ISO operating records

Internal audit, management review, and CAPA evidence that proves the ISMS is operating.

Fixture

ISO 27001 operating-record cockpit

Turn ISMS readiness gaps into dated records with owners, due dates, linked evidence, status transitions, and closure proof before an auditor samples the file.

1Active records

1Awaiting closure

3Events

2Evidence links

Lifecycle queue

1 records ordered by closure risk

Clear filters

Management reviewManagement review action MR-01

Management review approved risk-treatment priorities and requested closure evidence.

Pending closureDue 01 Jul 20269.3

Management review

Management review action MR-01

Pending closure

Management review approved risk-treatment priorities and requested closure evidence.

CEOOwner

9.3ISO requirement

B.21.4Source CTM control

01 Jul 2026Due date

Linked evidenceB.21.4:manual:manual://management-review-minutes-q2.pdf

Metadata

committeeSecurity Steering Committee

review period2026-Q2

decisionapprove revised risk-treatment priorities

Immutable event trail

1. createdplanned -> planned

Management review action opened after committee review.

2026-06-05 00:00:00 UTCB.21.4:manual:manual://management-review-minutes-q2....

2. Action recordedplanned -> in progress

Owners accepted treatment-plan updates and committed closure evidence.

2026-06-08 04:00:00 UTCNone

3. Verification recordedin progress -> Pending closure

Evidence pack verified; awaiting management closure approval.

2026-06-13 02:30:00 UTCRISK-1:manual:manual://risk-treatment-plan-q2-approv...

Workshop writes

Live API required for durable record writes.