ISO/IEC DIS 27045.2 Draft International Standard Stage 40.60 Close of voting, 7 August 2026 Publication estimate 15 September 2027 Kit USD 799 or watch USD 49 a month
ISO 27045 Revision CheckerBig data risk, read from the draft

Clauses ยท 26 units

The clause map, and what is public

The draft has 26 units. 6 carry public text, 17 carry a title only, and 3 are group headings. The ISO Online Browsing Platform publishes the table of contents, the foreword, the introduction, clauses 1, 2, 3.1, 3.2 and 5. Clauses 4, 6 and 7 and Annex A are withheld.

01The units

Which ones you can read, and which are title only

Each page states what the unit asks of the reader in our own words where the text is public, and states the unit's position and what to prepare where it is not. No page states text the draft withholds. The record says which is which, so a reader never has to guess whether a sentence came from the document.

02All units
The units of ISO/IEC DIS 27045.2
ClauseTitleTextWhat the page gives you
1ScopePublic textPublic text
2Normative referencesPublic textPublic text
3Terms, definitions and abbreviated termsGroup headingA group heading
3.1Terms and definitionsPublic textPublic text
3.2Abbreviated termsPublic textPublic text
4OverviewTitle onlyTitle only
5Introduction to big dataGroup headingPublic text
5.1GeneralPublic textPublic text
5.2Big data characteristicsPublic textPublic text
6Security and privacy threats and controls to big dataTitle onlyTitle only
6.1Volume-related threats and controlsTitle onlyTitle only
6.2Velocity-related threats and controlsTitle onlyTitle only
6.3Variety-related threats and controlsTitle onlyTitle only
6.4Variability-related threats and controlsTitle onlyTitle only
6.5Volatility-related threats and controlsTitle onlyTitle only
6.6Veracity-related threats and controlsTitle onlyTitle only
6.7Value-related threats and controlsTitle onlyTitle only
6.8Validity-related threats and controlsTitle onlyTitle only
6.9Potential threats and controls related to AI and LLMsTitle onlyTitle only
7Big data risk management processGroup headingGroup heading
7.1Establishing risk management frameworkTitle onlyTitle only
7.2Risk identificationTitle onlyTitle only
7.3Risk analysis and evaluationTitle onlyTitle only
7.4Risk treatmentTitle onlyTitle only
7.5Risk monitoring and reviewTitle onlyTitle only
AAnnex A. Mapping between big data characteristics and security and privacy controlsTitle onlyTitle only
03Read next

Where to go from here

If you need to know what moved between drafts, the change table is the shortest read. If you need to test whether the document applies to your estate, the free check takes six answers. If you need the evidence list and the dated plan as a document you can fill in, the kit is the paid route.

The change table The eight characteristics The defined terms