{ "schemaVersion": "artifactExample.v2", "artifactId": "DR", "title": "Document Register", "definitionRef": { "artifactId": "DR", "definitionSchemaVersion": "artifactDefinition.v2", "definitionId": "DR.artifactDefinition.v2", "title": "Document Register" }, "organization": "Arcfield", "sections": [ { "id": "title_page", "title": "Title Page", "values": { "Register Title": "Document Register", "Register ID": "DR-REG-001", "Version": "1.1", "Status": "Approved", "Organization": "Arcfield", "Owner": "ISMS Manager", "Approver": "Top Management", "Classification": "Internal", "Effective Date": "2026-09-11", "Next Review Date": "2027-09-11" }, "items": [ "Register Title: Document Register", "Register ID: DR-REG-001", "Version: 1.1", "Status: Approved", "Organization: Arcfield", "Owner: ISMS Manager", "Approver: Top Management", "Classification: Internal", "Effective Date: 2026-09-11", "Next Review Date: 2027-09-11" ], "contentType": "metadata" }, { "id": "abstract", "title": "Abstract", "text": "This example controls Arcfield documented information with owner, approver, version, status, review, retention, obsolete handling, authoritative location and evidence reference. Rows are the 11 September 2026 operating sample of the certified Arcfield Platform ISMS in the surveillance cycle after certificate ARC-ISMS-2025-001.", "contentType": "narrative" }, { "id": "document_control", "title": "Document Control", "rows": [ { "Property": "Purpose", "Value": "Control documented information required by the ISMS." }, { "Property": "Used by", "Value": "ISMS Manager, Document Owners, Internal Auditor, External Auditor" }, { "Property": "Maintained by", "Value": "ISMS Manager" }, { "Property": "Evidence role", "Value": "Mandatory ISO 27001 documented-information evidence" }, { "Property": "ISO reference", "Value": "ISO/IEC 27001:2022 Clause 7.5" }, { "Property": "Review cadence", "Value": "Monthly operational review and before management review" } ], "contentType": "control_table" }, { "id": "instructions", "title": "Instructions", "items": [ "Register every controlled ISMS document.", "Keep one authoritative approved location per document.", "Record origin and whether the document is supplied in the companion package.", "Update owner, approver, version, approval and review data after every approved change.", "Retain retired documents according to the retention rule.", "Record obsolete handling so users do not rely on outdated documents.", "Use sheets ending in “Ex” as read-only examples. Enter live data only on the matching “Wk” (Working) sheets.", "Every operative list is an Excel Table with frozen headers and filters. Add new rows on the next empty worksheet row beneath the table so Excel expands it — do not leave blank rows inside the table.", "Where a column offers a dropdown, choose a value from the list (Status, Owner role, Priority, Severity, Likelihood, Impact, Applicability, Evidence Status, Review Result). Do not invent free-text variants.", "Enter dates as YYYY-MM-DD. Date columns are validated and formatted accordingly.", "Review the Flag columns (Overdue, Review Due, Missing Owner, Missing Evidence). They calculate automatically and highlight gaps for follow-up.", "Keep Cover, Legal, Book, Lists and Metadata unchanged. System sheets are protected on purpose." ], "contentType": "ordered_list" }, { "id": "document_register", "title": "Document register", "schemaRef": { "definitionId": "DR.artifactDefinition.v2", "sectionId": "document_register", "columnsRef": "sections.document_register.columns" }, "rows": [ { "Document ID": "DR-001", "Title": "Information Security Policy", "Type": "Policy", "Driven by": "Clause 5.2; A.5.1", "Origin": "Internal ISMS document", "Supplied in companion": "Yes", "Owner": "ISMS Manager", "Approver": "Top Management", "Version": "1.0", "Status": "Active", "Approval date": "2026-08-01", "Review frequency": "Annual", "Next review": "2027-08-01", "Retention": "Current version plus 3 years", "Obsolete handling": "Retired versions archived read-only", "Location": "ISMS controlled documents / policies", "Evidence reference": "ISP-001", "Notes": "Approved and communicated." }, { "Document ID": "DR-002", "Title": "ISMS Scope Statement", "Type": "Document", "Driven by": "Clause 4.3", "Origin": "Internal ISMS document", "Supplied in companion": "Yes", "Owner": "ISMS Manager", "Approver": "Top Management", "Version": "1.0", "Status": "Active", "Approval date": "2026-07-25", "Review frequency": "Annual or scope change", "Next review": "2027-07-25", "Retention": "Current version plus 3 years", "Obsolete handling": "Superseded scope statements archived with approval record", "Location": "ISMS controlled documents / context", "Evidence reference": "ISS-001", "Notes": "Matches certification scope." }, { "Document ID": "DR-003", "Title": "Risk Assessment Methodology", "Type": "Procedure", "Driven by": "Clause 6.1; Clause 8.2", "Origin": "Internal ISMS document", "Supplied in companion": "Yes", "Owner": "Risk Manager", "Approver": "ISMS Manager", "Version": "1.0", "Status": "Active", "Approval date": "2026-07-30", "Review frequency": "Annual", "Next review": "2027-07-30", "Retention": "Current version plus 3 years", "Obsolete handling": "Archived with change summary", "Location": "ISMS controlled documents / risk", "Evidence reference": "RAM-001", "Notes": "Used for RR and RTP." }, { "Document ID": "DR-004", "Title": "Statement of Applicability", "Type": "Register", "Driven by": "Clause 6.1; Annex A", "Origin": "Generated from curated companion data", "Supplied in companion": "Yes", "Owner": "ISMS Manager", "Approver": "Top Management", "Version": "1.0", "Status": "Active", "Approval date": "2026-08-29", "Review frequency": "Quarterly during implementation", "Next review": "2026-11-29", "Retention": "Certification cycle plus 3 years", "Obsolete handling": "Previous SoA version retained with decision record", "Location": "ISMS registers / SoA", "Evidence reference": "SOA-COMPLETE-2026-Q3", "Notes": "Contains all 93 Annex A controls." }, { "Document ID": "DR-005", "Title": "Internal Audit Programme", "Type": "Plan", "Driven by": "Clause 9.2", "Origin": "Internal ISMS document", "Supplied in companion": "Yes", "Owner": "Internal Auditor", "Approver": "ISMS Manager", "Version": "1.0", "Status": "Active", "Approval date": "2026-08-10", "Review frequency": "Annual and after audit changes", "Next review": "2026-11-25", "Retention": "Certification cycle plus 3 years", "Obsolete handling": "Superseded programme archived", "Location": "ISMS audit / programme", "Evidence reference": "IAP-2026", "Notes": "Priority topics include access and vulnerability management." }, { "Document ID": "DR-006", "Title": "Legacy Access Review Template", "Type": "Template", "Driven by": "A.5.18", "Origin": "Legacy internal template", "Supplied in companion": "No", "Owner": "IT Operations Manager", "Approver": "ISMS Manager", "Version": "0.9", "Status": "Retired", "Approval date": "2026-05-15", "Review frequency": "Not applicable", "Next review": "", "Retention": "Retain until 2027-05-15", "Obsolete handling": "Marked obsolete and replaced by ARR review worksheet", "Location": "ISMS archive / access", "Evidence reference": "DR-RET-006", "Notes": "Do not use for new reviews." } ], "contentType": "register_table" }, { "id": "document_register_decision", "title": "Document register decision", "values": { "Review result": "Controlled with one retired legacy template retained as obsolete evidence", "Documents reviewed": 6, "Documents pending approval": 0, "Documents overdue for review": 0, "Obsolete documents controlled": 1, "Reviewed by": "ISMS Manager", "Decision date": "2026-08-29", "Evidence reference": "DR-REVIEW-2026-Q3" }, "rows": [ { "Field": "Review result", "Value": "Controlled with one retired legacy template retained as obsolete evidence" }, { "Field": "Documents reviewed", "Value": "6" }, { "Field": "Documents pending approval", "Value": "0" }, { "Field": "Documents overdue for review", "Value": "0" }, { "Field": "Obsolete documents controlled", "Value": "1" }, { "Field": "Reviewed by", "Value": "ISMS Manager" }, { "Field": "Decision date", "Value": "2026-08-29" }, { "Field": "Evidence reference", "Value": "DR-REVIEW-2026-Q3" } ], "contentType": "decision_table" }, { "id": "external_references", "title": "References", "groups": [ { "text": "Cite these sources from workshops and audits. This list names ISO clauses, book chapters and companion artifacts used by this file." }, { "rows": [ { "Kind": "ISO", "Reference": "ISO/IEC 27001:2022", "How this document uses it": "Normative source this artifact implements or cites.", "href": "https://www.iso.org/standard/82875.html" }, { "Kind": "ISO", "Reference": "ISO/IEC 27001:2022 7.5", "How this document uses it": "Normative source this artifact implements or cites.", "href": "https://www.iso.org/standard/82875.html" }, { "Kind": "Book", "Reference": "Building the ISMS, Information Security Policies & Risk Management", "How this document uses it": "Primary operating chapter for this companion artifact.", "href": "https://www.amazon.com/dp/9789908983448" }, { "Kind": "Artifact", "Reference": "ISO Information Security Objectives (Building the ISMS, Information Security Policies & Risk Management)", "How this document uses it": "Interface record. Cite this Document Control version; do not copy this file into that record.", "href": "https://www.amazon.com/dp/9789908983448" }, { "Kind": "Artifact", "Reference": "ARR Access Rights Register (Secure Engineering, Access Control & Identity Management)", "How this document uses it": "Interface record. Cite this Document Control version; do not copy this file into that record.", "href": "https://www.amazon.com/dp/9789908983455" }, { "Kind": "Artifact", "Reference": "IAP Internal Audit Plan (Implementation & Certification, Internal Audit & Management Review)", "How this document uses it": "Interface record. Cite this Document Control version; do not copy this file into that record.", "href": "https://www.amazon.com/s?k=ISO+27001+for+Software+Companies+Implementation+and+Certification" }, { "Kind": "Artifact", "Reference": "ISP Information Security Policy (Building the ISMS, Information Security Policies & Risk Management)", "How this document uses it": "Interface record. Cite this Document Control version; do not copy this file into that record.", "href": "https://www.amazon.com/dp/9789908983448" } ] } ], "contentType": "reference_table" } ], "enrichment": { "source": "Example.json", "method": "curated-json", "note": "Completes Example JSON with renderer-native sections and generalized groups; no mdSource helper fields." }, "snapshotRef": { "snapshotId": "arcfield.platform.surv.2026-09-11", "schemaVersion": "evidenceSnapshot.v1" }, "scenarioRef": { "githubIssue": 64, "crId": "CR-TYPE-ARCFIELD-001", "family": "Register", "role": "Operating sample of the 11 September 2026 freeze" } }