Compliance Evaluation

After the base data is collected and available in the database, the rules for compliance can be defined according to your policies. If a device is compliant or not is then evaluated based on the following elements:

• Compliance Criteria Groups
• Criteria Group Relation

The compliance criteria that are defined by the administrator are collected in criteria groups which can be put in relation to each other for logical operations. When the relation is evaluated for the device the result is either yes or no, and a device is considered compliant if the result is yes.

Compliance Criteria Groups

The criteria that must be fulfilled for compliance are collected in groups. A criteria group can contain only one criterion or it might have several. All the criteria defined within a group are connected via the AND operator, that is, the device must comply to criterion 1 AND criterion 2 AND criterion 3 ...

A compliance rule might have only one or several of these compliance criteria groups. The relation between these groups is defined by the function specified in the Group Relation option.

Criteria Group Relation

The relation equation defines how the different groups relate to each other, that is, how the compliance is evaluated. Three operators can be used to define this relation, AND, OR and not and any number of parentheses. Criteria groups can also appear more than once in a relation equation. To identify the different groups the equation uses their respective index which is attributed to the groups by their position in the list.