This is an old revision of the document!
C.3.6 Compliance Management
Go to Crucible Functional Requirements
The Compliance Management requirements define how Crucible represents compliance baselines, invokes compliance-scanning tools through an operating-system-independent abstraction, records Compliance Findings, produces compliance reports and Evidence, and transfers applicable findings with the Artifacts they describe.
Together, these requirements establish repeatable Compliance Assessment behavior that contributes to compliance consistency, Auditability, Provenance, and Traceability.
Contents
Notes for Editors
The individual requirement pages should retain the stable identifiers FR-COMP-001 through FR-COMP-010.
Individual requirement pages are leaf nodes and should not include a trailing :start in their namespaces.
The Source Statement on each requirement page should preserve the original wording from the controlling System Requirements Specification.
Normalized Statements should use direct, testable behavior and should identify the applicable compliance criteria, assessed subject, assessment operation, Compliance Finding, report, or Evidence result.
Verification criteria should test only the behavior stated in the normalized Statement and should not introduce additional normative obligations.
Incoming Traceability should use the wiki Backlinks function rather than a manually maintained list.
To reference a requirement Statement from another wiki page, insert:
{{section><namespace>#Statement&noheader&nofooter&noeditbtn}}
Replace <namespace> with the namespace of the requirement leaf page.
The section name following # SHALL match the section heading verbatim on the requirement page.
Do not rename a requirement page after an external citation unless a redirect or move plan is in place.
© 2026 Dido Solutions, Inc. and Jackrabbit Consulting, Inc.