Answer ยท The clause-by-clause diff between the two public drafts.
What changed in ISO/IEC DIS 27045.2?
Fourteen changes are visible between the public text of the first draft and this one. The substantive ones: the scope sentence now lists validity, which the first draft's own introduction and clause 6.8 already used, ISO/IEC 22989:2022 becomes a normative reference, and fifteen definitions differ in wording or source, including a veracity definition that repeated the vulnerability wording in the first draft.
The scope sentence now lists eight
The first draft's scope sentence listed volume and velocity, variety and variability, volatility and veracity, and value, and left validity out. Its introduction and clause 6.8 already used validity, so this draft is correcting the scope to match the rest of the text. Read it as a consistency fix, not a new characteristic.
The AI vocabulary is now a normative reference
ISO/IEC 22989:2022 moves from a term citation to the normative reference list. That makes the AI definitions required reading rather than background, and it matches the clause 6.9 title on AI and LLMs.
The definitions were largely rewritten
Big data, data life cycle, LLM, privacy policy, risk, security capability, variability, variety, velocity, veracity, volatility and volume all changed. The most important is veracity: the first draft repeated the vulnerability definition, and this draft replaces it.
Two titles moved
Clause 5 changed from Big data to Introduction to big data, and Annex A from big data Vs to big data characteristics. Both point the reader at the document's own vocabulary.
The bibliography grew
Five sources are added and one moves out because it is now a normative reference. The additions are data quality, vocabulary, incident response and asset management, which is where the committee looked when it rewrote the definitions.
The sources and the clauses
The record behind this answer is on the publication record, with the ISO page, the stage feed and the public draft linked. The clause map is on the clause page, and the change table on the changes page.
Where this comes from
- ISO record for ISO/IEC DIS 27045.2 (88970). Status, stage 40.60, close of voting, edition 1, 26 pages, CHF 67, committee, ICS codes and the abstract. Retrieved 21 October 2026.
- ISO stage feed for 88970. The feed states that the document reached stage 40.60 on 2026-08-07. Retrieved 21 October 2026.
- Public view of ISO/IEC DIS 27045.2 in the ISO Online Browsing Platform. The table of contents, foreword, introduction, clause 1, clause 2, clause 3.1, clause 3.2 and clause 5 are public. Clauses 4, 6, 7 and Annex A are not. Retrieved 21 October 2026.