Free check · six answers · about a minute
Does ISO/IEC 27045 apply to your estate, and what do you do first?
Six answers, no upload and no account. The check reads the public record of ISO/IEC DIS 27045.2 and your own position, and returns an applicability line, a preparation date and three actions. It does not score compliance and it does not certify.
Your result
Scope incomplete. Answer the six questions to place your estate. The check starts blank and will not call an unanswered question a pass.
Nothing you type here is sent anywhere. The answers stay in the browser and the page computes the result from the record on this site.
What the check can say, and what it will not say
You answered that the organisation does not develop or use a big data system. Clause 1 applies the guidance to organisations that do, so on your answer it does not apply today.
One or more answers do not let the check place your estate. Scope incomplete is the honest answer: the check will not call an unanswered question a pass.
Clause 1 applies the guidance to your estate. The work is to name the characteristics present and evidence them before the audit date you gave.
Clause 1 applies the guidance to your estate. Your audit is far enough out that the first action is to watch the stage and prepare the applicability note.
There is no pass state. The strongest answer the check gives is that the guidance applies to your estate and that the work should start before the audit date you gave. It does not score compliance, does not assess controls and does not certify.
The six actions it can select
- Write the applicability note Name each big data system, its owner and its data types. Cite clause 1. Keep it to one page.
- Complete the eight-characteristic sheet Present, absent and reason, for volume and velocity, variety and variability, volatility and veracity, validity and value. Keep veracity and validity apart.
- Walk one risk end to end Take the characteristic most present and walk it through the clause 7 process. A row an auditor can sample is the test.
- Name the evidence per characteristic Use the evidence list on each characteristic page. Name what will be sampled before the audit, not after.
- Answer the AI and LLM question Record which AI systems draw on the estate, what data they generate, and whether it returns to the estate. Attach it to the clause 6.9 reading when the text is public.
- Set the review date Put the review against the ISO stage record, not against the estimate alone. The next stage change is the trigger.
The rule behind the answer
The result is computed from clause 1 of the public draft, which applies the guidance to every organisation that develops or uses big data systems whatever its type, size or purpose, and from the estimated publication date in the record. An unanswered question returns scope incomplete, never a pass.
The applicability line comes from clause 1 of the public draft. The preparation date comes from the audit window you chose and the publication estimate of 15 September 2027 in the record. The characteristic order comes from clause 5.2 and the data type you chose. Every line names the clause it used so a reader can check it.