ISO/IEC 27003 is the guidance standard that explains how to apply ISO/IEC 27001. The 2017 edition explained the 2013 requirement. The draft third edition explains the 2022 requirement. It is guidance, not a certifiable requirement.
The short answer, expanded
ISO/IEC 27003 is the guidance standard that explains how to apply ISO/IEC 27001. The 2017 edition explained the 2013 requirement. The draft third edition explains the 2022 requirement. It is guidance, not a certifiable requirement.
What to do next
The free check turns this answer into a dated reading for your organization. The register gives you the clause or control behind the answer. If the question is about a customer or a tender, answer with the requirement standard and the certificate, not with a draft.
Run the free check Open the register
Related questions
Is it a requirement standard?
No. ISO/IEC 27001:2022 contains the requirements. ISO/IEC 27003 explains how to apply them.
Which edition applies today?
The 2017 edition is the published guidance. The third edition is a DIS at stage 40.00 and is not published.
Does it create a certificate?
No. There is no certification scheme for 27003.