The latest published edition is ISO/IEC 27004:2016. The latest draft is ISO/IEC DIS 27004, Edition 3, at stage 40.60, close of voting on 16 September 2026. The draft is not a published version and cannot be cited as one.
The short answer, expanded
The latest published edition is ISO/IEC 27004:2016. The latest draft is ISO/IEC DIS 27004, Edition 3, at stage 40.60, close of voting on 16 September 2026. The draft is not a published version and cannot be cited as one.
What to do next
The free check turns this answer into a dated reading for your organization. The register gives you the clause or measure behind the answer. If the question is about a customer or a tender, answer with the requirement standard and the certificate, not with a draft.
Run the free check Open the register
Related questions
Is the DIS a version I can cite?
No. A DIS is a draft. Cite the 2016 edition until the new edition is published.
How do I know when it publishes?
The ISO stage moves to 60.60. The watch reads that page and emails the change.
How many pages is the draft?
The ISO page records 66 pages.