ISO/IEC DIS 27007 · stage 40.60, close of voting Ballot closed 23 September 2026 Planning date 12 September 2027, an estimate Official text
27007ISO 27007 Revision CheckerISMS audit guidance, clause by clause

ISO/IEC DIS 27007, Edition 4 (unpublished), life cycle and foreword

Dates and stage

The DIS is at stage 40.60, close of voting on 2026-09-23. The planning date used here is 12 September 2027, an estimate from the stage, not an ISO date. The next checkpoints are 40.99, 50.00, 50.20, 50.60 and 60.60.

The ISO life cycle records the DIS registered on 2026-04-29, the ballot initiated on 2026-06-30 and the close of voting on 2026-09-23. The BSI draft cover sheet gives a comment deadline of 2026-08-23 and a voting end of 2026-09-22; the one-day difference is the national and international calendar, and the ISO record is the one this site uses.

After the close of voting the committee can refer the DIS back (40.92), decide on a new ballot (40.93) or approve it for registration as an FDIS (40.99). The FDIS then has its own ballot (50.20) and a proof stage (50.60) before publication (60.60). A DIS is not a published standard and cannot be certified against.

ISO/IEC 27007:2020 stays published while the new edition is in development; the ISO life cycle shows it at stage 90.92, to be revised. When the new edition is published the old one is withdrawn. The withdrawal date is the publication date of the new edition, so check it on the ISO record when stage 60.60 appears. The 12 September 2027 date is a planning target. It is about twelve months after the close of the DIS ballot and sits inside the 2027 window the public record supports. It is not a forecast, not a deadline and not an ISO commitment. The site labels it that way on every page and in the free check.

What to keep

  • The stage and date recorded in the audit programme change log
  • A dated decision on when to review the programme
  • The source URL and retrieval date for each date used

Common gaps

  • A DIS date presented as a publication date
  • A certificate transition assumed when 27007 is guidance
  • No record of the stage check

What this means for your programme

Put the change in the programme record with a date, an owner and the source you checked. Do not rewrite the whole procedure on the strength of a draft. The kit's crosswalk and dated plan are built for this: one row per clause or annex row, with the current position and the draft position side by side.

This page is our reading of the public record. The DIS body is not public in full. Where a statement depends on the 19011:2026 change summary rather than on the DIS text, the page says so.