One page per clause
The duty in our words, the evidence a board or an auditor asks for, the common gaps and what to do before publication.
Open the registerA reference for the person who has to show the governance record
This site is published by The Art of Service, an independent publisher of compliance references. It exists because the security governance standard is often quoted and rarely read outside the security team, and because a board needs the clause and the evidence in the same place.
Who it is for
The CISO or ISMS manager who owns the governance reporting, the board secretary who prepares the pack, and the consultant who has to show a client what good looks like. The site is written from those roles.
What the site does
It states each clause of the published 2020 edition, the edition in force and the baseline that edition 3 replaces. It gives the evidence a board or an auditor asks for, the common failures and the work to do before publication. It tracks the ISO record and labels every date as recorded, derived or estimated. It offers a free scope and date check and a paid working file.
What it does not do
It does not certify, audit or give legal advice. It does not reproduce the standard. It does not claim that ISO, IEC or ITU has endorsed it. It does not see the unpublished edition 3 text, and it does not invent a clause change to fill that gap.
Who publishes it
The Art of Service Pty Ltd, Queensland, Australia. Founder Gerard Blokdyk. Contact support@theartofservice.com. The same publisher runs the compliance reference library at compliance.theartofservice.com.
Editorial rule. Every requirement is written in our own words and cites its clause. The strict seven-word overlap test is run against the source and the prior edition before a page ships. Only clause titles, defined terms and data element names stay verbatim. The method.
THE RULES THIS IS BUILT FROM
Read from the real rules, not invented
Every clause answer on this site points to the official rule behind it, so you can check any line yourself. The register holds 28 records, 110 evidence lines and 84 common failure lines. The dates come from the ISO record. The substance comes from the published 2020 edition, which is the baseline that edition 3 replaces.
25 CLAUSES
3 ANNEXES
Guidance, clearly labelled
Annexes A to C are informative. Each page says so, because a finding cannot rest on guidance alone.
Open the annexesONE STAGE RECORD
No invented date
Stage 50.60 is recorded on 12 August 2026. The planning date is an estimate and is labelled wherever it appears.
Read the recordThe edition 3 text is not public and is not reproduced. Each record cites the published clause it comes from. Where the public record is silent, the page says so.