Conformance
Discussion
Conformance is the satisfaction of specified requirements.
The specified requirements may originate from a specification, Baseline, policy, profile, standard, or other identified source.
A determination of Conformance requires:
-
Identification of the applicable requirements
-
Identification of the subject being evaluated
-
Application of defined evaluation criteria
-
Collection of sufficient Evidence
-
A determination that the subject satisfies the applicable requirements
Conformance remains distinct from the activity used to determine Conformance. A conformance assessment evaluates whether a subject satisfies the applicable requirements.
Definition
satisfaction of specified requirements
Source
Dido Solutions, Inc. and Jackrabbit Consulting, Inc.
Note
Conformance applies only to identified requirements. A statement that a subject conforms without identifying the applicable requirements or their controlling source does not provide a complete conformance claim.
Conformance may apply to an implementation, system, Artifact, Infrastructure Environment, or another identified subject.
Conformance with a selected Security Baseline means satisfaction of the requirements established by that Security Baseline.
Conformance with a selected Compliance Baseline means satisfaction of the requirements established by that Compliance Baseline.
Example
An Infrastructure Environment conforms to a selected Security Baseline when the Environment satisfies each applicable requirement established by that Security Baseline.
© 2026 Dido Solutions, Inc. and Jackrabbit Consulting, Inc.