ISO/IEC DIS 27045.2 Draft International Standard Stage 40.60 Close of voting, 7 August 2026 Publication estimate 15 September 2027 Kit USD 799 or watch USD 49 a month
ISO 27045 Revision CheckerBig data risk, read from the draft

Method

How the record is read, written and checked

A record is only worth as much as the method behind it. This page states the method in plain words so a reader can decide whether to trust a line before checking it.

01Reading

Read from the source, never from memory

The ISO record page supplies the status, stage, edition, page count, price, committee, ICS codes and abstract. The ISO stage feed supplies the date the stage was reached. The public view of the draft supplies the table of contents, foreword, introduction, clauses 1, 2, 3.1, 3.2 and 5. The first draft is read only for the change table.

No clause is written from a search snippet, a consultancy summary or memory. Where a clause is not public, the page says so and does not state it.

The risk method on this page is the reading that drives the record: clause 7 is the process an ISMS already runs, so the method adds a big data lens to it rather than a second process. The controlled documents it touches are listed here so a reader knows what to version: the risk method, the characteristic sheet, the evidence list, the internal audit checklist and the management review note. Each is versioned with an owner and a date.

02Writing

Our words, cited to the clause

Every requirement is a statement in our own words. Titles and defined terms stay as the draft writes them because they are the reader's index. A seven-word overlap test runs over every authored field and every served page against both drafts; a shared run of seven consecutive words is a failure and blocks the deploy.

Evidence lines name artefacts, not restated requirements. An evidence line that says evidence that the clause is met is not evidence.

03Checking

The record is re-checked, and it fails loudly

A refresh script re-reads the official sources, compares the facts and the record hash, and fails when anything moved. That failure is what the paid watch sends. A fetch failure is a failure, never a pass.

The free check computes from the same record. It starts blank, returns scope incomplete for an unanswered question, and names the clause behind every line.

04Limits

What the method does not do

It does not read the withheld clauses, it does not predict the ballot, and it does not give legal advice. It does not certify and it does not rule on compliance. It states what the public text says and what evidence an auditor samples, and it dates both.

The sources The changelog