ISO/IEC DIS 27003   Stage 40.00, DIS registeredPlanning date, a projection 13 Sep 2027 The recordFree checkKit USD 799 and watch USD 49 a month
FREE CHECK

Where does the draft leave your ISMS?

The record

Five answers produce a dated reading: a verdict, three actions and three clauses to read. The check runs in your browser. Nothing is sent, stored or logged. It never treats a missing answer as the lighter pathway.

Your ISMS
The default is the projection in the record, 13 September 2027. Change it to your audit date.
What the check will not do

It will not tell you that you are compliant.

It reads the facts you give it against the published requirement and the stage record. It does not audit, certify or replace your certification body. A missing answer produces "scope incomplete", never a lighter reading.

How the reading is computed

The rule behind each verdict
IfThenWhy
No certificateBuild the requirement first27003 explains how to apply a management system. There is nothing to apply it to yet.
Certificate against the prior editionFix the certificate edition firstThe prior edition is superseded. A guidance draft is not the constraint.
2022 certificate and the 2017 guideRefresh the guidance referencesThe requirement moved to 2022. The guide still explains the prior edition.
2022 certificate and a gap in the SoARebuild the 93-control SoAThe Statement of Applicability is where the control set is decided and defended.
Audit before the projected datePrepare on 27001:2022, not on the draftThe draft will not be citable by the audit date. The requirement already applies.

Not legal advice; does not certify. The planning date is a projection, not an ISO commitment.