One page per clause
The duty in our words, the evidence a board or an auditor asks for, the common gaps and what to do before publication.
Open the registerThree annexes, all informative
Annexes A to C support the guidance with the governance relationship, the three types of management system organization and examples of communication. None of them creates a requirement. Each page says so, because an assessment finding has to rest on a clause, not on guidance. Use them to think, and the clauses to require.
| Annex | Record | The answer in one line | Status |
|---|---|---|---|
| A | Governance relationship | Annex A shows that technology governance and information security governance cover different things but use the same four processes. | Informative |
| B | Types of management system organization | Annex B sets out the three relationships between an entity and its management system organization, and the membership consequences of each. | Informative |
| C | Examples of communication | Annex C gives disclosure and ESG reporting as examples, and warns that communication can be misunderstood or reach the wrong audience. | Informative |
Why the label matters. If someone tells you that Annex B requires a particular governance structure, ask which clause does. The annex can be the best explanation of a clause without adding an obligation.
THE RULES THIS IS BUILT FROM
Read from the real rules, not invented
Every clause answer on this site points to the official rule behind it, so you can check any line yourself. The register holds 28 records, 110 evidence lines and 84 common failure lines. The dates come from the ISO record. The substance comes from the published 2020 edition, which is the baseline that edition 3 replaces.
25 CLAUSES
3 ANNEXES
Guidance, clearly labelled
Annexes A to C are informative. Each page says so, because a finding cannot rest on guidance alone.
Open the annexesONE STAGE RECORD
No invented date
Stage 50.60 is recorded on 12 August 2026. The planning date is an estimate and is labelled wherever it appears.
Read the recordThe edition 3 text is not public and is not reproduced. Each record cites the published clause it comes from. Where the public record is silent, the page says so.