{
 "slug": "iso-27007-revision-checker",
 "name": "ISO 27007 Revision Checker",
 "site": "https://iso-27007-revision-checker.theartofservice.com",
 "rule": "ISO/IEC DIS 27007: Information security, cybersecurity and privacy protection, Guidelines for information security management systems auditing",
 "designation": "ISO/IEC DIS 27007",
 "edition": "Edition 4",
 "replaces": [
  "ISO/IEC 27007:2020"
 ],
 "key_date": "2027-09-12",
 "key_date_days": 328,
 "retrieved_at": "2026-10-19",
 "change_date": "2026-10-19",
 "official_url": "https://www.iso.org/standard/92416.html",
 "current_standard": "ISO/IEC 27007:2020, Edition 3",
 "disclaimer": "Not legal advice; does not certify. Requirements are paraphrased in our own words; the licensed text is not reproduced.",
 "built_from_graph": true,
 "graph_framework": "ISO/IEC 27007:2020",
 "graph_url": "https://compliance.theartofservice.com/frameworks/iso-iec-27007-2020",
 "counts": {
  "clauses": 43,
  "foundation": 1,
  "annex_rows": 27,
  "annex_groups": 7,
  "terms": 50,
  "evidence": 181,
  "gaps": 186,
  "sources": 12,
  "crosswalk": 71,
  "pages": 101
 },
 "revision": {
  "designation": "ISO/IEC DIS 27007",
  "title": "Information security, cybersecurity and privacy protection: Guidelines for information security management systems auditing",
  "edition": "Edition 4",
  "copyright": "2026",
  "pages": 50,
  "committee": "ISO/IEC JTC 1/SC 27, Information security, cybersecurity and privacy protection",
  "secretariat": "DIN",
  "ics": [
   "35.030",
   "03.120.20"
  ],
  "stage": "40.60 Close of voting",
  "stage_date": "2026-09-23",
  "ballot_open": "2026-06-30",
  "ballot_close": "2026-09-23",
  "ballot_close_bsi": "2026-09-22",
  "dis_registered": "2026-04-29",
  "project_start": "2025-06-30",
  "replaces": [
   "ISO/IEC 27007:2020"
  ],
  "predecessor_url": "https://www.iso.org/standard/77802.html",
  "official_url": "https://www.iso.org/standard/92416.html",
  "key_date": "2027-09-12",
  "key_date_basis": "An estimate from the ISO stage, not an ISO date. The standard is at stage 40.60, close of voting, on 2026-09-23. The planning date used here is 12 September 2027, about twelve months after the close of the DIS ballot. ISO has not announced a publication date. The next public checkpoints are 40.99 (DIS approved for FDIS), 50.00 (FDIS registered), 50.20 (FDIS ballot), 50.60 (close of voting) and 60.60 (published).",
  "key_date_days": 328,
  "publication_earliest": "2027-03-31",
  "publication_latest": "2027-12-31",
  "publication_window": "2027, with the planning date in September",
  "transition": "none",
  "transition_note": "ISO/IEC 27007 is guidance, not a certifiable requirement standard. A new edition does not expire an ISO/IEC 27001 certificate and no transition audit is required by 27007 itself. Certification bodies and accreditation bodies set their own rules for the certification audits they run. The planning date matters because an audit programme written around the 2020 guidance should be reviewed before the next audit cycle that follows publication.",
  "main_changes": [
   "The document is aligned with the revision of ISO 19011, published as ISO 19011:2026 on 2026-05-27, and with ISO/IEC 27001:2022/Amd 1:2024.",
   "The scope, the seven audit principles and the 5, 6 and 7 clause structure are unchanged from the 2020 edition.",
   "Annex A, the guidance for ISMS auditing practice, is aligned to the clauses of ISO/IEC 27001:2022 rather than the 2013 edition.",
   "The revision of ISO 19011 adds guidance on remote auditing methods, and that guidance flows into the 27007 revision.",
   "The 2020 edition was 39 pages; the DIS is 50 pages, with a longer Annex A."
  ],
  "what_it_is_not": "It is not a certifiable standard. It does not set new requirements on an organisation's ISMS. It does not replace ISO/IEC 27001, ISO/IEC 27006-1 or ISO/IEC 17021-1.",
  "counts": {
   "clauses": 43,
   "annex_rows": 27,
   "annex_groups": 7,
   "terms": 50,
   "evidence": 181,
   "gaps": 186,
   "sources": 12,
   "pages": 101,
   "foundation": 1,
   "crosswalk": 71
  }
 },
 "sources": [
  "iso-dis",
  "iso-obp-dis",
  "bsi-dpc",
  "iso-2020",
  "held-2020",
  "iso-19011-2026",
  "held-19011-2026",
  "iso-27001-2022",
  "held-27001-2022",
  "iso-27006",
  "iso-17021",
  "iaf-md1"
 ]
}