ISO/IEC DIS 27007, Edition 4 (unpublished), Clause 6.4.3
Opening meeting
The opening meeting sets the rules: purpose, scope, criteria, method, schedule, roles, confidentiality, the grading of findings and the route for a concern.
Three layers on this page. 1. The 2020 guidance as published, which cites ISO 19011:2018 and ISO/IEC 27001:2013. 2. The current external references a 2026 audit may use: ISO 19011:2026 and ISO/IEC 27001:2022/Amd 1:2024. 3. The DIS, limited to what the public record proves; inference is labelled.
The 2020 guidance as published
This is the 2020 layer. It cites ISO 19011:2018 and ISO/IEC 27001:2013, as the 2020 edition did. It is not a statement of the DIS.
ISO 19011:2018, 6.4.3 is followed with nothing added: an opening meeting chaired by the team leader with the auditee's management and the responsible functions confirms agreement to the plan, introduces the team and roles, confirms that all planned activities can be performed and covers the confidentiality and information security arrangements, methods, reporting and the conditions for termination, at a formality matched to the auditee.
The opening meeting sets the rules: purpose, scope, criteria, method, schedule, roles, confidentiality, the grading of findings and the route for a concern. It is also the auditee's chance to correct a wrong assumption before the evidence work starts.
The DIS layer: what the public record shows
The DIS foreword aligns the revision with ISO 19011:2026 and ISO/IEC 27001:2022/Amd 1:2024. The DIS body is not public in full; this is the alignment, not a quotation.
The 19011:2026 revision adds introductions for observers, guides, technical experts and interpreters, and asks for the system for grading nonconformities to be defined and communicated.
Evidence an auditor asks for
- Audit conductOpening meeting record and attendance
The questions an auditor will ask
The assessor will ask for the opening meeting record and for the grading scheme that was explained.
Three tests to run before the next audit
- Ask for opening meeting record and attendance and trace it to the clause it is meant to satisfy.
Common gaps
- Confidentiality of audit evidence not confirmed at the opening
- Plan changes never agreed with the auditee
Prepare before the next audit
Use a short agenda with the grading scheme and the escalation route on one page. Record attendance and any change agreed.
Cross-references
Held ISO/IEC 27007:2020 requirement set. https://www.iso.org/standard/77802.html
Retrieved 2026-10-19. 43 substantive clause records, the scope and terms page, and 26 Annex A audit-guidance rows, read from the held 2020 edition and its translation, retrieved 2026-10-19. The 27th annex row is the new 6.3 row. Used for the requirement and evidence text in our own words. The licensed text is not reproduced.