ISO/IEC DIS 27007 · stage 40.60, close of voting Ballot closed 23 September 2026 Planning date 12 September 2027, an estimate Official text
27007ISO 27007 Revision CheckerISMS audit guidance, clause by clause

Sources

Every source, its role and what it proves.

The record separates the official record from the held text and from interpretation. This page lists all 12 sources, what each is used for and what it cannot prove.

Retrieved

All sources were read on 2026-10-19. The record date is 2026-10-19. A change to a source is what the change watch reports.

12 sources
IDSourceKindWhat it is used for
iso-disISO/IEC DIS 27007, Edition 4, standard page 92416officialStage 40.60, close of voting 2026-09-23, 50 pages, will replace ISO/IEC 27007:2020. Abstract and life cycle read on 2026-10-19.
iso-obp-disISO/IEC DIS 27007 public text in the ISO Online Browsing PlatformofficialForeword, introduction, scope, normative references, terms and definitions, and bibliography are public. Clauses 4 to 7 and Annex A are not public in full.
bsi-dpcBSI Draft for Public Comment 26/30530174 DC, ISO/IEC DIS 27007officialThe BSI draft cover sheet records comments due 2026-08-23 and voting to 2026-09-22. Held in the framework corpus.
iso-2020ISO/IEC 27007:2020, Edition 3, standard page 77802officialPublished 2020-01, 39 pages, stage 90.92, expected to be replaced by ISO/IEC DIS 27007.
held-2020Held ISO/IEC 27007:2020 requirement setheld43 substantive clause records, the scope and terms page, and 26 Annex A audit-guidance rows, read from the held 2020 edition and its translation, retrieved 2026-10-19. The 27th annex row is the new 6.3 row. Used for the requirement and evidence text in our own words. The licensed text is not reproduced.
iso-19011-2026ISO 19011:2026, Edition 4, standard page 88984officialPublished 2026-05-27, 46 pages. The DIS 27007 foreword aligns the revision with the 19011 revision. Main change: expanded guidance on remote auditing methods.
held-19011-2026Held BS EN ISO 19011:2026 and the public change summaryheldThe standard's foreword names the remote-audit expansion. The change summary is a third-party interpretation and is labelled as such wherever a clause-level 19011 change is named.
iso-27001-2022ISO/IEC 27001:2022 and Amendment 1:2024officialThe requirement set the 2026 DIS annex is aligned to. Clause numbers and titles are public.
held-27001-2022Held ISO/IEC 27001:2022 requirement setheldThe 2022 clause records used to state the current requirement on each Annex A page, retrieved 2026-10-19.
iso-27006ISO/IEC 27006-1:2024officialRequirements for bodies providing audit and certification of an ISMS. Applies to third-party certification audits, not to first- or second-party audits.
iso-17021ISO/IEC 17021-1:2015officialConformity assessment requirements for bodies providing audit and certification of management systems.
iaf-md1IAF MD1:2023, audit and certification of a multi-site organisationofficialNamed in the DIS bibliography. Relevant to the extent of an audit programme.
The split

Official, held, and interpretation.

Official means the ISO standard page, the ISO Online Browsing Platform, the BSI draft cover and the ISO life cycle. These prove the stage, the dates, the scope, the normative references and the public terms.

Held means the licensed or corpus copy we read to state the requirements and the evidence. The held 2020 requirement set gives 43 substantive clause records, the scope and terms page and 26 annex rows; the new 6.3 row makes 27. The held 2022 requirement set gives the current clause text on the annex pages. The held 19011:2026 text gives the change in remote audit, programme risk and competence.

Interpretation means the 19011:2026 change summary, a third-party document held with the standard. It is labelled wherever a clause-level 19011 change is named, because it is not ISO text. The DIS body itself is not public, so no page claims to quote it.

If a source link does not resolve, write to support@theartofservice.com and we will correct or remove the line.