Velocity · term 3.1.18 · risk in 6.2
Velocity, and the risk it brings
How fast data moves through the estate: created, then transmitted, stored, analysed and visualised. The rate covers the whole life cycle, not only the moment of creation.
What the draft means by velocity
How fast data moves through the estate: created, then transmitted, stored, analysed and visualised. The rate covers the whole life cycle, not only the moment of creation. The definition sits in clause 3.1.18 and the risk it brings is described in the public clause 5.2, with the paired threats and controls in clause 6.2.
The risk the draft names
A breach that is over before a batch control notices, a stream that bypasses the control in front of the warehouse, and a model whose data changed before its review.
What to check in the estate
Measure the time from an event in the stream to a human decision. Put the control in the path, not beside it. Ask which controls were designed for a nightly batch and are still running on a stream. For AI, ask how fast the input data changes and who is told.
What an auditor samples for velocity
- Streaming architecture
- Control points in the path
- Measured detection time
- Model input change record
These are the artefacts that show the characteristic is managed, not only named. Name them before the audit, because an evidence list written afterwards is a description of what happened, not a control.
The definition in this draft
The definition moved from the speed of generation to how fast data moves across the whole life cycle.
The clause behind the pairing is clause 6.2, and the definition is term 3.1.18. The wider change table is on the changes page.
Where this comes from
- Public view of ISO/IEC DIS 27045.2 in the ISO Online Browsing Platform. The table of contents, foreword, introduction, clause 1, clause 2, clause 3.1, clause 3.2 and clause 5 are public. Clauses 4, 6, 7 and Annex A are not. Retrieved 21 October 2026.
- Public view of the first draft, ISO/IEC DIS 27045. Used only for the change table. The first draft is superseded by the .2 draft. Retrieved 21 October 2026.