Reasons, warnings and overrides

Encourage, don't enforce

Conform is built on one principle: warn, don't block. You often know the real situation better than any rule. So when something looks wrong, Conform tells you and asks you to confirm, and you can carry on. The few exceptions are where safety or insurance demand a hard stop.

Examples of warnings you'll meet:

• closing a finding while some of its actions are still open;

• marking an action done without the proof the standards expect;

• approving a change you prepared yourself;

• adding an action due after its finding's fix-by date.

Why Conform asks "why?"

Anything that changes your risk picture asks for a rationale: a short reason, kept in the history with your name and the date. You'll be asked when you:

• move a card on a board (some moves, and always the move to the end);

• mark a unit not applicable;

• override a risk score;

• add, change or remove a control;

• go ahead despite a warning.

Notes are different

A rationale explains a decision and lives in the history. If you just want to say something about an item, add a note.