Governance Policy [Dido Solutions, Inc Wiki]

This page is read only. You can view the source, but not change it. Ask your administrator if you think this is wrong.
====== Governance Policy ======

[[dido:99_annexes:annex-b-terms-and-definitions:start|Go up to Terms and Definitions]]

===== Discussion =====

A Governance Policy is a [[dido:99_annexes:annex-b-terms-and-definitions:p:policy|Policy]] that establishes the authority, rules, constraints, responsibilities, and decision processes used to govern an entity, activity, resource, or domain.

A Governance Policy can govern:

  * An [[dido:99_annexes:annex-b-terms-and-definitions:o:organization|Organization]]
  * A [[dido:99_annexes:annex-b-terms-and-definitions:c:community_of_interest|Community of Interest]]
  * A [[dido:99_annexes:annex-b-terms-and-definitions:g:governance_domain|Governance Domain]]
  * A [[dido:99_annexes:annex-b-terms-and-definitions:u:user|User]]
  * A [[dido:99_annexes:annex-b-terms-and-definitions:r:role|Role]]
  * A [[dido:99_annexes:annex-b-terms-and-definitions:n:node|Node]]
  * A [[dido:99_annexes:annex-b-terms-and-definitions:n:node_set|Node Set]]
  * A [[dido:99_annexes:annex-b-terms-and-definitions:t:test_environment|Test Environment]]
  * A [[dido:99_annexes:annex-b-terms-and-definitions:t:test_object|Test Object]]
  * A [[dido:99_annexes:annex-b-terms-and-definitions:t:test_run|Test Run]]
  * A [[dido:99_annexes:annex-b-terms-and-definitions:t:test_result|Test Result]]
  * An [[dido:99_annexes:annex-b-terms-and-definitions:a:artifact|Artifact]]
  * A [[dido:99_annexes:annex-b-terms-and-definitions:b:baseline|Baseline]]
  * A [[dido:99_annexes:annex-b-terms-and-definitions:c:catalog|Catalog]]
  * An [[dido:99_annexes:annex-b-terms-and-definitions:o:operational_resource|Operational Resource]]
  * A process
  * A decision
  * Another governed subject

A Governance Policy can establish:

  * The governing authority
  * The governed subject
  * The applicable scope
  * The applicable jurisdiction
  * The responsible Roles
  * Permitted actions
  * Required actions
  * Prohibited actions
  * Decision rights
  * Approval requirements
  * Access constraints
  * Change-control rules
  * Versioning rules
  * Retention requirements
  * Evidence requirements
  * Evaluation criteria
  * Arbitration rules
  * Exception processes
  * Escalation processes
  * Enforcement mechanisms
  * Review requirements
  * Effective dates
  * Supersession conditions

A Governance Policy can identify:

  * Its identity
  * Its name
  * Its description
  * Its [[dido:99_annexes:annex-b-terms-and-definitions:v:version|Version]]
  * Its governing authority
  * Its governed subjects
  * Its applicable Governance Domain
  * Its applicable Organizations
  * Its applicable Communities of Interest
  * Its applicable Roles
  * Its effective time
  * Its expiration time
  * Its status
  * Its precedence
  * Its dependencies
  * Its enforcement mechanism
  * Its exception authority
  * Its [[dido:99_annexes:annex-b-terms-and-definitions:p:provenance|Provenance]]
  * Its [[dido:99_annexes:annex-b-terms-and-definitions:t:traceability|Traceability]]

===== Definition =====

//[[dido:99_annexes:annex-b-terms-and-definitions:p:policy|Policy]] that establishes the authority, rules, constraints, responsibilities, and decision processes used to govern a subject//

===== Source =====

Adapted from:

  * [[dido:99_annexes:annex-b-terms-and-definitions:p:policy|Policy]]
  * [[dido:99_annexes:annex-b-terms-and-definitions:g:governance_domain|Governance Domain]]
  * DIDO Reference Architecture
  * DIDO Reference Implementation Conceptual Model
  * DIDO-TE draft Requirements Register

This definition treats Governance Policy as a specialization of Policy. It adds the authority, responsibility, decision-right, enforcement, and accountability characteristics required for governance.

===== Note =====

Every Governance Policy is a [[dido:99_annexes:annex-b-terms-and-definitions:p:policy|Policy]]. A Policy is not necessarily a Governance Policy.

A Governance Policy differs from a [[dido:99_annexes:annex-b-terms-and-definitions:g:governance_domain|Governance Domain]]:

  * A Governance Domain identifies the scope within which a governing authority applies governance
  * A Governance Policy establishes rules and decision processes applicable within that scope

A Governance Policy differs from a [[dido:99_annexes:annex-b-terms-and-definitions:r:requirement|Requirement]]:

  * A Governance Policy establishes governing direction, constraints, responsibilities, or decision processes
  * A Requirement states a necessary capability, behavior, quality, or constraint that a responsible subject must satisfy

A Governance Policy can provide the source or rationale for one or more Requirements. The Requirements must state the resulting obligations in objectively verifiable form.

A Governance Policy differs from [[dido:99_annexes:annex-b-terms-and-definitions:a:acceptance_criteria|Acceptance Criteria]]:

  * A Governance Policy establishes governing rules and authority
  * Acceptance Criteria establish the conditions used to determine whether an evaluated subject or outcome is acceptable

A Governance Policy can require an authority to establish or approve Acceptance Criteria.

A Governance Policy differs from a [[dido:99_annexes:annex-b-terms-and-definitions:v:verdict|Verdict]]:

  * A Governance Policy establishes the permitted Verdict values and the rules for assigning or using them
  * A Verdict classifies a Test Result according to those rules

A Governance Policy differs from a [[dido:99_annexes:annex-b-terms-and-definitions:v:validation_decision|Validation Decision]]:

  * A Governance Policy establishes who can make the Validation Decision and which criteria apply
  * A Validation Decision records the determination made by applying those criteria

A Governance Policy does not govern effectively unless the policy identifies, directly or through referenced information:

  * An authoritative source
  * A governed subject
  * An applicable scope
  * Responsible Roles
  * Applicable rules or constraints
  * An effective period
  * A means of determining compliance
  * A process for handling exceptions or violations

Multiple Governance Policies can apply to the same subject. The applicable governance framework must resolve:

  * Precedence
  * Overlap
  * Conflict
  * Exceptions
  * Jurisdiction
  * Supersession

A Governance Policy can be represented as natural-language text, structured data, executable rules, or a combination of representations. The representation does not change the governing meaning of the policy.

An automated mechanism can enforce a Governance Policy, but automation does not create the governing authority. The applicable Organization, Community of Interest, or authorized Role establishes that authority.

A change to a Governance Policy can create a new [[dido:99_annexes:annex-b-terms-and-definitions:v:version|Version]]. The applicable change-control process should preserve:

  * The previous Version
  * The revised Version
  * The reason for the change
  * The approving authority
  * The effective time
  * The affected subjects
  * The applicable Provenance
  * The applicable Traceability

===== Example =====

A DIDO-TE Governance Policy governs the approval and use of a [[dido:99_annexes:annex-b-terms-and-definitions:b:baseline|Baseline]].

The Governance Policy establishes:

  * The Organization that owns the Baseline
  * The Governance Domain in which the Baseline applies
  * The Roles authorized to propose, review, approve, supersede, or withdraw the Baseline
  * The required [[dido:99_annexes:annex-b-terms-and-definitions:e:evidence|Evidence]]
  * The applicable [[dido:99_annexes:annex-b-terms-and-definitions:a:acceptance_criteria|Acceptance Criteria]]
  * The required [[dido:99_annexes:annex-b-terms-and-definitions:t:test_results|Test Results]]
  * The permitted [[dido:99_annexes:annex-b-terms-and-definitions:v:verdict|Verdicts]]
  * The process for making a [[dido:99_annexes:annex-b-terms-and-definitions:v:validation_decision|Validation Decision]]
  * The treatment of failed, incomplete, interrupted, or repeated [[dido:99_annexes:annex-b-terms-and-definitions:t:test_run|Test Runs]]
  * The change-control process for replacing the Baseline
  * The required Provenance and Traceability

An authorized Role applies the Governance Policy when reviewing the Test Results and Evidence associated with a proposed Baseline.

----

<WRAP centeralign>
© 2026 Dido Solutions, Inc. and Jackrabbit Consulting, Inc.
</WRAP>