ISO/IEC DIS 27007, Edition 4 (unpublished), Clause 5.5.5
Responsibility to the team leader
One named team leader is accountable for the individual audit: planning, assigning work, leading the team, representing it to the auditee and completing the report.
Three layers on this page. 1. The 2020 guidance as published, which cites ISO 19011:2018 and ISO/IEC 27001:2013. 2. The current external references a 2026 audit may use: ISO 19011:2026 and ISO/IEC 27001:2022/Amd 1:2024. 3. The DIS, limited to what the public record proves; inference is labelled.
The 2020 guidance as published
This is the 2020 layer. It cites ISO 19011:2018 and ISO/IEC 27001:2013, as the 2020 edition did. It is not a statement of the DIS.
ISO 19011:2018, 5.5.5 is followed with nothing added: responsibility for each ISMS audit is assigned to an audit team leader in time for effective planning, with the objectives, criteria, scope, methods, team composition, auditee contacts, locations, time frame, resources, information security and confidentiality requirements and any other relevant information provided.
One named team leader is accountable for the individual audit: planning, assigning work, leading the team, representing it to the auditee and completing the report. The programme owner can set the scope, but the team leader owns the audit's conduct.
The DIS layer: what the public record shows
The DIS foreword aligns the revision with ISO 19011:2026 and ISO/IEC 27001:2022/Amd 1:2024. The DIS body is not public in full; this is the alignment, not a quotation.
The public DIS record does not show a change to this clause. The clause number and title are unchanged.
Evidence an auditor asks for
- Audit planningAssignment record per audit with the information handed to the team leader
The questions an auditor will ask
The assessor will ask who led a specific audit and where the boundary sat between the programme owner's decisions and the team leader's.
Three tests to run before the next audit
- Ask for assignment record per audit with the information handed to the team leader and trace it to the clause it is meant to satisfy.
Common gaps
- Team leaders receiving the scope on the day of the audit
- Confidentiality requirements not passed to the leader
Prepare before the next audit
Name the team leader in the audit plan and record the handover from the programme owner. If the leader changes mid-audit, record the reason and the new accountability.
Cross-references
Held ISO/IEC 27007:2020 requirement set. https://www.iso.org/standard/77802.html
Retrieved 2026-10-19. 43 substantive clause records, the scope and terms page, and 26 Annex A audit-guidance rows, read from the held 2020 edition and its translation, retrieved 2026-10-19. The 27th annex row is the new 6.3 row. Used for the requirement and evidence text in our own words. The licensed text is not reproduced.