# Compliance

> A rule or precondition that a system implements the controls a regulation or standard requires, and keeps evidence of each one.

Record: `architecture:compliance`
Kind: constraint
Layer: [Security Core](https://banes-lab.com/records/layer/security-core.md)
Severity: contextual
Scope: system, organization, process
Canonical: https://banes-lab.com/ontology#architecture-compliance

Listed in [Architecture principles](https://banes-lab.com/api/records/architecture.md), after [Privacy by Design](https://banes-lab.com/records/architecture/privacy-by-design.md) and before [Governance](https://banes-lab.com/records/architecture/governance.md).

## Repair

- Refactored by: Add Control, Add Evidence Capture
- Detected by: compliance gap assessment
- Violated by: missing controls/evidence for required regulation
- Measured by: control pass rate
- Enforced by: compliance gates

## Requires

- [Controls](https://banes-lab.com/records/lexicon/controls.md)
- [Evidence](https://banes-lab.com/records/lexicon/evidence.md)
- [Auditability](https://banes-lab.com/records/architecture/auditability.md)

## Reinforces

- [Governance](https://banes-lab.com/records/architecture/governance.md)
- [Risk Management](https://banes-lab.com/records/architecture/risk-management.md)

## Enables

- [Regulatory Alignment](https://banes-lab.com/records/lexicon/regulatory-alignment.md)

## Conflicts with

- [Uncontrolled Change](https://banes-lab.com/records/lexicon/uncontrolled-change.md)

## In tension with

- [Delivery Speed](https://banes-lab.com/records/lexicon/delivery-speed.md)

## Tensions

- [Compliance / Delivery Speed](https://banes-lab.com/records/tension/compliance-delivery-speed.md)

## Severity

- [contextual](https://banes-lab.com/records/vocabulary/severity-contextual.md)

## Category

- [Security / Privacy / Compliance / Governance](https://banes-lab.com/records/architecture-category/security-privacy-compliance-governance.md)

## Enabled by

- [Reproducibility](https://banes-lab.com/records/architecture/reproducibility.md)

## Reinforced by

- [Standards Compliance](https://banes-lab.com/records/architecture/standards-compliance.md)
- [Model Governance](https://banes-lab.com/records/architecture/model-governance.md)
- [Security by Design](https://banes-lab.com/records/architecture/security-by-design.md)
- [Privacy by Design](https://banes-lab.com/records/architecture/privacy-by-design.md)
- [Policy Enforcement](https://banes-lab.com/records/architecture/policy-enforcement.md)
- [Continuous Compliance](https://banes-lab.com/records/architecture/continuous-compliance.md)

## Linked from

- [Detect, log, fix](https://banes-lab.com/disciplined-methodology/build/detect-log-fix.md)
- [It looked right](https://banes-lab.com/disciplined-methodology/verify/it-looked-right.md)
- [Correctness / Determinism / Verification](https://banes-lab.com/ontology/principles/architecture-category-correctness-determinism-verification.md)
- [Portability / Infrastructure / Deployment](https://banes-lab.com/ontology/principles/architecture-category-portability-infrastructure-deployment.md)
- [Model Architecture](https://banes-lab.com/ontology/principles/architecture-category-model-architecture.md)
- [Observability / Auditability / Traceability](https://banes-lab.com/ontology/principles/architecture-category-observability-auditability-traceability.md)
- [Security / Privacy / Compliance / Governance](https://banes-lab.com/ontology/principles/architecture-category-security-privacy-compliance-governance.md)
- [Core Vocabulary](https://banes-lab.com/ontology/lexicon/lexicon-category-core-vocabulary.md)
- [Security Privacy Compliance](https://banes-lab.com/ontology/lexicon/lexicon-category-security-privacy-compliance.md)
- [Severity levels](https://banes-lab.com/ontology/schema/the-vocabulary-severity.md)
- [The resolutions](https://banes-lab.com/ontology/schema/the-resolutions.md)