{ "schemaVersion": "artifactDefinition.v2", "definitionId": "IAS.artifactDefinition.v2", "artifactId": "IAS", "title": "Information Asset Standard", "artifactType": "Plan", "format": "docx", "productTier": "Premium", "definitionRole": "contract", "sourceModel": { "body": "canonical human-readable template maintained in the Artifact Candidate page", "jsonDefinition": "machine-readable contract and validation model", "jsonExample": "curated realistic example data fixture" }, "sections": [ { "order": 1, "id": "title_page", "title": "Title Page", "contentType": "metadata", "required": true }, { "order": 2, "id": "abstract", "title": "Abstract", "contentType": "narrative", "required": true, "hint": { "text": "Apply Abstract with named owners, systems and exportable evidence. Do not leave this chapter as a heading plus a bare table.", "bookReference": "Volume 2, S-07-01-00 Asset Management & Information Classi" } }, { "order": 3, "id": "document_control", "title": "Document Control", "contentType": "control_table", "required": true }, { "order": 4, "id": "change_log", "title": "Revision history", "contentType": "revision_table", "required": true }, { "order": 5, "id": "instructions", "title": "Instructions", "contentType": "ordered_list", "required": true, "hint": { "text": "Apply Instructions with named owners, systems and exportable evidence. Do not leave this chapter as a heading plus a bare table.", "bookReference": "Volume 2, S-07-01-00 Asset Management & Information Classi" } }, { "order": 6, "id": "standard_content", "title": "Information asset standard", "contentType": "standard_sections", "required": true, "hint": { "text": "Apply Information asset standard with named owners, systems and exportable evidence. Do not leave this chapter as a heading plus a bare table.", "bookReference": "Volume 2, S-07-01-00 Asset Management & Information Classi" } }, { "order": 9, "id": "evidence_and_records", "title": "Evidence and records", "contentType": "evidence_table", "required": true, "hint": { "text": "Apply Evidence and records with named owners, systems and exportable evidence. Do not leave this chapter as a heading plus a bare table.", "bookReference": "Volume 2, S-07-01-00 Asset Management & Information Classi" } }, { "order": 10, "id": "external_references", "title": "References", "contentType": "reference_table", "required": true, "hint": { "text": "Apply References with named owners, systems and exportable evidence. Do not leave this chapter as a heading plus a bare table.", "bookReference": "Volume 2, S-07-01-00 Asset Management & Information Classi" } } ], "validationRules": [ "JSON Example must contain definitionRef pointing to IAS.artifactDefinition.v2.", "Body must define information asset identification, ownership, classification, lifecycle, minimum metadata and evidence.", "No legacy MD references or standalone Book reference section allowed." ], "enrichment": { "source": "Contract.json", "method": "curated-json", "note": "Completes Contract JSON from MD-only schema/sections, removes duplicate alias sections, and normalizes string columns into structured column objects." }, "editorialStandard": { "isoAnchors": [ { "label": "ISO/IEC 27001:2022 A.5.9", "href": "https://www.iso.org/standard/82875.html", "role": "Annex A control this artifact implements." }, { "label": "ISO/IEC 27001:2022 A.5.12", "href": "https://www.iso.org/standard/82875.html", "role": "Annex A control this artifact implements." }, { "label": "ISO/IEC 27001:2022 A.5.15", "href": "https://www.iso.org/standard/82875.html", "role": "Annex A control this artifact implements." }, { "label": "ISO/IEC 27001:2022", "href": "https://www.iso.org/standard/82875.html", "role": "Normative source this artifact implements or cites." } ], "bookSources": [ { "series": "ISO 27001 for Software Companies", "volume": 2, "volumeTitle": "Implementation & Certification", "chapterId": "S-07-01-00", "chapterTitle": "Asset Management & Information Classification", "primary": true, "role": "Primary operating chapter for this companion artifact.", "href": "https://www.amazon.com/s?k=ISO+27001+for+Software+Companies+Implementation+and+Certification" }, { "series": "ISO 27001 for Software Companies", "volume": 1, "volumeTitle": "Building the ISMS", "chapterId": "S-00-03-00", "chapterTitle": "Planning, Risk & Objectives (Clause 6)", "primary": false, "role": "Documented information, review and version discipline.", "href": "https://www.amazon.com/dp/9789908983448" } ], "purpose": "Define minimum information asset record requirements.", "requiredEditorialElements": [ "introduction as purpose prose", "scope of this document versus neighbouring records", "terms as a first-class group", "worked Arcfield example", "practical examples, pitfalls, evidence and external references" ], "acronyms": [ { "abbr": "ISMS", "longForm": "Information Security Management System" }, { "abbr": "SaaS", "longForm": "Software as a Service" }, { "abbr": "CIA", "longForm": "Confidentiality, Integrity, and Availability" }, { "abbr": "CI/CD", "longForm": "Continuous Integration / Continuous Delivery" }, { "abbr": "ISO", "longForm": "International Organization for Standardization" }, { "abbr": "AI", "longForm": "Artificial Intelligence" }, { "abbr": "CI", "longForm": "Continuous Integration" }, { "abbr": "CD", "longForm": "Continuous Delivery" }, { "abbr": "EV", "longForm": "Extended Validation" }, { "abbr": "JSON", "longForm": "JavaScript Object Notation" }, { "abbr": "SoA", "longForm": "Statement of Applicability" } ], "must": [ "This file's function is: Define minimum information asset record requirements. It must not be rewritten as a generic operating-rules essay.", "Record each relevant information asset with owner, purpose, classification and lifecycle status.", "Include repositories, logs, exports, evidence stores and supplier-held data where relevant.", "Link information assets to access groups, risks, suppliers and retention rules.", "Review completeness before audit sampling." ], "mustNot": [ "Do not replace this artifact's function with a shared family skeleton (operating_rules, systems_and_records)." ], "softwareCompanyAdaptations": [ "Use Arcfield as the worked example (cover variant A).", "Name SaaS, cloud, CI/CD, privileged access or supplier interfaces where they affect this artifact's function." ], "exampleBody": { "sectionId": "standard_content", "workedExampleOrg": "Arcfield", "minBodyWords": 400, "requiredGroups": [ { "id": "introduction", "heading": "What this plan is", "mustInclude": [ "plan" ] }, { "id": "scope", "heading": "Scope", "mustInclude": [ "Scope" ] }, { "id": "terms", "heading": "Terms used here", "mustInclude": [ "Terms" ] }, { "id": "information_asset_standard_template_content", "heading": "Information asset standard / template content", "mustInclude": [ "Information", "asset", "standard" ] } ], "requiredSections": [ { "id": "change_log", "title": "Revision history", "role": "Versioned freeze log with how-to sentence and rows Version, Date, Change, Approved by. Last Version matches title_page.values.Version." }, { "id": "external_references", "title": "References", "role": "ISO clauses, book chapters and companion artifacts. Not a series catalogue." } ] } }, "purpose": "Define minimum information asset record requirements.", "editorialContractId": "editorial.docx.plan.v1", "contentContractId": "content.literary.v1", "relations": [ { "kind": "cites", "artifactId": "MDR", "role": "evidence_register", "expectedType": "Register", "rank": 30 }, { "kind": "cites", "artifactId": "DR", "role": "evidence_register", "expectedType": "Register", "rank": 31 }, { "kind": "cites", "artifactId": "RRS", "role": "evidence_register", "expectedType": "Register", "rank": 32 } ] }