Differences
This shows you the differences between two versions of the page.
| Both sides previous revision Previous revision Next revision | Previous revision | ||
| public:99_annexes:annex-b-terms-and-definitions:g:governance_policy [2026/09/12 17:42] – removed - external edit (Unknown date) 127.0.0.1 | public:99_annexes:annex-b-terms-and-definitions:g:governance_policy [2026/09/12 17:43] (current) – ↷ Links adapted because of a move operation nick_dido | ||
|---|---|---|---|
| Line 1: | Line 1: | ||
| + | ====== Governance Policy ====== | ||
| + | [[public: | ||
| + | |||
| + | ===== Discussion ===== | ||
| + | |||
| + | A Governance Policy is a [[public: | ||
| + | |||
| + | A Governance Policy can govern: | ||
| + | |||
| + | * An [[public: | ||
| + | * A [[public: | ||
| + | * A [[public: | ||
| + | * A [[public: | ||
| + | * A [[public: | ||
| + | * A [[public: | ||
| + | * A [[public: | ||
| + | * A [[public: | ||
| + | * A [[public: | ||
| + | * A [[public: | ||
| + | * A [[public: | ||
| + | * An [[public: | ||
| + | * A [[public: | ||
| + | * A [[public: | ||
| + | * An [[public: | ||
| + | * A process | ||
| + | * A decision | ||
| + | * Another governed subject | ||
| + | |||
| + | A Governance Policy can establish: | ||
| + | |||
| + | * The governing authority | ||
| + | * The governed subject | ||
| + | * The applicable scope | ||
| + | * The applicable jurisdiction | ||
| + | * The responsible Roles | ||
| + | * Permitted actions | ||
| + | * Required actions | ||
| + | * Prohibited actions | ||
| + | * Decision rights | ||
| + | * Approval requirements | ||
| + | * Access constraints | ||
| + | * Change-control rules | ||
| + | * Versioning rules | ||
| + | * Retention requirements | ||
| + | * Evidence requirements | ||
| + | * Evaluation criteria | ||
| + | * Arbitration rules | ||
| + | * Exception processes | ||
| + | * Escalation processes | ||
| + | * Enforcement mechanisms | ||
| + | * Review requirements | ||
| + | * Effective dates | ||
| + | * Supersession conditions | ||
| + | |||
| + | A Governance Policy can identify: | ||
| + | |||
| + | * Its identity | ||
| + | * Its name | ||
| + | * Its description | ||
| + | * Its [[public: | ||
| + | * Its governing authority | ||
| + | * Its governed subjects | ||
| + | * Its applicable Governance Domain | ||
| + | * Its applicable Organizations | ||
| + | * Its applicable Communities of Interest | ||
| + | * Its applicable Roles | ||
| + | * Its effective time | ||
| + | * Its expiration time | ||
| + | * Its status | ||
| + | * Its precedence | ||
| + | * Its dependencies | ||
| + | * Its enforcement mechanism | ||
| + | * Its exception authority | ||
| + | * Its [[public: | ||
| + | * Its [[public: | ||
| + | |||
| + | ===== Definition ===== | ||
| + | |||
| + | // | ||
| + | |||
| + | ===== Source ===== | ||
| + | |||
| + | Adapted from: | ||
| + | |||
| + | * [[public: | ||
| + | * [[public: | ||
| + | * DIDO Reference Architecture | ||
| + | * DIDO Reference Implementation Conceptual Model | ||
| + | * DIDO-TE draft Requirements Register | ||
| + | |||
| + | This definition treats Governance Policy as a specialization of Policy. It adds the authority, responsibility, | ||
| + | |||
| + | ===== Note ===== | ||
| + | |||
| + | Every Governance Policy is a [[public: | ||
| + | |||
| + | A Governance Policy differs from a [[public: | ||
| + | |||
| + | * A Governance Domain identifies the scope within which a governing authority applies governance | ||
| + | * A Governance Policy establishes rules and decision processes applicable within that scope | ||
| + | |||
| + | A Governance Policy differs from a [[public: | ||
| + | |||
| + | * A Governance Policy establishes governing direction, constraints, | ||
| + | * A Requirement states a necessary capability, behavior, quality, or constraint that a responsible subject must satisfy | ||
| + | |||
| + | A Governance Policy can provide the source or rationale for one or more Requirements. The Requirements must state the resulting obligations in objectively verifiable form. | ||
| + | |||
| + | A Governance Policy differs from [[public: | ||
| + | |||
| + | * A Governance Policy establishes governing rules and authority | ||
| + | * Acceptance Criteria establish the conditions used to determine whether an evaluated subject or outcome is acceptable | ||
| + | |||
| + | A Governance Policy can require an authority to establish or approve Acceptance Criteria. | ||
| + | |||
| + | A Governance Policy differs from a [[public: | ||
| + | |||
| + | * A Governance Policy establishes the permitted Verdict values and the rules for assigning or using them | ||
| + | * A Verdict classifies a Test Result according to those rules | ||
| + | |||
| + | A Governance Policy differs from a [[public: | ||
| + | |||
| + | * A Governance Policy establishes who can make the Validation Decision and which criteria apply | ||
| + | * A Validation Decision records the determination made by applying those criteria | ||
| + | |||
| + | A Governance Policy does not govern effectively unless the policy identifies, directly or through referenced information: | ||
| + | |||
| + | * An authoritative source | ||
| + | * A governed subject | ||
| + | * An applicable scope | ||
| + | * Responsible Roles | ||
| + | * Applicable rules or constraints | ||
| + | * An effective period | ||
| + | * A means of determining compliance | ||
| + | * A process for handling exceptions or violations | ||
| + | |||
| + | Multiple Governance Policies can apply to the same subject. The applicable governance framework must resolve: | ||
| + | |||
| + | * Precedence | ||
| + | * Overlap | ||
| + | * Conflict | ||
| + | * Exceptions | ||
| + | * Jurisdiction | ||
| + | * Supersession | ||
| + | |||
| + | A Governance Policy can be represented as natural-language text, structured data, executable rules, or a combination of representations. The representation does not change the governing meaning of the policy. | ||
| + | |||
| + | An automated mechanism can enforce a Governance Policy, but automation does not create the governing authority. The applicable Organization, | ||
| + | |||
| + | A change to a Governance Policy can create a new [[public: | ||
| + | |||
| + | * The previous Version | ||
| + | * The revised Version | ||
| + | * The reason for the change | ||
| + | * The approving authority | ||
| + | * The effective time | ||
| + | * The affected subjects | ||
| + | * The applicable Provenance | ||
| + | * The applicable Traceability | ||
| + | |||
| + | ===== Example ===== | ||
| + | |||
| + | A DIDO-TE Governance Policy governs the approval and use of a [[public: | ||
| + | |||
| + | The Governance Policy establishes: | ||
| + | |||
| + | * The Organization that owns the Baseline | ||
| + | * The Governance Domain in which the Baseline applies | ||
| + | * The Roles authorized to propose, review, approve, supersede, or withdraw the Baseline | ||
| + | * The required [[public: | ||
| + | * The applicable [[public: | ||
| + | * The required [[private: | ||
| + | * The permitted [[public: | ||
| + | * The process for making a [[public: | ||
| + | * The treatment of failed, incomplete, interrupted, | ||
| + | * The change-control process for replacing the Baseline | ||
| + | * The required Provenance and Traceability | ||
| + | |||
| + | An authorized Role applies the Governance Policy when reviewing the Test Results and Evidence associated with a proposed Baseline. | ||
| + | |||
| + | ---- | ||
| + | |||
| + | <WRAP centeralign> | ||
| + | © 2026 Dido Solutions, Inc. and Jackrabbit Consulting, Inc. | ||
| + | </ | ||