| Both sides previous revision Previous revision | |
| public:99_annexes:annex-b-terms-and-definitions:c:compliance_profile [2026/09/12 17:42] – ↷ Page moved from private:99_annexes:annex-b-terms-and-definitions:c:compliance_profile to public:99_annexes:annex-b-terms-and-definitions:c:compliance_profile nick_dido | public:99_annexes:annex-b-terms-and-definitions:c:compliance_profile [2026/09/12 17:43] (current) – ↷ Links adapted because of a move operation nick_dido |
|---|
| ====== Compliance Profile ====== | ====== Compliance Profile ====== |
| |
| [[private:99_annexes:annex-b-terms-and-definitions:start|Go up to Terms and Definitions]] | [[public:99_annexes:annex-b-terms-and-definitions:start|Go up to Terms and Definitions]] |
| |
| ===== Discussion ===== | ===== Discussion ===== |
| |
| A Compliance Profile is a defined selection, specialization, or tailoring of compliance criteria from one or more [[private:99_annexes:annex-b-terms-and-definitions:c:compliance_benchmark|Compliance Benchmarks]] for a specified subject, purpose, or operating context. | A Compliance Profile is a defined selection, specialization, or tailoring of compliance criteria from one or more [[public:99_annexes:annex-b-terms-and-definitions:c:compliance_benchmark|Compliance Benchmarks]] for a specified subject, purpose, or operating context. |
| |
| The profile identifies which criteria apply and may also identify parameter values, implementation expectations, assessment procedures, exceptions, severity assignments, or remediation guidance. | The profile identifies which criteria apply and may also identify parameter values, implementation expectations, assessment procedures, exceptions, severity assignments, or remediation guidance. |
| ===== Example ===== | ===== Example ===== |
| |
| A [[private:99_annexes:annex-b-terms-and-definitions:s:stig|Security Technical Implementation Guide (STIG)]] data stream contains a Compliance Profile for [[private:99_annexes:annex-b-terms-and-definitions:r:rhel]] 9. Crucible selects that profile when assessing the corresponding Hardened Image. | A [[public:99_annexes:annex-b-terms-and-definitions:s:stig|Security Technical Implementation Guide (STIG)]] data stream contains a Compliance Profile for [[public:99_annexes:annex-b-terms-and-definitions:r:rhel]] 9. Crucible selects that profile when assessing the corresponding Hardened Image. |
| |
| ---- | ---- |