This shows you the differences between two versions of the page.
| Both sides previous revision Previous revision | |
| dido:99_annexes:annex-b-terms-and-definitions:c:compliance_baseline [2026/07/13 12:02] – nick_dido | dido:99_annexes:annex-b-terms-and-definitions:c:compliance_baseline [2026/07/18 12:33] (current) – external edit 127.0.0.1 |
|---|
| ===== Discussion ===== | ===== Discussion ===== |
| |
| A Compliance Baseline is a [[dido:99_annexes:annex-b-terms-and-definitions:b:baseline|Baseline]] that identifies the approved compliance criteria, benchmarks, profiles, controls, assessment settings, remediation expectations, and evidence requirements applicable to a defined system, artefact, environment, or process. | A Compliance Baseline is a [[dido:99_annexes:annex-b-terms-and-definitions:b:baseline|Baseline]] that identifies the approved compliance criteria, benchmarks, profiles, controls, assessment settings, remediation expectations, and evidence requirements applicable to a defined system, artifact, environment, or process. |
| |
| The Compliance Baseline establishes the controlled reference against which compliance findings and evidence are assessed. | The Compliance Baseline establishes the controlled reference against which compliance findings and evidence are assessed. |
| ===== Example ===== | ===== Example ===== |
| |
| A Compliance Baseline identifies a specific DISA [[dido:99_annexes:annex-b-terms-and-definitions:s:stig]] benchmark release, the selected operating-system profile, enabled remediation, approved tailoring decisions, required scan stages, and the evidence artefacts produced from the assessment. | A Compliance Baseline identifies a specific DISA [[dido:99_annexes:annex-b-terms-and-definitions:s:stig]] benchmark release, the selected operating-system profile, enabled remediation, approved tailoring decisions, required scan stages, and the evidence artifacts produced from the assessment. |
| |
| ---- | ---- |