ISO/IEC DIS 27007 · stage 40.60, close of voting Ballot closed 23 September 2026 Planning date 12 September 2027, an estimate Official text
27007ISO 27007 Revision CheckerISMS audit guidance, clause by clause

ISO/IEC DIS 27007, Edition 4 (unpublished), Clause 6.4.10

Closing meeting

The closing meeting is where the findings are presented, the evidence is tested with the auditee, the grades are confirmed and the next steps are agreed.

Three layers on this page. 1. The 2020 guidance as published, which cites ISO 19011:2018 and ISO/IEC 27001:2013. 2. The current external references a 2026 audit may use: ISO 19011:2026 and ISO/IEC 27001:2022/Amd 1:2024. 3. The DIS, limited to what the public record proves; inference is labelled.

Current: 2020Draft: aligned1 evidence items

The 2020 guidance as published

This is the 2020 layer. It cites ISO 19011:2018 and ISO/IEC 27001:2013, as the 2020 edition did. It is not a statement of the DIS.

ISO 19011:2018, 6.4.10 is followed with nothing added: a closing meeting chaired by the team leader presents the findings and conclusions to the auditee's management and the responsible functions, advises of situations that may reduce confidence in the conclusions, agrees where defined the time frame for the action plan, covers the handling of findings and the post-audit activities, and records diverging opinions that remain unresolved.

The closing meeting is where the findings are presented, the evidence is tested with the auditee, the grades are confirmed and the next steps are agreed. A finding that appears for the first time in the report is a process failure.

The DIS layer: what the public record shows

The DIS foreword aligns the revision with ISO 19011:2026 and ISO/IEC 27001:2022/Amd 1:2024. The DIS body is not public in full; this is the alignment, not a quotation.

The 19011:2026 revision says the audit report should not include nonconformities that were not discussed during the audit or at the closing meeting.

Evidence an auditor asks for

  • Audit conductClosing meeting record and attendance

The questions an auditor will ask

The auditor will compare the closing meeting record with the report and ask why a finding was added or removed.

Three tests to run before the next audit

  • Ask for closing meeting record and attendance and trace it to the clause it is meant to satisfy.

Common gaps

  • Findings first seen by management in the written report
  • Confidence limitations withheld at the closing

Prepare before the next audit

Present every finding at the closing meeting, record the auditee's response, and agree the report date and the follow-up route.

Cross-references

6.4.8 6.4.9 6.5.1

Source for this page

Held ISO/IEC 27007:2020 requirement set. https://www.iso.org/standard/77802.html

Retrieved 2026-10-19. 43 substantive clause records, the scope and terms page, and 26 Annex A audit-guidance rows, read from the held 2020 edition and its translation, retrieved 2026-10-19. The 27th annex row is the new 6.3 row. Used for the requirement and evidence text in our own words. The licensed text is not reproduced.