The latest published version is ISO/IEC 27003:2017. The latest draft is ISO/IEC DIS 27003, Edition 3, at stage 40.00, DIS registered on 2 October 2026. The draft is not a published version and cannot be cited as one.
The short answer, expanded
The latest published version is ISO/IEC 27003:2017. The latest draft is ISO/IEC DIS 27003, Edition 3, at stage 40.00, DIS registered on 2 October 2026. The draft is not a published version and cannot be cited as one.
What to do next
The free check turns this answer into a dated reading for your organization. The register gives you the clause or control behind the answer. If the question is about a customer or a tender, answer with the requirement standard and the certificate, not with a draft.
Run the free check Open the register
Related questions
Is the DIS a version I can cite?
No. A DIS is a draft. Cite the 2017 edition until the new edition is published.
How do I know when it publishes?
The ISO stage moves to 60.60. The watch reads that page and emails the change.
How many pages is the draft?
The ISO page records 50 pages, against 45 in the prior edition.