Standard · Conformance

Assess yourself. Honestly.

The conformance documents let an implementer check their own system against the standard. They are not a certification, and no one is currently able to issue one.

Self-assessment is not certification

Two different things, kept apart.

Aspect	Self-assessment (available)	Certification (not available)
Who decides	You, against the published framework and checklist.	An independent body. None exists yet.
What you can say	“We assessed our implementation against the qodiqa conformance framework.”	Nothing: there is no certified status to claim.
Evidence	Your own results and the evidence your deployment produces.	Not applicable.

1 · How self-assessment works

Four steps, one result.

Every control point of the 68-Point Enforcement Framework becomes one yes-or-no condition.

Pick a profile. CORE-MIN has 24 mandatory control points, CORE-VER 44 and CORE-ENT 68.
Check each point. Every condition is either satisfied or not. Tick it only when it is demonstrably satisfied.
Record the gaps. Log each unsatisfied mandatory point in a gap register and classify it.
Read the result. A profile is met only if every mandatory point for it is satisfied. This is not a certification.

What you get

A yes or no per profile

A profile is met only when all its mandatory points are satisfied: 24 of 24, 44 of 44 or 68 of 68. No partial score.

A gap register

Per unmet point: the control point, the gap, the responsible team and a target remediation date. Classed BLOCKING, MARGINAL or EVIDENCE.

A route to deeper checks

Tests for twelve control points (QCC-01 to QCC-12) and eight verification conditions (VC-01 to VC-08) are defined in two further documents.

2 · The checklist, by domain

68 conditions in 13 domains.

The same structure as the published checklist. Choose the profile you are aiming for, open a domain to read its conditions word for word and tick what your system demonstrably meets.

Target profile

0 of 24 mandatory points ticked for CORE-MIN.

Self-assessment helper. Nothing is saved or sent; ticks reset when you reload the page.

The domain tiles need JavaScript. Read the checklist in full in the Implementation Conformance Checklist.

Read the framework