Baseline Selection

Go to Terms and Definitions

Baseline Selection chooses an identified Baseline Revision for application to a specified subject, activity, or context.

The selection may depend on:

• The subject being governed
• The target Infrastructure Environment
• The deployment purpose
• The implementation platform
• Security classification
• Applicable policy
• Applicable jurisdiction
• Delivery phase
• Operational state
• Effective date
• Approval status
• Compatibility constraints

Baseline Selection may choose:

• An Infrastructure Baseline
• A Security Baseline
• A Deployment Baseline
• A Machine Image Baseline
• A Compliance Baseline
• A composition of multiple Baselines

Baseline Selection differs from Baseline Approval:

• Baseline Approval authorizes a Baseline Revision for a defined use
• Baseline Selection chooses the approved or otherwise applicable Baseline Revision for a particular context

Baseline Selection also differs from Baseline Composition:

• Baseline Selection chooses one or more applicable Baselines
• Baseline Composition combines selected Baseline content according to defined composition rules

selection of an identified baseline revision for application to a specified subject, activity, or context

Dido Solutions, Inc. and Jackrabbit Consulting, Inc.

Baseline Selection should identify:

• The selected Baseline
• The selected Revision
• The subject or activity to which it applies
• The selection criteria
• The effective context
• The selecting actor or process

Selection of a Baseline does not by itself establish that the Baseline is approved or that the subject conforms to it.

Applicable requirements determine whether only approved Baselines may be selected.

A deployment workflow selects the approved production Security Baseline Revision applicable to the target operating system and security classification.