# ISO 27007 Revision Checker

A free clause-by-clause reference to ISO/IEC DIS 27007 and the public record of its revision, a free edition check, and a paid revision kit (USD 799 one off) and change watch (USD 49 a month).

Not legal advice; does not certify. ISO/IEC 27007 is guidance, not a certifiable requirement standard.

Record date: 2026-10-19. Stage: 40.60, close of voting 2026-09-23. Planning date: 2027-09-12, an estimate from the stage, not an ISO date.

## Free

- Clause record: https://iso-27007-revision-checker.theartofservice.com/clauses/ (43 substantive clause records plus scope and terms)
- Annex A: https://iso-27007-revision-checker.theartofservice.com/annex-a/ (27 audit-guidance rows, remapped to ISO/IEC 27001:2022)
- Revision record: https://iso-27007-revision-checker.theartofservice.com/revision/
- Free edition check: https://iso-27007-revision-checker.theartofservice.com/scope/
- Answers: https://iso-27007-revision-checker.theartofservice.com/answers/
- Sources: https://iso-27007-revision-checker.theartofservice.com/sources/
- Method: https://iso-27007-revision-checker.theartofservice.com/methodology/
- About: https://iso-27007-revision-checker.theartofservice.com/about/

## Paid

- Revision kit, USD 799 one off: https://iso-27007-revision-checker.theartofservice.com/pricing#kit
- Change watch, USD 49 a month: https://iso-27007-revision-checker.theartofservice.com/pricing#watch
- Practice plan, USD 149 a month for up to ten client organisations: https://iso-27007-revision-checker.theartofservice.com/pricing#practice

## Key pages

- 1-3 Scope, references and terms: https://iso-27007-revision-checker.theartofservice.com/clauses/1-3-scope-references-terms/
- 4 Principles of auditing: https://iso-27007-revision-checker.theartofservice.com/clauses/4/
- 5.1 General: establishing the audit programme: https://iso-27007-revision-checker.theartofservice.com/clauses/5-1/
- 5.2 Establishing audit programme objectives: https://iso-27007-revision-checker.theartofservice.com/clauses/5-2/
- 5.3 Determining and evaluating audit programme risks and opportunities: https://iso-27007-revision-checker.theartofservice.com/clauses/5-3/
- 5.4.1 Roles and responsibilities of the individual(s) managing audit programme: https://iso-27007-revision-checker.theartofservice.com/clauses/5-4-1/
- 5.4.2 Competence of individual(s) managing audit programme: https://iso-27007-revision-checker.theartofservice.com/clauses/5-4-2/
- 5.4.3 Establishing extent of the audit programme: https://iso-27007-revision-checker.theartofservice.com/clauses/5-4-3/
- 5.4.4 Determining audit programme resources: https://iso-27007-revision-checker.theartofservice.com/clauses/5-4-4/
- 5.5.2 Defining the objectives, scope and criteria for an individual audit: https://iso-27007-revision-checker.theartofservice.com/clauses/5-5-2/
- 5.5.3 Selecting and determining audit methods: https://iso-27007-revision-checker.theartofservice.com/clauses/5-5-3/
- 5.5.4 Selecting audit team members: https://iso-27007-revision-checker.theartofservice.com/clauses/5-5-4/
- 5.5.5 Assigning responsibility for an individual audit to the audit team leader: https://iso-27007-revision-checker.theartofservice.com/clauses/5-5-5/
- 5.5.6 Managing audit programme results: https://iso-27007-revision-checker.theartofservice.com/clauses/5-5-6/
- 5.5.7 Managing and maintaining audit programme records: https://iso-27007-revision-checker.theartofservice.com/clauses/5-5-7/
- 5.6 Monitoring audit programme: https://iso-27007-revision-checker.theartofservice.com/clauses/5-6/
- 5.7 Reviewing and improving audit programme: https://iso-27007-revision-checker.theartofservice.com/clauses/5-7/
- 6.2.2 Establishing contact with auditee: https://iso-27007-revision-checker.theartofservice.com/clauses/6-2-2/
- 6.2.3 Determining feasibility of audit: https://iso-27007-revision-checker.theartofservice.com/clauses/6-2-3/
- 6.3.1 Performing review of documented information: https://iso-27007-revision-checker.theartofservice.com/clauses/6-3-1/
- 6.3.2 Audit planning: https://iso-27007-revision-checker.theartofservice.com/clauses/6-3-2/
- 6.3.3 Assigning work to audit team: https://iso-27007-revision-checker.theartofservice.com/clauses/6-3-3/
- 6.3.4 Preparing documented information for audit: https://iso-27007-revision-checker.theartofservice.com/clauses/6-3-4/
- 6.4.2 Assigning roles and responsibilities of guides and observers: https://iso-27007-revision-checker.theartofservice.com/clauses/6-4-2/
- 6.4.3 Conducting opening meeting: https://iso-27007-revision-checker.theartofservice.com/clauses/6-4-3/
- 6.4.4 Communicating during audit: https://iso-27007-revision-checker.theartofservice.com/clauses/6-4-4/
- 6.4.5 Audit information availability and access: https://iso-27007-revision-checker.theartofservice.com/clauses/6-4-5/
- 6.4.6 Reviewing documented information while conducting audit: https://iso-27007-revision-checker.theartofservice.com/clauses/6-4-6/
- 6.4.7 Collecting and verifying information: https://iso-27007-revision-checker.theartofservice.com/clauses/6-4-7/
- 6.4.8 Generating audit findings: https://iso-27007-revision-checker.theartofservice.com/clauses/6-4-8/
- 6.4.9 Determining audit conclusions: https://iso-27007-revision-checker.theartofservice.com/clauses/6-4-9/
- 6.4.10 Conducting closing meeting: https://iso-27007-revision-checker.theartofservice.com/clauses/6-4-10/
- 6.5.1 Preparing audit report: https://iso-27007-revision-checker.theartofservice.com/clauses/6-5-1/
- 6.5.2 Distributing audit report: https://iso-27007-revision-checker.theartofservice.com/clauses/6-5-2/
- 6.6 Completing audit: https://iso-27007-revision-checker.theartofservice.com/clauses/6-6/
- 6.7 Conducting audit follow-up: https://iso-27007-revision-checker.theartofservice.com/clauses/6-7/
- 7.2.2 Personal behaviour: https://iso-27007-revision-checker.theartofservice.com/clauses/7-2-2/
- 7.2.3 Knowledge and skills: https://iso-27007-revision-checker.theartofservice.com/clauses/7-2-3/
- 7.2.4 Achieving auditor competence: https://iso-27007-revision-checker.theartofservice.com/clauses/7-2-4/
- 7.2.5 Achieving audit team leader competence: https://iso-27007-revision-checker.theartofservice.com/clauses/7-2-5/
- 7.3 Establishing auditor evaluation criteria: https://iso-27007-revision-checker.theartofservice.com/clauses/7-3/
- 7.4 Selecting appropriate auditor evaluation method: https://iso-27007-revision-checker.theartofservice.com/clauses/7-4/
- 7.5 Conducting auditor evaluation: https://iso-27007-revision-checker.theartofservice.com/clauses/7-5/
- 7.6 Maintaining and improving auditor competence: https://iso-27007-revision-checker.theartofservice.com/clauses/7-6/
- A.1.1 Understanding the organization and its context: https://iso-27007-revision-checker.theartofservice.com/annex-a/a-1-1/
- A.1.2 Understanding the needs and expectations of interested parties: https://iso-27007-revision-checker.theartofservice.com/annex-a/a-1-2/
- A.1.3 Determining the scope of the information security management system: https://iso-27007-revision-checker.theartofservice.com/annex-a/a-1-3/
- A.1.4 Information security management system: https://iso-27007-revision-checker.theartofservice.com/annex-a/a-1-4/
- A.2.1 Leadership and commitment: https://iso-27007-revision-checker.theartofservice.com/annex-a/a-2-1/
- A.2.2 Policy: https://iso-27007-revision-checker.theartofservice.com/annex-a/a-2-2/
- A.2.3 Organizational roles, responsibilities and authorities: https://iso-27007-revision-checker.theartofservice.com/annex-a/a-2-3/
- A.3.1.1 Actions to address risks and opportunities: general: https://iso-27007-revision-checker.theartofservice.com/annex-a/a-3-1-1/
- A.3.1.2 Information security risk assessment: https://iso-27007-revision-checker.theartofservice.com/annex-a/a-3-1-2/
- A.3.1.3 Information security risk treatment: https://iso-27007-revision-checker.theartofservice.com/annex-a/a-3-1-3/
- A.3.2 Information security objectives and planning to achieve them: https://iso-27007-revision-checker.theartofservice.com/annex-a/a-3-2/
- A.3.3 Planning of changes: https://iso-27007-revision-checker.theartofservice.com/annex-a/a-3-3/
- A.4.1 Resources: https://iso-27007-revision-checker.theartofservice.com/annex-a/a-4-1/
- A.4.2 Competence: https://iso-27007-revision-checker.theartofservice.com/annex-a/a-4-2/
- A.4.3 Awareness: https://iso-27007-revision-checker.theartofservice.com/annex-a/a-4-3/
- A.4.4 Communication: https://iso-27007-revision-checker.theartofservice.com/annex-a/a-4-4/
- A.4.5.1 Documented information: general: https://iso-27007-revision-checker.theartofservice.com/annex-a/a-4-5-1/
- A.4.5.2 Documented information: creating and updating: https://iso-27007-revision-checker.theartofservice.com/annex-a/a-4-5-2/
- A.4.5.3 Documented information: control: https://iso-27007-revision-checker.theartofservice.com/annex-a/a-4-5-3/
- A.5.1 Operational planning and control: https://iso-27007-revision-checker.theartofservice.com/annex-a/a-5-1/
- A.5.2 Information security risk assessment: https://iso-27007-revision-checker.theartofservice.com/annex-a/a-5-2/
- A.5.3 Information security risk treatment: https://iso-27007-revision-checker.theartofservice.com/annex-a/a-5-3/
- A.6.1 Monitoring, measurement, analysis and evaluation: https://iso-27007-revision-checker.theartofservice.com/annex-a/a-6-1/
- A.6.2 Internal audit: https://iso-27007-revision-checker.theartofservice.com/annex-a/a-6-2/
- A.6.3 Management review: https://iso-27007-revision-checker.theartofservice.com/annex-a/a-6-3/
- A.7.1 Nonconformity and corrective action: https://iso-27007-revision-checker.theartofservice.com/annex-a/a-7-1/
- A.7.2 Continual improvement: https://iso-27007-revision-checker.theartofservice.com/annex-a/a-7-2/

## Sources

- ISO/IEC DIS 27007, Edition 4, standard page 92416: https://www.iso.org/standard/92416.html (official)
- ISO/IEC DIS 27007 public text in the ISO Online Browsing Platform: https://www.iso.org/obp/ui#iso:std:iso-iec:27007:dis:ed-4:v1:en (official)
- BSI Draft for Public Comment 26/30530174 DC, ISO/IEC DIS 27007: https://standardsdevelopment.bsigroup.com/ (official)
- ISO/IEC 27007:2020, Edition 3, standard page 77802: https://www.iso.org/standard/77802.html (official)
- Held ISO/IEC 27007:2020 requirement set: https://www.iso.org/standard/77802.html (held)
- ISO 19011:2026, Edition 4, standard page 88984: https://www.iso.org/standard/88984.html (official)
- Held BS EN ISO 19011:2026 and the public change summary: https://www.iso.org/standard/88984.html (held)
- ISO/IEC 27001:2022 and Amendment 1:2024: https://www.iso.org/standard/27001 (official)
- Held ISO/IEC 27001:2022 requirement set: https://www.iso.org/standard/27001 (held)
- ISO/IEC 27006-1:2024: https://www.iso.org/standard/82908.html (official)
- ISO/IEC 17021-1:2015: https://www.iso.org/standard/61651.html (official)
- IAF MD1:2023, audit and certification of a multi-site organisation: https://iaf.nu/en/iaf-documents/?cat_id=7 (official)