Velocity-related threats and controls

Text not public. The public view of the draft withholds this unit. The page states its position, what it asks the reader to prepare and the evidence an auditor samples. It does not state the clause text.

What it says, in our words

Velocity is how fast data moves. The public clause 5.2 ties it to the speed of flow, and to the way AI and LLMs process and generate at a rate that needs real-time protection. The threats are the ones speed creates: a breach that is over before a batch control notices, a streaming path that bypasses the control that guards the warehouse, and a model whose data has already changed by the time it is reviewed.

What it means for an ISMS manager

Measure the control gap in time, not in coverage. Ask how long it takes from an event in the stream to a human decision, and what control sits in the path rather than beside it. Velocity is the characteristic most likely to expose a control that was designed for a nightly batch.

What an auditor samples

• The streaming architecture.
• the control points in the path.
• the measured detection time.
• the change record for any model fed by the stream.

Evidence lines are the artefacts an auditor or a reviewer asks to see. They are named here so the work can be planned; they are not a certificate and they do not replace the official text.