1. createdplanned -> planned
CAPA record opened from nonconformity C-02.
ISO operating records
Internal audit, management review, and CAPA evidence that proves the ISMS is operating.
ISO 27001 operating-record cockpit
Turn ISMS readiness gaps into dated records with owners, due dates, linked evidence, status transitions, and closure proof before an auditor samples the file.
2
1
12
6
Lifecycle queue
3 records ordered by closure riskManagement reviewManagement review action MR-01
Management review approved risk-treatment priorities and requested closure evidence.
Pending closureDue 01 Jul 2026
9.3Internal auditQ2 internal audit finding A-01
Internal audit observed incomplete evidence-linking for privileged access review samples.
Pending verificationDue 15 Jul 2026
9.2CAPACAPA C-02 phishing simulation coverage
CAPA closed after phishing simulation coverage gap was remediated and verified.
closedDue 21 Jun 2026
10.1CAPA
closedCAPA C-02 phishing simulation coverage
CAPA closed after phishing simulation coverage gap was remediated and verified.
People OpsOwner
10.1ISO requirement
B.12.6Source CTM control
21 Jun 2026Due date
Linked evidence
B.12.6:manual:manual://security-awareness-capa-c02.pdfImmutable event trail
2. Action recordedplanned -> in progress
Roster sync control added to the awareness workflow.
3. Verification recordedin progress -> Pending closure
Simulation roster and completion export verified.
4. Closure approvedPending closure -> closed
Closure approved by ISMS owner.