Validity · term 3.1.14 · risk in 6.8
Validity, and the risk it brings
Whether the data is fit for the purpose it is put to, judged on relevance, consistency, precision and correctness. Accurate is not the same as valid: a record can be right and still incomplete.
What the draft means by validity
Whether the data is fit for the purpose it is put to, judged on relevance, consistency, precision and correctness. Accurate is not the same as valid: a record can be right and still incomplete. The definition sits in clause 3.1.14 and the risk it brings is described in the public clause 5.2, with the paired threats and controls in clause 6.8.
The risk the draft names
A model that loses validity when the data it was trained on changes, analysis that answers a question nobody asked, and a data set that is accurate but not fit for the decision.
What to check in the estate
Write the intended use down for the data set and the model. Test the data against it and date the test. Monitor training data as a controlled input and set a retraining trigger. Ask whether the data is still the right data for the job.
What an auditor samples for validity
- Intended-use statement
- Validity test and date
- Training data monitoring
- Retraining trigger and record
These are the artefacts that show the characteristic is managed, not only named. Name them before the audit, because an evidence list written afterwards is a description of what happened, not a control.
The definition in this draft
Validity is new in the scope and in the characteristics list. The first draft listed seven characteristics; this draft lists eight.
The clause behind the pairing is clause 6.8, and the definition is term 3.1.14. The wider change table is on the changes page.
Where this comes from
- Public view of ISO/IEC DIS 27045.2 in the ISO Online Browsing Platform. The table of contents, foreword, introduction, clause 1, clause 2, clause 3.1, clause 3.2 and clause 5 are public. Clauses 4, 6, 7 and Annex A are not. Retrieved 21 October 2026.
- Public view of the first draft, ISO/IEC DIS 27045. Used only for the change table. The first draft is superseded by the .2 draft. Retrieved 21 October 2026.