{
  "code": null,
  "collection": "architecture",
  "href": "https://banes-lab.com/ontology#architecture-compliance",
  "id": "compliance",
  "kind": "constraint",
  "layer": {
    "href": "https://banes-lab.com/ontology/schema#layer-security-core",
    "json": "https://banes-lab.com/json/records/layer/security-core",
    "label": "Security Core",
    "markdown": "https://banes-lab.com/records/layer/security-core.md",
    "ref": "layer:security-core"
  },
  "name": "Compliance",
  "ref": "architecture:compliance",
  "relations": [
    {
      "links": [
        {
          "href": "https://banes-lab.com/ontology/lexicon#lexicon-controls",
          "json": "https://banes-lab.com/json/records/lexicon/controls",
          "label": "Controls",
          "markdown": "https://banes-lab.com/records/lexicon/controls.md",
          "ref": "lexicon:controls"
        },
        {
          "href": "https://banes-lab.com/ontology/lexicon#lexicon-evidence",
          "json": "https://banes-lab.com/json/records/lexicon/evidence",
          "label": "Evidence",
          "markdown": "https://banes-lab.com/records/lexicon/evidence.md",
          "ref": "lexicon:evidence"
        },
        {
          "href": "https://banes-lab.com/ontology#architecture-auditability",
          "json": "https://banes-lab.com/json/records/architecture/auditability",
          "label": "Auditability",
          "markdown": "https://banes-lab.com/records/architecture/auditability.md",
          "ref": "architecture:auditability"
        }
      ],
      "relation": "requires"
    },
    {
      "links": [
        {
          "href": "https://banes-lab.com/ontology#architecture-governance",
          "json": "https://banes-lab.com/json/records/architecture/governance",
          "label": "Governance",
          "markdown": "https://banes-lab.com/records/architecture/governance.md",
          "ref": "architecture:governance"
        },
        {
          "href": "https://banes-lab.com/ontology#architecture-risk-management",
          "json": "https://banes-lab.com/json/records/architecture/risk-management",
          "label": "Risk Management",
          "markdown": "https://banes-lab.com/records/architecture/risk-management.md",
          "ref": "architecture:risk-management"
        }
      ],
      "relation": "reinforces"
    },
    {
      "links": [
        {
          "href": "https://banes-lab.com/ontology/lexicon#lexicon-regulatory-alignment",
          "json": "https://banes-lab.com/json/records/lexicon/regulatory-alignment",
          "label": "Regulatory Alignment",
          "markdown": "https://banes-lab.com/records/lexicon/regulatory-alignment.md",
          "ref": "lexicon:regulatory-alignment"
        }
      ],
      "relation": "enables"
    },
    {
      "links": [
        {
          "href": "https://banes-lab.com/ontology/lexicon#lexicon-uncontrolled-change",
          "json": "https://banes-lab.com/json/records/lexicon/uncontrolled-change",
          "label": "Uncontrolled Change",
          "markdown": "https://banes-lab.com/records/lexicon/uncontrolled-change.md",
          "ref": "lexicon:uncontrolled-change"
        }
      ],
      "relation": "conflicts-with"
    },
    {
      "links": [
        {
          "href": "https://banes-lab.com/ontology/lexicon#lexicon-delivery-speed",
          "json": "https://banes-lab.com/json/records/lexicon/delivery-speed",
          "label": "Delivery Speed",
          "markdown": "https://banes-lab.com/records/lexicon/delivery-speed.md",
          "ref": "lexicon:delivery-speed"
        }
      ],
      "relation": "tensions-with"
    },
    {
      "links": [
        {
          "href": "https://banes-lab.com/ontology/schema#tension-compliance-delivery-speed",
          "json": "https://banes-lab.com/json/records/tension/compliance-delivery-speed",
          "label": "Compliance / Delivery Speed",
          "markdown": "https://banes-lab.com/records/tension/compliance-delivery-speed.md",
          "ref": "tension:compliance-delivery-speed"
        }
      ],
      "relation": "tensions"
    },
    {
      "links": [
        {
          "href": "https://banes-lab.com/ontology/lexicon#lexicon-point-in-time-audit-only",
          "json": "https://banes-lab.com/json/records/lexicon/point-in-time-audit-only",
          "label": "Point-in-Time Audit Only",
          "markdown": "https://banes-lab.com/records/lexicon/point-in-time-audit-only.md",
          "ref": "lexicon:point-in-time-audit-only"
        }
      ],
      "relation": "violated-by"
    },
    {
      "links": [
        {
          "href": "https://banes-lab.com/ontology/lexicon#lexicon-controls",
          "json": "https://banes-lab.com/json/records/lexicon/controls",
          "label": "Controls",
          "markdown": "https://banes-lab.com/records/lexicon/controls.md",
          "ref": "lexicon:controls"
        },
        {
          "href": "https://banes-lab.com/ontology/lexicon#lexicon-evidence-citation",
          "json": "https://banes-lab.com/json/records/lexicon/evidence-citation",
          "label": "Evidence Citation",
          "markdown": "https://banes-lab.com/records/lexicon/evidence-citation.md",
          "ref": "lexicon:evidence-citation"
        }
      ],
      "relation": "refactored-by"
    },
    {
      "links": [
        {
          "href": "https://banes-lab.com/ontology/schema#vocabulary-severity-contextual",
          "json": "https://banes-lab.com/json/records/vocabulary/severity-contextual",
          "label": "contextual",
          "markdown": "https://banes-lab.com/records/vocabulary/severity-contextual.md",
          "ref": "vocabulary:severity-contextual"
        }
      ],
      "relation": "severity"
    },
    {
      "links": [
        {
          "href": "https://banes-lab.com/ontology#architecture-category-security-privacy-compliance-governance",
          "json": "https://banes-lab.com/json/records/architecture-category/security-privacy-compliance-governance",
          "label": "Security / Privacy / Compliance / Governance",
          "markdown": "https://banes-lab.com/records/architecture-category/security-privacy-compliance-governance.md",
          "ref": "architecture-category:security-privacy-compliance-governance"
        }
      ],
      "relation": "category"
    },
    {
      "links": [
        {
          "href": "https://banes-lab.com/ontology#architecture-reproducibility",
          "json": "https://banes-lab.com/json/records/architecture/reproducibility",
          "label": "Reproducibility",
          "markdown": "https://banes-lab.com/records/architecture/reproducibility.md",
          "ref": "architecture:reproducibility"
        }
      ],
      "relation": "enabled-by"
    },
    {
      "links": [
        {
          "href": "https://banes-lab.com/ontology#architecture-standards-compliance",
          "json": "https://banes-lab.com/json/records/architecture/standards-compliance",
          "label": "Standards Compliance",
          "markdown": "https://banes-lab.com/records/architecture/standards-compliance.md",
          "ref": "architecture:standards-compliance"
        },
        {
          "href": "https://banes-lab.com/ontology#architecture-model-governance",
          "json": "https://banes-lab.com/json/records/architecture/model-governance",
          "label": "Model Governance",
          "markdown": "https://banes-lab.com/records/architecture/model-governance.md",
          "ref": "architecture:model-governance"
        },
        {
          "href": "https://banes-lab.com/ontology#architecture-security-by-design",
          "json": "https://banes-lab.com/json/records/architecture/security-by-design",
          "label": "Security by Design",
          "markdown": "https://banes-lab.com/records/architecture/security-by-design.md",
          "ref": "architecture:security-by-design"
        },
        {
          "href": "https://banes-lab.com/ontology#architecture-privacy-by-design",
          "json": "https://banes-lab.com/json/records/architecture/privacy-by-design",
          "label": "Privacy by Design",
          "markdown": "https://banes-lab.com/records/architecture/privacy-by-design.md",
          "ref": "architecture:privacy-by-design"
        },
        {
          "href": "https://banes-lab.com/ontology#architecture-policy-enforcement",
          "json": "https://banes-lab.com/json/records/architecture/policy-enforcement",
          "label": "Policy Enforcement",
          "markdown": "https://banes-lab.com/records/architecture/policy-enforcement.md",
          "ref": "architecture:policy-enforcement"
        },
        {
          "href": "https://banes-lab.com/ontology#architecture-continuous-compliance",
          "json": "https://banes-lab.com/json/records/architecture/continuous-compliance",
          "label": "Continuous Compliance",
          "markdown": "https://banes-lab.com/records/architecture/continuous-compliance.md",
          "ref": "architecture:continuous-compliance"
        }
      ],
      "relation": "reinforced-by"
    },
    {
      "links": [
        {
          "href": "https://banes-lab.com/disciplined-methodology/build#detect-log-fix",
          "json": "https://banes-lab.com/json/disciplined-methodology/build/detect-log-fix",
          "label": "Detect, log, fix",
          "markdown": "https://banes-lab.com/disciplined-methodology/build/detect-log-fix.md",
          "ref": "chapter:/disciplined-methodology/build#detect-log-fix"
        },
        {
          "href": "https://banes-lab.com/disciplined-methodology/verify#it-looked-right",
          "json": "https://banes-lab.com/json/disciplined-methodology/verify/it-looked-right",
          "label": "It looked right",
          "markdown": "https://banes-lab.com/disciplined-methodology/verify/it-looked-right.md",
          "ref": "chapter:/disciplined-methodology/verify#it-looked-right"
        },
        {
          "href": "https://banes-lab.com/ontology#architecture-category-correctness-determinism-verification",
          "json": "https://banes-lab.com/json/ontology/principles/architecture-category-correctness-determinism-verification",
          "label": "Correctness / Determinism / Verification",
          "markdown": "https://banes-lab.com/ontology/principles/architecture-category-correctness-determinism-verification.md",
          "ref": "chapter:/ontology#architecture-category-correctness-determinism-verification"
        },
        {
          "href": "https://banes-lab.com/ontology#architecture-category-portability-infrastructure-deployment",
          "json": "https://banes-lab.com/json/ontology/principles/architecture-category-portability-infrastructure-deployment",
          "label": "Portability / Infrastructure / Deployment",
          "markdown": "https://banes-lab.com/ontology/principles/architecture-category-portability-infrastructure-deployment.md",
          "ref": "chapter:/ontology#architecture-category-portability-infrastructure-deployment"
        },
        {
          "href": "https://banes-lab.com/ontology#architecture-category-model-architecture",
          "json": "https://banes-lab.com/json/ontology/principles/architecture-category-model-architecture",
          "label": "Model Architecture",
          "markdown": "https://banes-lab.com/ontology/principles/architecture-category-model-architecture.md",
          "ref": "chapter:/ontology#architecture-category-model-architecture"
        },
        {
          "href": "https://banes-lab.com/ontology#architecture-category-observability-auditability-traceability",
          "json": "https://banes-lab.com/json/ontology/principles/architecture-category-observability-auditability-traceability",
          "label": "Observability / Auditability / Traceability",
          "markdown": "https://banes-lab.com/ontology/principles/architecture-category-observability-auditability-traceability.md",
          "ref": "chapter:/ontology#architecture-category-observability-auditability-traceability"
        },
        {
          "href": "https://banes-lab.com/ontology#architecture-category-security-privacy-compliance-governance",
          "json": "https://banes-lab.com/json/ontology/principles/architecture-category-security-privacy-compliance-governance",
          "label": "Security / Privacy / Compliance / Governance",
          "markdown": "https://banes-lab.com/ontology/principles/architecture-category-security-privacy-compliance-governance.md",
          "ref": "chapter:/ontology#architecture-category-security-privacy-compliance-governance"
        },
        {
          "href": "https://banes-lab.com/ontology/lexicon#lexicon-category-core-vocabulary",
          "json": "https://banes-lab.com/json/ontology/lexicon/lexicon-category-core-vocabulary",
          "label": "Core Vocabulary",
          "markdown": "https://banes-lab.com/ontology/lexicon/lexicon-category-core-vocabulary.md",
          "ref": "chapter:/ontology/lexicon#lexicon-category-core-vocabulary"
        },
        {
          "href": "https://banes-lab.com/ontology/lexicon#lexicon-category-model-architecture",
          "json": "https://banes-lab.com/json/ontology/lexicon/lexicon-category-model-architecture",
          "label": "Model Architecture",
          "markdown": "https://banes-lab.com/ontology/lexicon/lexicon-category-model-architecture.md",
          "ref": "chapter:/ontology/lexicon#lexicon-category-model-architecture"
        },
        {
          "href": "https://banes-lab.com/ontology/lexicon#lexicon-category-security-privacy-compliance",
          "json": "https://banes-lab.com/json/ontology/lexicon/lexicon-category-security-privacy-compliance",
          "label": "Security Privacy Compliance",
          "markdown": "https://banes-lab.com/ontology/lexicon/lexicon-category-security-privacy-compliance.md",
          "ref": "chapter:/ontology/lexicon#lexicon-category-security-privacy-compliance"
        },
        {
          "href": "https://banes-lab.com/ontology/schema#the-vocabulary-severity",
          "json": "https://banes-lab.com/json/ontology/schema/the-vocabulary-severity",
          "label": "Severity levels",
          "markdown": "https://banes-lab.com/ontology/schema/the-vocabulary-severity.md",
          "ref": "chapter:/ontology/schema#the-vocabulary-severity"
        },
        {
          "href": "https://banes-lab.com/ontology/schema#the-resolutions",
          "json": "https://banes-lab.com/json/ontology/schema/the-resolutions",
          "label": "The resolutions",
          "markdown": "https://banes-lab.com/ontology/schema/the-resolutions.md",
          "ref": "chapter:/ontology/schema#the-resolutions"
        }
      ],
      "relation": "linked-from"
    }
  ],
  "summary": "A rule or precondition that a system implements the controls a regulation or standard requires, and keeps evidence of each one.",
  "siblings": {
    "next": {
      "href": "https://banes-lab.com/ontology#architecture-governance",
      "json": "https://banes-lab.com/json/records/architecture/governance",
      "label": "Governance",
      "markdown": "https://banes-lab.com/records/architecture/governance.md",
      "ref": "architecture:governance"
    },
    "previous": {
      "href": "https://banes-lab.com/ontology#architecture-privacy-by-design",
      "json": "https://banes-lab.com/json/records/architecture/privacy-by-design",
      "label": "Privacy by Design",
      "markdown": "https://banes-lab.com/records/architecture/privacy-by-design.md",
      "ref": "architecture:privacy-by-design"
    }
  },
  "up": {
    "href": null,
    "json": "https://banes-lab.com/json/api/records/architecture",
    "label": "Architecture principles",
    "markdown": "https://banes-lab.com/api/records/architecture.md",
    "ref": "api:records/architecture"
  },
  "aliases": [],
  "exemplar": {
    "after": "const classified = classify(foo);\nconst controls = compliance.requirements(classified, \"foo-storage\");\nawait enforceControls(controls);\nawait storeFooData(foo);",
    "before": "storeFooData(foo);",
    "lang": "ts",
    "medium": "code"
  },
  "formedBy": null,
  "scope": [
    "system",
    "organization",
    "process"
  ],
  "severity": "contextual"
}