ISO/IEC DIS 27007, Edition 4 (unpublished), Clause 6.4.2
Guides, observers and experts
Guides, observers and technical experts each have a different role.
Three layers on this page. 1. The 2020 guidance as published, which cites ISO 19011:2018 and ISO/IEC 27001:2013. 2. The current external references a 2026 audit may use: ISO 19011:2026 and ISO/IEC 27001:2022/Amd 1:2024. 3. The DIS, limited to what the public record proves; inference is labelled.
The 2020 guidance as published
This is the 2020 layer. It cites ISO 19011:2018 and ISO/IEC 27001:2013, as the 2020 edition did. It is not a statement of the DIS.
ISO 19011:2018, 6.4.2 is followed with nothing added: guides and observers may accompany the team with approval and must not influence or interfere with the audit; the team leader may deny observers where that cannot be assured; guides appointed by the auditee assist the team, witness the audit on the auditee's behalf, arrange access and ensure the team's safety and security rules are known and followed.
Guides, observers and technical experts each have a different role. A guide helps the team find people and places; an observer watches without auditing; a technical expert advises without taking over the finding. The team has to assign and explain those roles before the audit starts.
The DIS layer: what the public record shows
The DIS foreword aligns the revision with ISO 19011:2026 and ISO/IEC 27001:2022/Amd 1:2024. The DIS body is not public in full; this is the alignment, not a quotation.
The 19011:2026 revision distinguishes observers from technical experts more clearly and asks the opening meeting to introduce observers, guides, technical experts and interpreters.
Evidence an auditor asks for
- Audit conductRecord of guides and observers and their briefing
The questions an auditor will ask
The auditor will ask an observer what they did and whether their presence affected the evidence.
Three tests to run before the next audit
- Ask for record of guides and observers and their briefing and trace it to the clause it is meant to satisfy.
Common gaps
- Observers steering the auditee's answers
- Guides absent, so access to sensitive areas is unmanaged
Prepare before the next audit
Name each guide, observer and expert in the plan, state their role and limit, and record their agreement to the confidentiality terms.
Cross-references
Held ISO/IEC 27007:2020 requirement set. https://www.iso.org/standard/77802.html
Retrieved 2026-10-19. 43 substantive clause records, the scope and terms page, and 26 Annex A audit-guidance rows, read from the held 2020 edition and its translation, retrieved 2026-10-19. The 27th annex row is the new 6.3 row. Used for the requirement and evidence text in our own words. The licensed text is not reproduced.