Baseline Delta
Each class baseline is enumerated elsewhere on this site. What is not stated anywhere is the difference — and the difference is what a provider holding one authorization and targeting the next actually owes. Every upward pair is listed, including the non-adjacent one: a provider going from the lowest baseline to the highest is running one migration, not two.
167 controls added over the 155 class B already owes, of which 46 sit in the annual independent-assessment subset.
- 104 of 167 reached by a KSI
- 44 covered by a recipe
- 78 with no mechanism at all
- 7 clocks tighten
254 controls added over the 155 class B already owes, of which 67 sit in the annual independent-assessment subset.
- 104 of 254 reached by a KSI
- 44 covered by a recipe
- 119 with no mechanism at all
- 7 clocks tighten
87 controls added over the 322 class C already owes, of which 21 sit in the annual independent-assessment subset.
- 0 of 87 reached by a KSI
- 0 covered by a recipe
- 41 with no mechanism at all
- 6 clocks tighten
Class A carries no Rev5 baseline, so it is in no migration here. An absence, stated rather than rendered as a delta of zero.