ASSURANCE

Conformance

How requirements, profiles and evidence support conformance determinations.

Conformance language

Mandatory, recommended and permitted language should be interpreted according to each framework's normative publication. Informative examples do not replace normative requirements.

Conformance record

Record scope, version, applicable profile or tier, implemented requirements, exclusions, exceptions, evidence, test results, findings and decision authority.

Claim controls

Factual mapping or implementation statements should not be converted into certification, compliance, approval or endorsement claims without the applicable agreement and assessment basis.