{
  "schemaVersion": "artifactDefinition.v2",
  "definitionId": "CR.artifactDefinition.v2",
  "artifactId": "CR",
  "title": "Context Register",
  "artifactType": "Register",
  "format": "xlsx",
  "definitionRole": "contract",
  "sourceModel": {
    "body": "canonical human-readable register maintained in the Artifact Candidate page",
    "jsonDefinition": "machine-readable contract and validation model",
    "jsonExample": "curated realistic example data fixture"
  },
  "purpose": "Define the structure for recording internal and external context issues relevant to the ISMS.",
  "sections": [
    {
      "order": 1,
      "id": "title_page",
      "title": "Title Page",
      "contentType": "metadata",
      "required": true,
      "hint": null
    },
    {
      "order": 2,
      "id": "abstract",
      "title": "Abstract",
      "contentType": "narrative",
      "required": true,
      "hint": {
        "text": "Use this register to connect business context with risk assessment, ISMS scope and objectives.",
        "bookReference": "Volume 1, S-00-01-00 Context of the Organization (Clause 4"
      }
    },
    {
      "order": 3,
      "id": "document_control",
      "title": "Document Control",
      "contentType": "control_table",
      "required": true,
      "hint": null
    },
    {
      "order": 4,
      "id": "instructions",
      "title": "Instructions",
      "contentType": "ordered_list",
      "required": true,
      "hint": {
        "text": "Keep context issues actionable enough to influence risk, objectives, scope or management review.",
        "bookReference": "Volume 1, S-00-01-00 Context of the Organization (Clause 4"
      },
      "intro": "Complete the Working sheets using the example tabs as a model. Follow the workbook usage rules below."
    },
    {
      "order": 5,
      "id": "context_register",
      "title": "Context register",
      "contentType": "register_table",
      "required": true,
      "minimumExampleRows": 5,
      "columns": [
        {
          "name": "Context ID",
          "type": "text",
          "required": "yes",
          "description": "Unique issue identifier.",
          "example": "CR-001"
        },
        {
          "name": "Issue Type",
          "type": "select",
          "required": "yes",
          "description": "Internal or external.",
          "example": "External"
        },
        {
          "name": "Issue",
          "type": "text",
          "required": "yes",
          "description": "Context issue.",
          "example": "Customer certification demand"
        },
        {
          "name": "Relevance to ISMS",
          "type": "text",
          "required": "yes",
          "description": "Why it matters.",
          "example": "Drives certification readiness"
        },
        {
          "name": "Affected objective or risk",
          "type": "text",
          "required": "yes",
          "description": "Linked objective or risk.",
          "example": "RISK-2026-018"
        },
        {
          "name": "Owner",
          "type": "select",
          "required": "yes",
          "description": "Accountable owner.",
          "example": "CEO",
          "valueSet": "domain.owner",
          "options": [
            "ISMS Manager",
            "Control Owner",
            "Risk Owner",
            "Process Owner",
            "Asset Owner",
            "IT Security",
            "HR",
            "Legal",
            "Executive Management",
            "Internal Audit"
          ],
          "validation": {
            "allowBlank": false,
            "errorTitle": "Invalid value",
            "error": "Select a value from the list."
          }
        },
        {
          "name": "Monitoring method",
          "type": "text",
          "required": "yes",
          "description": "How issue is monitored.",
          "example": "Quarterly review"
        },
        {
          "name": "Review frequency",
          "type": "text",
          "required": "yes",
          "description": "Review cadence.",
          "example": "Quarterly"
        },
        {
          "name": "Status",
          "type": "select",
          "required": "yes",
          "description": "Active, changed or closed.",
          "example": "Active",
          "valueSet": "domain.status.generic",
          "options": [
            "Draft",
            "In Progress",
            "Under Review",
            "Approved",
            "Closed",
            "Deferred"
          ],
          "validation": {
            "allowBlank": false,
            "errorTitle": "Invalid value",
            "error": "Select a value from the list."
          }
        },
        {
          "name": "Evidence reference",
          "type": "text",
          "required": "yes",
          "description": "Evidence record.",
          "example": "MR-2026-Q3"
        },
        {
          "name": "Next review date",
          "type": "date",
          "required": "yes",
          "description": "Next review.",
          "example": "2026-11-29"
        }
      ],
      "hint": {
        "text": "Every context row should be actionable enough to influence risk, objectives, scope or management review.",
        "bookReference": "Volume 1, S-00-01-00 Context of the Organization (Clause 4"
      }
    },
    {
      "order": 6,
      "id": "review_decision",
      "title": "Review decision",
      "contentType": "decision_table",
      "required": true,
      "fields": [
        {
          "name": "Review result",
          "type": "select",
          "required": "yes",
          "valueSet": "domain.reviewResult",
          "options": [
            "Pass",
            "Pass with observations",
            "Fail",
            "Deferred"
          ],
          "validation": {
            "allowBlank": false,
            "errorTitle": "Invalid value",
            "error": "Select a value from the list."
          }
        },
        {
          "name": "Open issues",
          "type": "text",
          "required": "yes"
        },
        {
          "name": "Reviewed by",
          "type": "text",
          "required": "yes"
        },
        {
          "name": "Decision date",
          "type": "date",
          "required": "yes"
        },
        {
          "name": "Evidence reference",
          "type": "text",
          "required": "yes"
        }
      ],
      "hint": {
        "text": "Close the register with an explicit review decision so context changes are not lost.",
        "bookReference": "Volume 1, S-00-01-00 Context of the Organization (Clause 4"
      }
    },
    {
      "order": 7,
      "id": "external_references",
      "title": "References",
      "contentType": "reference_table",
      "required": true
    }
  ],
  "validationRules": [
    "JSON Example must contain definitionRef pointing to CR.artifactDefinition.v2.",
    "JSON Example register sections must contain schemaRef pointing to the matching definition section.",
    "Context rows must include issue, relevance, owner, monitoring method, status and evidence reference.",
    "Body must render the contract schema and the example data.",
    "No standalone Book reference section and no generic Sample placeholders are allowed."
  ],
  "enrichment": {
    "source": "Contract.json",
    "method": "curated-json",
    "note": "Completes Contract JSON from MD-only schema/sections, removes duplicate alias sections, and normalizes string columns into structured column objects."
  },
  "editorialStandard": {
    "isoAnchors": [
      {
        "label": "ISO/IEC 27001:2022 4.1",
        "href": "https://www.iso.org/standard/82875.html",
        "role": "Normative source this artifact implements or cites."
      },
      {
        "label": "ISO/IEC 27001:2022",
        "href": "https://www.iso.org/standard/82875.html",
        "role": "Normative source this artifact implements or cites."
      },
      {
        "label": "ISO/IEC 27001:2022 7.5",
        "href": "https://www.iso.org/standard/82875.html",
        "role": "Documented information: identify, review and cite this workbook by version."
      }
    ],
    "bookSources": [
      {
        "series": "ISO 27001 for Software Companies",
        "volume": 1,
        "volumeTitle": "Building the ISMS",
        "chapterId": "S-00-01-00",
        "chapterTitle": "Context of the Organization (Clause 4",
        "primary": true,
        "role": "Primary operating chapter for this companion artifact.",
        "href": "https://www.amazon.com/dp/9789908983448"
      },
      {
        "series": "ISO 27001 for Software Companies",
        "volume": 1,
        "volumeTitle": "Building the ISMS",
        "chapterId": "S-00-03-00",
        "chapterTitle": "Planning, Risk & Objectives (Clause 6)",
        "primary": false,
        "role": "Documented information, review and version discipline.",
        "href": "https://www.amazon.com/dp/9789908983448"
      }
    ],
    "acronyms": [
      {
        "abbr": "ISMS",
        "longForm": "Information Security Management System"
      },
      {
        "abbr": "SaaS",
        "longForm": "Software as a Service"
      },
      {
        "abbr": "CIA",
        "longForm": "Confidentiality, Integrity, and Availability"
      },
      {
        "abbr": "CI/CD",
        "longForm": "Continuous Integration / Continuous Delivery"
      },
      {
        "abbr": "CI",
        "longForm": "Continuous Integration"
      },
      {
        "abbr": "CD",
        "longForm": "Continuous Delivery"
      },
      {
        "abbr": "CEO",
        "longForm": "Chief Executive Officer"
      },
      {
        "abbr": "CR",
        "longForm": "Change Request"
      },
      {
        "abbr": "GDPR",
        "longForm": "General Data Protection Regulation"
      },
      {
        "abbr": "JSON",
        "longForm": "JavaScript Object Notation"
      },
      {
        "abbr": "MDM",
        "longForm": "Mobile Device Management"
      }
    ],
    "must": [
      "Keep one live row per record on Working sheets. Do not merge several cases into one row.",
      "Example sheets must contain realistic Arcfield rows for every required sheet. Empty required cells are not an example."
    ],
    "mustNot": [
      "Do not invent live rows in the renderer. Example data lives in the Example JSON.",
      "Do not treat Ex example tabs as working sheets. Do not put live data on system sheets."
    ],
    "softwareCompanyAdaptations": [
      "Use Arcfield as the worked example (cover variant A).",
      "Name SaaS, CI/CD, privileged access or supplier interfaces in example rows where they affect this register."
    ],
    "exampleWorkbook": {
      "workedExampleOrg": "Arcfield",
      "requiredSheets": [
        "context_register",
        "review_decision"
      ],
      "minExampleRows": 5,
      "coverFromExample": true
    }
  },
  "editorialContractId": "editorial.xlsx.register.v1",
  "contentContractId": "content.register.items.v1"
}