Management systems
Standards alignment and governance
How Orbit can support service-management and information-security evidence, the limits of that alignment, and the deployment records management should expect.
The standards position
Orbit documentation maps product capabilities and operating practices to relevant management-system and service-management standards. The mappings are implementation guidance: they help a customer identify where Orbit records, configuration and release evidence may support its control environment.
They are not a certificate, conformity assessment, statement of RME Solutions Technology certification or assurance that a customer deployment conforms to a standard. Conformity belongs to the organisation, its defined scope, its operated controls and—where applicable—independent accredited assessment.
Referenced frameworks
The public alignment library focuses on the standards most relevant to service operations, information security and quality. Applicability is decided per deployment.
| Framework | Relevant Orbit evidence | Claim limit |
|---|---|---|
| ISO/IEC 20000-1:2018 | Service records, ownership, knowledge, change and release evidence | Does not establish a service management system |
| ISO/IEC 27001:2022 / 27002:2022 | Access, change, logging, supplier and operational evidence hooks | Does not establish or certify an ISMS |
| ISO 9001:2015 | Controlled information, corrective work and service-quality records | Does not establish or certify a QMS |
| ITIL practices | Incident, request, knowledge, change and continual-improvement patterns | Not an ITIL certification or endorsement |
Evidence hooks available to the organisation
Orbit can structure records that make control operation easier to demonstrate, provided the organisation defines the process and retains the records appropriately.
- Service requests, incidents, assignment, priority, status and resolution history.
- Approvals and fulfilment decisions linked to the underlying service record.
- Knowledge, catalogue and form configuration under controlled release.
- Asset and lifecycle work linked to service activity.
- Release manifests, checksums, validation results and change approvals.
- Permission, access-review, backup, recovery and operational-review evidence supplied by the tenant owners.
Management ownership
The customer service manager owns service scope, metrics and review cadence. The security and privacy owners maintain risk, ISMS/PIMS scope and control evidence. Platform administrators own tenant configuration and deployment evidence. RME Solutions Technology supplies product documentation and agreed support evidence within the support agreement.
Review applicability when the standard edition, service boundary, data classification, provider, architecture or enabled Orbit modules change.
Suggested due-diligence pack
A managerial approval pack should connect the product documentation to the organisation’s own decisions and evidence.
- Approved architecture, scope, responsibility matrix and information classification.
- Standards applicability statement and explicit exclusions.
- Permission, consent, DLP, retention, backup and continuity decisions.
- Implementation-assurance checklist with owners and evidence references.
- Release, support, supplier and periodic-review records.