ISO operating records
Internal audit, management review, and CAPA evidence that proves the ISMS is operating.
Fixture

ISO 27001 operating-record cockpit

Turn ISMS readiness gaps into dated records with owners, due dates, linked evidence, status transitions, and closure proof before an auditor samples the file.

0
0
4
2

Lifecycle queue

1 records ordered by closure risk
Clear filters
CAPACAPA C-02 phishing simulation coverage

CAPA closed after phishing simulation coverage gap was remediated and verified.

closedDue 21 Jun 202610.1
CAPA

CAPA C-02 phishing simulation coverage

closed

CAPA closed after phishing simulation coverage gap was remediated and verified.

People OpsOwner
10.1ISO requirement
B.12.6Source CTM control
21 Jun 2026Due date
Linked evidenceB.12.6:manual:manual://security-awareness-capa-c02.pdf

Metadata

nonconformity refC-02
root causeNew joiner roster was not synchronized before simulation assignment.
corrective actionAutomated roster export before simulation launch.

Immutable event trail

1. createdplanned -> planned

CAPA record opened from nonconformity C-02.

2026-05-28 00:00:00 UTCB.12.6:manual:manual://security-awareness-capa-c02.p...
2. Action recordedplanned -> in progress

Roster sync control added to the awareness workflow.

2026-06-03 03:30:00 UTCNone
3. Verification recordedin progress -> Pending closure

Simulation roster and completion export verified.

2026-06-10 07:00:00 UTCTRN-2:connector:google-workspace://groups/security-t...
4. Closure approvedPending closure -> closed

Closure approved by ISMS owner.

2026-06-12 05:00:00 UTCNone

Workshop writes

Live API required for durable record writes.

Create operating record

Append lifecycle event