A reading, not a reproduction.
The clause record is our statement of the requirements in ISO/IEC 27007:2020, read against the copy we hold. The 2026 treatment is our reading of the public DIS record and the ISO 19011:2026 change. The annex pages add the current ISO/IEC 27001:2022 requirement so a reader can see what the 2020 audit guidance was testing and what the 2022 clause now asks for.
We do not reproduce the licensed text. The official text of ISO/IEC 27007, ISO 19011 and ISO/IEC 27001 is sold by ISO and its member bodies. Where a text is not held in full, the page names it and does not state it.
What it does not do
- It does not certify an organisation or transfer a certificate.
- It does not audit an organisation on the buyer's behalf.
- It does not give legal advice on a contract, a regulation or a certification decision.
- It does not predict the publication date as if ISO had announced it.
- It does not treat the DIS as the final text.
Who it is for
The CISO or ISMS manager who owns the audit programme, the consultant or lead auditor who runs programmes for clients, and the certification body reviewer who needs to see whether a programme was updated for the 2022 edition. The free pages are complete enough to read without buying anything. The kit adds a one-page statement you can give to a certification body or a client.