Operating Procedure [Dido Solutions, Inc Wiki]

This page is read only. You can view the source, but not change it. Ask your administrator if you think this is wrong.
====== Operating Procedure ======

[[dido:99_annexes:annex-b-terms-and-definitions:start|Go up to Terms and Definitions]]

===== Discussion =====

An Operating Procedure specifies how an operator or system performs an operation under identified conditions.

An Operating Procedure identifies the applicable sequence of activities, responsibilities, inputs, outputs, controls, decision points, records, and completion criteria. Its scope depends upon the operation and the environment in which the operation occurs.

Environment-specific Operating Procedures address conditions associated with [[dido:99_annexes:annex-b-terms-and-definitions:c:connected_environment|Connected Environments]], [[dido:99_annexes:annex-b-terms-and-definitions:d:disconnected_environment|Disconnected Environments]], and [[dido:99_annexes:annex-b-terms-and-definitions:a:air-gapped_environment|Air-Gapped Environments]].

An Operating Procedure differs from a requirement. A requirement states a necessary outcome, behavior, characteristic, or constraint. An Operating Procedure specifies the activities used to conduct an operation.

===== Definition =====

//a specified way to carry out activities associated with the operation of a system or environment//

===== Source =====

Adapted from the ISO definition of **procedure**: “specified way to carry out an activity or a process.”

[[https://casco.iso.org/techniques-and-schemes.html|International Organization for Standardization, “Techniques and Schemes”]]

See also ISO 9000:2015, *Quality management systems — Fundamentals and vocabulary*, definition 3.4.5.

===== Note =====

An Operating Procedure may address:

  * Preconditions
  * Assigned responsibilities
  * Required resources
  * Ordered activities
  * Authorization and security controls
  * Decision and exception paths
  * Required records and Evidence
  * Completion and acceptance criteria
  * Recovery or rollback activities

The procedure’s medium does not determine the concept. Text, workflow definitions, checklists, scripts, executable automation, or combinations of these forms express an Operating Procedure.

===== Example =====

A Connected Environment Operating Procedure identifies the authorized External Network Connections and External Services used during a DIDO-TE test. It also specifies approval, monitoring, recording, exception handling, and Evidence-preservation activities.

----

<WRAP centeralign>
© 2026 Dido Solutions, Inc. and Jackrabbit Consulting, Inc.
</WRAP>