Conformance

Conformance is the satisfaction of specified requirements.

The specified requirements may originate from a specification, Baseline, policy, profile, standard, or other identified source.

A determination of Conformance requires:

  • Identification of the applicable requirements
  • Identification of the subject being evaluated
  • Application of defined evaluation criteria
  • Collection of sufficient Evidence
  • A determination that the subject satisfies the applicable requirements

Conformance remains distinct from the activity used to determine Conformance. A conformance assessment evaluates whether a subject satisfies the applicable requirements.

satisfaction of specified requirements

Dido Solutions, Inc. and Jackrabbit Consulting, Inc.

Conformance applies only to identified requirements. A statement that a subject conforms without identifying the applicable requirements or their controlling source does not provide a complete conformance claim.

Conformance may apply to an implementation, system, Artifact, Infrastructure Environment, or another identified subject.

Conformance with a selected Security Baseline means satisfaction of the requirements established by that Security Baseline.

Conformance with a selected Compliance Baseline means satisfaction of the requirements established by that Compliance Baseline.

An Infrastructure Environment conforms to a selected Security Baseline when the Environment satisfies each applicable requirement established by that Security Baseline.


© 2026 Dido Solutions, Inc. and Jackrabbit Consulting, Inc.

  • dido/99_annexes/annex-b-terms-and-definitions/c/conformance.txt
  • Last modified: 2026/07/20 07:34
  • by nick_dido