Differences
This shows you the differences between two versions of the page.
| Both sides previous revision Previous revision Next revision | Previous revision | ||
| public:99_annexes:annex-b-terms-and-definitions:p:policy [2026/09/12 17:42] – removed - external edit (Unknown date) 127.0.0.1 | public:99_annexes:annex-b-terms-and-definitions:p:policy [2026/09/12 17:43] (current) – ↷ Links adapted because of a move operation nick_dido | ||
|---|---|---|---|
| Line 1: | Line 1: | ||
| + | ====== Policy ====== | ||
| + | [[public: | ||
| + | |||
| + | ===== Discussion ===== | ||
| + | |||
| + | A Policy is a statement of direction, rule, or constraint established by an [[public: | ||
| + | |||
| + | A Policy can establish: | ||
| + | |||
| + | * A required action | ||
| + | * A permitted action | ||
| + | * A prohibited action | ||
| + | * A constraint | ||
| + | * A decision rule | ||
| + | * A responsibility | ||
| + | * A condition | ||
| + | * A priority | ||
| + | * An exception | ||
| + | * An escalation path | ||
| + | * An enforcement rule | ||
| + | |||
| + | A Policy can apply to: | ||
| + | |||
| + | * An [[public: | ||
| + | * A [[public: | ||
| + | * A [[public: | ||
| + | * A [[public: | ||
| + | * A [[public: | ||
| + | * A [[public: | ||
| + | * A [[public: | ||
| + | * A [[public: | ||
| + | * A [[public: | ||
| + | * An [[public: | ||
| + | * A [[public: | ||
| + | * An [[public: | ||
| + | * A process | ||
| + | * A decision | ||
| + | * An activity | ||
| + | * Another subject within the Policy’s scope | ||
| + | |||
| + | A Policy can identify: | ||
| + | |||
| + | * Its identity | ||
| + | * Its name | ||
| + | * Its description | ||
| + | * Its [[public: | ||
| + | * Its establishing Authority | ||
| + | * Its applicable subjects | ||
| + | * Its applicable scope | ||
| + | * Its applicable jurisdiction | ||
| + | * Its applicable conditions | ||
| + | * Its required actions | ||
| + | * Its permitted actions | ||
| + | * Its prohibited actions | ||
| + | * Its exceptions | ||
| + | * Its effective time | ||
| + | * Its expiration time | ||
| + | * Its status | ||
| + | * Its precedence | ||
| + | * Its enforcement mechanism | ||
| + | * Its superseded Policy | ||
| + | * Its applicable [[public: | ||
| + | * Its [[public: | ||
| + | * Its [[public: | ||
| + | |||
| + | A Policy can be represented as: | ||
| + | |||
| + | * Natural-language text | ||
| + | * Structured data | ||
| + | * A decision table | ||
| + | * A rule set | ||
| + | * An executable model | ||
| + | * [[public: | ||
| + | * A combination of representations | ||
| + | |||
| + | ===== Definition ===== | ||
| + | |||
| + | //statement of direction, rule, or constraint established by an [[public: | ||
| + | |||
| + | ===== Source ===== | ||
| + | |||
| + | Adapted from: | ||
| + | |||
| + | * DIDO Reference Architecture | ||
| + | * DIDO Reference Implementation Conceptual Model | ||
| + | * DIDO-TE draft Requirements Register | ||
| + | * [[public: | ||
| + | |||
| + | This definition establishes Policy as the general concept from which Governance Policy and other specialized Policy types can derive. | ||
| + | |||
| + | ===== Note ===== | ||
| + | |||
| + | A Policy requires an identifiable [[public: | ||
| + | |||
| + | A Policy differs from a [[public: | ||
| + | |||
| + | * A Policy provides general direction, rules, or constraints | ||
| + | * A Governance Policy additionally establishes governance authority, responsibilities, | ||
| + | |||
| + | Every Governance Policy is a Policy. A Policy is not necessarily a Governance Policy. | ||
| + | |||
| + | A Policy differs from a [[public: | ||
| + | |||
| + | * A Policy establishes direction, rules, or constraints | ||
| + | * A Requirement states a necessary capability, behavior, quality, or constraint that an identified subject must satisfy | ||
| + | |||
| + | A Policy can provide the source or rationale for one or more Requirements. The resulting Requirements must express the applicable obligations in objectively verifiable form. | ||
| + | |||
| + | A Policy differs from a procedure: | ||
| + | |||
| + | * A Policy establishes what an Authority requires, permits, prohibits, or directs | ||
| + | * A procedure identifies the activities used to carry out the Policy | ||
| + | |||
| + | A Policy differs from an [[public: | ||
| + | |||
| + | * A Policy establishes direction, rules, or constraints | ||
| + | * An Acceptance Criterion establishes a condition used to determine whether an evaluated subject or outcome is acceptable | ||
| + | |||
| + | A Policy can require the establishment or application of Acceptance Criteria. | ||
| + | |||
| + | A Policy differs from a decision: | ||
| + | |||
| + | * A Policy provides direction or rules for making decisions | ||
| + | * A decision records a determination made for a particular matter | ||
| + | |||
| + | A Policy does not need to use a particular representation. The same Policy can have human-readable and machine-processable representations. | ||
| + | |||
| + | A machine-processable Policy does not become authoritative merely because a system can execute it. The Authority, approval, scope, effective time, and governing context establish its authority. | ||
| + | |||
| + | Multiple Policies can apply to the same subject. The applicable policy framework must establish how to resolve: | ||
| + | |||
| + | * Overlapping Policies | ||
| + | * Conflicting Policies | ||
| + | * Policy precedence | ||
| + | * Exceptions | ||
| + | * Jurisdictional differences | ||
| + | * Superseded Policies | ||
| + | |||
| + | A Policy is not necessarily: | ||
| + | |||
| + | * A law | ||
| + | * A regulation | ||
| + | * A contract | ||
| + | * A standard | ||
| + | * A requirement | ||
| + | * A procedure | ||
| + | * An algorithm | ||
| + | * An executable rule | ||
| + | |||
| + | A law, regulation, contract, or standard can establish or provide the source for a Policy. | ||
| + | |||
| + | A change to a Policy can create a new [[public: | ||
| + | |||
| + | * The previous Version | ||
| + | * The revised Version | ||
| + | * The reason for the change | ||
| + | * The approving Authority | ||
| + | * The effective time | ||
| + | * The affected subjects | ||
| + | * The applicable Provenance | ||
| + | * The applicable Traceability | ||
| + | |||
| + | ===== Example ===== | ||
| + | |||
| + | An Organization establishes a Policy requiring every [[public: | ||
| + | |||
| + | * The applicable [[public: | ||
| + | * The applicable [[public: | ||
| + | * The applicable [[public: | ||
| + | * The applicable [[public: | ||
| + | * The applicable [[public: | ||
| + | * The resulting [[public: | ||
| + | * The assigned [[public: | ||
| + | * The supporting Evidence | ||
| + | * The applicable Provenance | ||
| + | * The applicable Traceability | ||
| + | |||
| + | The Policy provides the source for specific DIDO-TE Requirements governing Test Run records and Evidence preservation. | ||
| + | |||
| + | ---- | ||
| + | |||
| + | <WRAP centeralign> | ||
| + | © 2026 Dido Solutions, Inc. and Jackrabbit Consulting, Inc. | ||
| + | </ | ||