public:99_annexes:annex-b-terms-and-definitions:c:compliance_finding

Differences

This shows you the differences between two versions of the page.

Link to this comparison view

Both sides previous revision Previous revision
public:99_annexes:annex-b-terms-and-definitions:c:compliance_finding [2026/09/12 17:42] – ↷ Page moved from private:99_annexes:annex-b-terms-and-definitions:c:compliance_finding to public:99_annexes:annex-b-terms-and-definitions:c:compliance_finding nick_didopublic:99_annexes:annex-b-terms-and-definitions:c:compliance_finding [2026/09/12 17:43] (current) – ↷ Links adapted because of a move operation nick_dido
Line 1: Line 1:
 ====== Compliance Finding ====== ====== Compliance Finding ======
  
-[[private:99_annexes:annex-b-terms-and-definitions:start|Go up to Terms and Definitions]]+[[public:99_annexes:annex-b-terms-and-definitions:start|Go up to Terms and Definitions]]
  
 ===== Discussion ===== ===== Discussion =====
Line 9: Line 9:
 The finding may record satisfaction, non-satisfaction, non-applicability, inability to determine, execution error, or another result permitted by the applicable assessment method. The finding may record satisfaction, non-satisfaction, non-applicability, inability to determine, execution error, or another result permitted by the applicable assessment method.
  
-A Compliance Finding may identify the evaluated criterion, subject, benchmark and profile versions, assessment time, method, observed value, expected value, severity, rationale, remediation information, and supporting [[private:99_annexes:annex-b-terms-and-definitions:e:evidence|Evidence]].+A Compliance Finding may identify the evaluated criterion, subject, benchmark and profile versions, assessment time, method, observed value, expected value, severity, rationale, remediation information, and supporting [[public:99_annexes:annex-b-terms-and-definitions:e:evidence|Evidence]].
  
 Within Crucible, a Compliance Provider may produce scanner-specific findings that the compliance engine transforms into a common or normalized findings representation. Within Crucible, a Compliance Provider may produce scanner-specific findings that the compliance engine transforms into a common or normalized findings representation.
Line 29: Line 29:
 ===== Example ===== ===== Example =====
  
-An assessment evaluates a [[private:99_annexes:annex-b-terms-and-definitions:r:rhel]] 9 Machine Image against a [[private:99_annexes:annex-b-terms-and-definitions:s:stig|Security Technical Implementation Guide (STIG)]] rule requiring a specified audit configuration. The resulting Compliance Finding records whether the image satisfies the rule and preserves the observed configuration and supporting evidence.+An assessment evaluates a [[public:99_annexes:annex-b-terms-and-definitions:r:rhel]] 9 Machine Image against a [[public:99_annexes:annex-b-terms-and-definitions:s:stig|Security Technical Implementation Guide (STIG)]] rule requiring a specified audit configuration. The resulting Compliance Finding records whether the image satisfies the rule and preserves the observed configuration and supporting evidence.
  
 ---- ----
  • public/99_annexes/annex-b-terms-and-definitions/c/compliance_finding.1789260137.txt.gz
  • Last modified: 2026/09/12 17:42
  • by nick_dido