-terms-and-definitions:t:test_result|Test Result]] * An [[dido:99_annexes:annex-b-terms-and-definitions:a:artifact|Artifact]] * A [[dido:99_annexes:annex-b-terms-and-definitions:b:baseline|Baseline]] * A [[dido:99_annexes:annex-b-terms-and-definitions:c:catalog|Catalog]] * An [[dido:99_annexes:annex-b-terms-and-definitions:o:operational_resource|Operational Resource]] * A process * A decision * Another governed subject A Governance Policy can establish: * The governing authority * The governed subject * The applicable scope * The applicable jurisdiction * The responsible Roles * Permitted actions * Required actions * Prohibited actions * Decision rights * Approval requirements * Access constraints * Change-control rules * Versioning rules * Retention requirements * Evidence requirements * Evaluation criteria * Arbitration rules * Exception processes * Escalation processes * Enforcement mechanisms * Review requirements * Effective dates * Supersession conditions A Governance Policy can identify: * Its identity * Its name * Its description * Its [[dido:99_annexes:annex-b-terms-and-definitions:v:version|Version]] * Its governing authority * Its governed subjects * Its applicable Governance Domain * Its applicable Organizations * Its applicable Communities of Interest * Its applicable Roles * Its effective time * Its expiration time * Its status * Its precedence * Its dependencies * Its enforcement mechanism * Its exception authority * Its [[dido:99_annexes:annex-b-terms-and-definitions:p:provenance|Provenance]] * Its [[dido:99_annexes:annex-b-terms-and-definitions:t:traceability|Traceability]] ===== Definition ===== //[[dido:99_annexes:annex-b-terms-and-definitions:p:policy|Policy]] that establishes the authority, rules, constraints, responsibilities, and decision processes used to govern a subject// ===== Source ===== Adapted from: * [[dido:99_annexes:annex-b-terms-and-definitions:p:policy|Policy]] * [[dido:99_annexes:annex-b-terms-and-definitions:g:governance_domain|Governance Domain]] * DIDO Reference Architecture * DIDO Reference Implementation Conceptual Model * DIDO-TE draft Requirements Register This definition treats Governance Policy as a specialization of Policy. It adds the authority, responsibility, decision-right, enforcement, and accountability characteristics required for governance. ===== Note ===== Every Governance Policy is a [[dido:99_annexes:annex-b-terms-and-definitions:p:policy|Policy]]. A Policy is not necessarily a Governance Policy. A Governance Policy differs from a [[dido:99_annexes:annex-b-terms-and-definitions:g:governance_domain|Governance Domain]]: * A Governance Domain identifies the scope within which a governing authority applies governance * A Governance Policy establishes rules and decision processes applicable within that scope A Governance Policy differs from a [[dido:99_annexes:annex-b-terms-and-definitions:r:requirement|Requirement]]: * A Governance Policy establishes governing direction, constraints, responsibilities, or decision processes * A Requirement states a necessary capability, behavior, quality, or constraint that a responsible subject must satisfy A Governance Policy can provide the source or rationale for one or more Requirements. The Requirements must state the resulting obligations in objectively verifiable form. A Governance Policy differs from [[dido:99_annexes:annex-b-terms-and-definitions:a:acceptance_criteria|Acceptance Criteria]]: * A Governance Policy establishes governing rules and authority * Acceptance Criteria establish the conditions used to determine whether an evaluated subject or outcome is acceptable A Governance Policy can require an authority to establish or approve Acceptance Criteria. A Governance Policy differs from a [[dido:99_annexes:annex-b-terms-and-definitions:v:verdict|Verdict]]: * A Governance Policy establishes the permitted Verdict values and the rules for assigning or using them * A Verdict classifies a Test Result according to those rules A Governance Policy differs from a [[dido:99_annexes:annex-b-terms-and-definitions:v:validation_decision|Validation Decision]]: * A Governance Policy establishes who can make the Validation Decision and which criteria apply * A Validation Decision records the determination made by applying those criteria A Governance Policy does not govern effectively unless the policy identifies, directly or through referenced information: * An authoritative source * A governed subject * An applicable scope * Responsible Roles * Applicable rules or constraints * An effective period * A means of determining compliance * A process for handling exceptions or violations Multiple Governance Policies can apply to the same subject. The applicable governance framework must resolve: * Precedence * Overlap * Conflict * Exceptions * Jurisdiction * Supersession A Governance Policy can be represented as natural-language text, structured data, executable rules, or a combination of representations. The representation does not change the governing meaning of the policy. An automated mechanism can enforce a Governance Policy, but automation does not create the governing authority. The applicable Organization, Community of Interest, or authorized Role establishes that authority. A change to a Governance Policy can create a new [[dido:99_annexes:annex-b-terms-and-definitions:v:version|Version]]. The applicable change-control process should preserve: * The previous Version * The revised Version * The reason for the change * The approving authority * The effective time * The affected subjects * The applicable Provenance * The applicable Traceability ===== Example ===== A DIDO-TE Governance Policy governs the approval and use of a [[dido:99_annexes:annex-b-terms-and-definitions:b:baseline|Baseline]]. The Governance Policy establishes: * The Organization that owns the Baseline * The Governance Domain in which the Baseline applies * The Roles authorized to propose, review, approve, supersede, or withdraw the Baseline * The required [[dido:99_annexes:annex-b-terms-and-definitions:e:evidence|Evidence]] * The applicable [[dido:99_annexes:annex-b-terms-and-definitions:a:acceptance_criteria|Acceptance Criteria]] * The required [[dido:99_annexes:annex-b-terms-and-definitions:t:test_results|Test Results]] * The permitted [[dido:99_annexes:annex-b-terms-and-definitions:v:verdict|Verdicts]] * The process for making a [[dido:99_annexes:annex-b-terms-and-definitions:v:validation_decision|Validation Decision]] * The treatment of failed, incomplete, interrupted, or repeated [[dido:99_annexes:annex-b-terms-and-definitions:t:test_run|Test Runs]] * The change-control process for replacing the Baseline * The required Provenance and Traceability An authorized Role applies the Governance Policy when reviewing the Test Results and Evidence associated with a proposed Baseline. ---- © 2026 Dido Solutions, Inc. and Jackrabbit Consulting, Inc.