Conformance Profiles
Each conformance profile specifies which control families are required, conditionally required, or not applicable.
Conformance Model
Maturity levels 0–5, profile requirements, attestation
Foundation Profile
Record identification, custody mapping, and taxonomy. Entry-level governance posture.
Minimum Profile
All base families required. Agent families conditional.
Enterprise Profile
All Minimum requirements plus enhanced controls.