====== Governed ======

[[dido:99_annexes:annex-b-terms-and-definitions:start|Go up to Terms and Definitions]]

===== Discussion =====

A subject is Governed when an identified [[dido:99_annexes:annex-b-terms-and-definitions:a:authority|Authority]] applies defined [[dido:99_annexes:annex-b-terms-and-definitions:r:role|Roles]], [[dido:99_annexes:annex-b-terms-and-definitions:p:policy|Policies]], decision processes, accountability mechanisms, and oversight within an established scope.

A Governed subject has an identified governance context that can establish:

  * The governing Authority
  * The governed subject
  * The applicable scope
  * The applicable [[dido:99_annexes:annex-b-terms-and-definitions:g:governance_domain|Governance Domain]]
  * The applicable [[dido:99_annexes:annex-b-terms-and-definitions:o:organization|Organizations]]
  * The applicable [[dido:99_annexes:annex-b-terms-and-definitions:c:community_of_interest|Communities of Interest]]
  * The applicable [[dido:99_annexes:annex-b-terms-and-definitions:a:actor|Actors]]
  * The applicable Roles
  * The applicable responsibilities
  * The applicable decision rights
  * The applicable Policies
  * The applicable [[dido:99_annexes:annex-b-terms-and-definitions:g:governance_policy|Governance Policies]]
  * The applicable approval processes
  * The applicable change-control processes
  * The applicable exception and waiver processes
  * The applicable escalation processes
  * The applicable enforcement mechanisms
  * The applicable review processes
  * The applicable accountability mechanisms
  * The required [[dido:99_annexes:annex-b-terms-and-definitions:e:evidence|Evidence]]
  * The required [[dido:99_annexes:annex-b-terms-and-definitions:p:provenance|Provenance]]
  * The required [[dido:99_annexes:annex-b-terms-and-definitions:t:traceability|Traceability]]

A subject can be Governed throughout:

  * Creation
  * Registration
  * Classification
  * Review
  * Approval
  * Use
  * Modification
  * Versioning
  * Deployment
  * Operation
  * Validation
  * Retention
  * Supersession
  * Withdrawal
  * Retirement

A Governed subject can include:

  * An Organization
  * A Community of Interest
  * A User
  * A Role
  * A [[dido:99_annexes:annex-b-terms-and-definitions:n:node|Node]]
  * A [[dido:99_annexes:annex-b-terms-and-definitions:n:node_set|Node Set]]
  * A [[dido:99_annexes:annex-b-terms-and-definitions:t:test_environment|Test Environment]]
  * A [[dido:99_annexes:annex-b-terms-and-definitions:t:test_definition|Test Definition]]
  * A [[dido:99_annexes:annex-b-terms-and-definitions:t:test_run|Test Run]]
  * A [[dido:99_annexes:annex-b-terms-and-definitions:t:test_result|Test Result]]
  * A [[dido:99_annexes:annex-b-terms-and-definitions:b:baseline|Baseline]]
  * An [[dido:99_annexes:annex-b-terms-and-definitions:a:artifact|Artifact]]
  * A [[dido:99_annexes:annex-b-terms-and-definitions:r:resource|Resource]]
  * A [[dido:99_annexes:annex-b-terms-and-definitions:c:catalog|Catalog]]
  * A [[dido:99_annexes:annex-b-terms-and-definitions:r:repository|Repository]]
  * A [[dido:99_annexes:annex-b-terms-and-definitions:r:registry|Registry]]
  * An [[dido:99_annexes:annex-b-terms-and-definitions:i:inventory|Inventory]]
  * A process
  * A decision
  * Another subject placed within an established governance context

===== Definition =====

//subject to [[dido:99_annexes:annex-b-terms-and-definitions:g:governed|Governance]] exercised by an identified [[dido:99_annexes:annex-b-terms-and-definitions:a:authority|Authority]] through defined [[dido:99_annexes:annex-b-terms-and-definitions:r:role|Roles]], [[dido:99_annexes:annex-b-terms-and-definitions:p:policy|Policies]], decision processes, accountability mechanisms, and oversight within an established scope//

===== Source =====

Adapted from:

  * [[dido:99_annexes:annex-b-terms-and-definitions:g:governed|Governance]]
  * [[dido:99_annexes:annex-b-terms-and-definitions:a:authority|Authority]]
  * [[dido:99_annexes:annex-b-terms-and-definitions:r:role|Role]]
  * [[dido:99_annexes:annex-b-terms-and-definitions:p:policy|Policy]]
  * [[dido:99_annexes:annex-b-terms-and-definitions:g:governance_policy|Governance Policy]]
  * [[dido:99_annexes:annex-b-terms-and-definitions:g:governance_domain|Governance Domain]]
  * DIDO Reference Architecture
  * DIDO Reference Implementation Conceptual Model
  * DIDO-TE draft Requirements Register

This definition establishes the characteristics required to describe a subject as Governed. It prevents the term from serving as an undefined claim of control, approval, or oversight.

===== Note =====

Use the following link whenever the adjective appears:

<code dokuwiki>
[[dido:99_annexes:annex-b-terms-and-definitions:g:governed|Governed]]
</code>

Governed differs from managed:

  * Governed identifies the Authority, Roles, Policies, decision rights, accountability, and oversight applicable to a subject
  * Managed concerns the activities used to plan, administer, coordinate, monitor, or control a subject

A subject can be managed without an adequately defined governance context.

Governed differs from controlled:

  * Governed establishes who possesses Authority, which Policies apply, and how decisions receive accountability and oversight
  * Controlled indicates that mechanisms constrain or direct the subject’s behavior, state, access, or modification

A technical control does not by itself make a subject Governed.

Governed differs from authorized:

  * Governed identifies the governance context applicable to the subject
  * Authorized indicates that an Actor has granted permission for a specified action or use

A Governed subject is not necessarily authorized for every use.

Governed differs from approved:

  * Governed identifies the applicable governance framework and processes
  * Approved indicates that an authorized Actor has accepted a particular proposal, state, action, or outcome

A Governed subject can remain proposed, pending review, rejected, suspended, withdrawn, or retired.

Governed differs from compliant:

  * Governed identifies the applicable Authority, Policies, responsibilities, and decision processes
  * Compliant indicates satisfaction of identified obligations or criteria

A Governed subject can be noncompliant. Governance establishes how the responsible Actors identify, evaluate, report, and address the noncompliance.

Governed differs from [[dido:99_annexes:annex-b-terms-and-definitions:v:validation|Validated]]:

  * Governed identifies the applicable governance context
  * Validated indicates that an authorized Actor has evaluated the subject against defined Validation Criteria for a stated purpose

A Governed subject is not necessarily Validated. A Validated subject is not necessarily Governed unless the Validation occurs within an established governance context.

Describing a subject as Governed requires more than the existence of a Policy. The governance context must identify, directly or through referenced information:

  * The governing Authority
  * The governed subject
  * The applicable scope
  * The responsible Roles
  * The applicable Policies
  * The applicable decision processes
  * The applicable accountability mechanisms
  * The applicable review and enforcement mechanisms
  * The Evidence required to demonstrate application of Governance
  * The required Provenance and Traceability

Governance can be centralized, distributed, or federated. Distributed or federated Governance must identify how participating Authorities coordinate:

  * Decision rights
  * Policy precedence
  * Conflicts
  * Exceptions
  * Delegations
  * Accountability
  * Evidence
  * Provenance
  * Traceability

===== Example =====

A DIDO-TE Test Environment is Governed when the applicable governance context identifies:

  * The Organization responsible for the Test Environment
  * The governing Authority
  * The applicable Governance Domain
  * The Test Administrator, Test Operator, Evaluator, and Approval Authority Roles
  * The Policies governing creation, configuration, access, use, modification, and retirement
  * The approved Baseline
  * The Test Definitions authorized for use
  * The Resources authorized for allocation
  * The process for initiating Test Runs
  * The Validation Criteria
  * The process for assigning Verdicts
  * The process for making Validation Decisions
  * The required Evidence
  * The required Provenance
  * The required Traceability

The Test Environment is not Governed merely because an administrator can configure it or an access-control mechanism restricts its use. The identified Authority, Roles, Policies, decision processes, accountability mechanisms, oversight, and Evidence establish that the Test Environment is Governed.

----

<WRAP centeralign>
© 2026 Dido Solutions, Inc. and Jackrabbit Consulting, Inc.
</WRAP>