Volume-related threats and controls

Text not public. The public view of the draft withholds this unit. The page states its position, what it asks the reader to prepare and the evidence an auditor samples. It does not state the clause text.

What it says, in our words

Volume is the characteristic the document ties to scale and to layers. The public clause 5.2 describes the risk of many features and attributes, of storage and transmission split across tiers, networks and protocols, and of data that has to be normalised across those layers. The practical threats follow from that shape: data that is copied into a layer nobody watches, a harmonisation job that changes values without a record, and a backup or replica that falls outside the retention rule.

What it means for an ISMS manager

Take an inventory of copies before you take an inventory of controls. Name each layer, the system that owns it and the person who can delete from it. Then ask where normalisation happens and what record it leaves. The clause pairs the characteristic with threats and controls in the published text; this page prepares the ground for that reading without stating it.

What an auditor samples

• The layer map.
• the copy inventory.
• the normalisation record and the retention schedule.

Evidence lines are the artefacts an auditor or a reviewer asks to see. They are named here so the work can be planned; they are not a certificate and they do not replace the official text.