ISO/IEC DIS 27004   Stage 40.60, close of voting Planning date, an estimate 14 Sep 2027 The recordFree checkKit USD 799 and watch USD 49 a month
METHOD

How a line gets on a page

Sources

One reviewed record drives the pages, the kit and the watch. Nothing is typed into a page by hand, and nothing is generated at runtime by a model.

1. Read the official record

The ISO page is read live. The stage, stage date, edition, page count, committee and ICS are recorded. The published 2016 edition is read from the held copy. The DIS body is not public and is not used.

2. State the guidance in our words

Each of the 28 clause records and 39 measure records starts from the held 2016 edition. The guidance is paraphrased. The clause numbers and defined terms stay as they are. A strict seven word overlap test runs against the held text before publication.

3. Add the practical reading

The reading is our own statement of what the guidance asks a team to do. It is labelled as a reading, not a quotation, and it is not a requirement. It is separate from the guidance so a reader can always tell which is which.

4. Derive the evidence

The evidence lines, common gaps and auditor probes come from the held record. They are specific to the clause or measure, not a generic checklist. The page shows the category, the artefact and the question.

5. Check and publish

The overlap test, the API smoke, the browser smoke, the UX audit, the link check and the refresh diff all run before a deploy. A failure stops the build. The changelog records the date and the change.

6. Keep it current

The refresh script re-reads the official page and compares it with the record. A stage or date change fails the build loudly. That diff is also what the paid watch sends.