Governed

Go up to Terms and Definitions

Discussion

A subject is Governed when an identified Authority applies defined Roles, Policies, decision processes, accountability mechanisms, and oversight within an established scope.

A Governed subject has an identified governance context that can establish:

The governing AuthorityThe governed subjectThe applicable scopeThe applicable Governance DomainThe applicable OrganizationsThe applicable Communities of InterestThe applicable ActorsThe applicable RolesThe applicable responsibilitiesThe applicable decision rightsThe applicable PoliciesThe applicable Governance PoliciesThe applicable approval processesThe applicable change-control processesThe applicable exception and waiver processesThe applicable escalation processesThe applicable enforcement mechanismsThe applicable review processesThe applicable accountability mechanismsThe required EvidenceThe required ProvenanceThe required TraceabilityA subject can be Governed throughout:

CreationRegistrationClassificationReviewApprovalUseModificationVersioningDeploymentOperationValidationRetentionSupersessionWithdrawalRetirementA Governed subject can include:

An OrganizationA Community of InterestA UserA RoleA NodeA Node SetA Test EnvironmentA Test DefinitionA Test RunA Test ResultA BaselineAn ArtifactA ResourceA CatalogA RepositoryA RegistryAn InventoryA processA decisionAnother subject placed within an established governance context

Definition

subject to Governance exercised by an identified Authority through defined Roles, Policies, decision processes, accountability mechanisms, and oversight within an established scope

Source

Adapted from:

DIDO Reference ArchitectureDIDO Reference Implementation Conceptual ModelDIDO-TE draft Requirements RegisterThis definition establishes the characteristics required to describe a subject as Governed. It prevents the term from serving as an undefined claim of control, approval, or oversight.

Note

Use the following link whenever the adjective appears:

[[dido:99_annexes:annex-b-terms-and-definitions:g:governed|Governed]]

Governed differs from managed:

Governed identifies the Authority, Roles, Policies, decision rights, accountability, and oversight applicable to a subjectManaged concerns the activities used to plan, administer, coordinate, monitor, or control a subjectA subject can be managed without an adequately defined governance context.

Governed differs from controlled:

Governed establishes who possesses Authority, which Policies apply, and how decisions receive accountability and oversightControlled indicates that mechanisms constrain or direct the subject’s behavior, state, access, or modificationA technical control does not by itself make a subject Governed.

Governed differs from authorized:

Governed identifies the governance context applicable to the subjectAuthorized indicates that an Actor has granted permission for a specified action or useA Governed subject is not necessarily authorized for every use.

Governed differs from approved:

Governed identifies the applicable governance framework and processesApproved indicates that an authorized Actor has accepted a particular proposal, state, action, or outcomeA Governed subject can remain proposed, pending review, rejected, suspended, withdrawn, or retired.

Governed differs from compliant:

Governed identifies the applicable Authority, Policies, responsibilities, and decision processesCompliant indicates satisfaction of identified obligations or criteriaA Governed subject can be noncompliant. Governance establishes how the responsible Actors identify, evaluate, report, and address the noncompliance.

Governed differs from Validated:

Governed identifies the applicable governance contextValidated indicates that an authorized Actor has evaluated the subject against defined Validation Criteria for a stated purposeA Governed subject is not necessarily Validated. A Validated subject is not necessarily Governed unless the Validation occurs within an established governance context.

Describing a subject as Governed requires more than the existence of a Policy. The governance context must identify, directly or through referenced information:

The governing AuthorityThe governed subjectThe applicable scopeThe responsible RolesThe applicable PoliciesThe applicable decision processesThe applicable accountability mechanismsThe applicable review and enforcement mechanismsThe Evidence required to demonstrate application of GovernanceThe required Provenance and TraceabilityGovernance can be centralized, distributed, or federated. Distributed or federated Governance must identify how participating Authorities coordinate:

Decision rightsPolicy precedenceConflictsExceptionsDelegationsAccountabilityEvidenceProvenanceTraceability

Example

A DIDO-TE Test Environment is Governed when the applicable governance context identifies:

The Organization responsible for the Test EnvironmentThe governing AuthorityThe applicable Governance DomainThe Test Administrator, Test Operator, Evaluator, and Approval Authority RolesThe Policies governing creation, configuration, access, use, modification, and retirementThe approved BaselineThe Test Definitions authorized for useThe Resources authorized for allocationThe process for initiating Test RunsThe Validation CriteriaThe process for assigning VerdictsThe process for making Validation DecisionsThe required EvidenceThe required ProvenanceThe required TraceabilityThe Test Environment is not Governed merely because an administrator can configure it or an access-control mechanism restricts its use. The identified Authority, Roles, Policies, decision processes, accountability mechanisms, oversight, and Evidence establish that the Test Environment is Governed.

© 2026 Dido Solutions, Inc. and Jackrabbit Consulting, Inc.