{
  "schemaVersion": "artifactDefinition.v2",
  "definitionId": "IPR.artifactDefinition.v2",
  "artifactId": "IPR",
  "title": "Interested Parties Register",
  "artifactType": "Register",
  "format": "xlsx",
  "productTier": "Basic",
  "definitionRole": "contract",
  "sourceModel": {
    "body": "canonical human-readable register maintained in the Artifact Candidate page",
    "jsonDefinition": "machine-readable contract and validation model",
    "jsonExample": "curated realistic example data fixture"
  },
  "purpose": "Define the required structure for identifying interested parties, their ISMS-relevant requirements, source, evidence expectations, owners, review cadence and affected ISMS processes or controls.",
  "sections": [
    {
      "order": 1,
      "id": "title_page",
      "title": "Title Page",
      "contentType": "metadata",
      "required": true,
      "hint": null
    },
    {
      "order": 2,
      "id": "abstract",
      "title": "Abstract",
      "contentType": "narrative",
      "required": true,
      "hint": {
        "text": "Use IPR to make Clause 4.2 practical: identify who has ISMS expectations and how those expectations are addressed.",
        "bookReference": "Volume 1, S-00-08-00 Annex A Controls"
      }
    },
    {
      "order": 3,
      "id": "document_control",
      "title": "Document Control",
      "contentType": "control_table",
      "required": true,
      "hint": null
    },
    {
      "order": 4,
      "id": "instructions",
      "title": "Instructions",
      "contentType": "ordered_list",
      "required": true,
      "hint": {
        "text": "Focus on requirements that affect the ISMS; generic stakeholder lists without requirements are weak audit evidence.",
        "bookReference": "Volume 1, S-00-08-00 Annex A Controls"
      },
      "intro": "Complete the Working sheets using the example tabs as a model. Follow the workbook usage rules below."
    },
    {
      "order": 5,
      "id": "interested_parties_register",
      "title": "Interested parties register",
      "contentType": "register_table",
      "required": true,
      "minimumExampleRows": 7,
      "columns": [
        {
          "name": "Party ID",
          "type": "text",
          "required": "yes",
          "description": "Unique interested-party identifier.",
          "example": "IPR-001"
        },
        {
          "name": "Interested Party",
          "type": "text",
          "required": "yes",
          "description": "Stakeholder or group.",
          "example": "Enterprise customers"
        },
        {
          "name": "Category",
          "type": "select",
          "required": "yes",
          "description": "Party category.",
          "example": "Customer"
        },
        {
          "name": "Relevant Requirement",
          "type": "text",
          "required": "yes",
          "description": "ISMS-relevant need or expectation.",
          "example": "Incident communication"
        },
        {
          "name": "Source",
          "type": "text",
          "required": "yes",
          "description": "Requirement source.",
          "example": "Security addendum"
        },
        {
          "name": "ISMS Relevance",
          "type": "text",
          "required": "yes",
          "description": "Why it matters to the ISMS.",
          "example": "Drives incident evidence"
        },
        {
          "name": "Affected Process or Control",
          "type": "text",
          "required": "yes",
          "description": "Related process, clause or control.",
          "example": "A.5.24"
        },
        {
          "name": "Evidence Expectation",
          "type": "text",
          "required": "yes",
          "description": "Expected evidence.",
          "example": "Incident log"
        },
        {
          "name": "Owner",
          "type": "select",
          "required": "yes",
          "description": "Accountable owner.",
          "example": "ISMS Manager",
          "valueSet": "domain.owner",
          "options": [
            "ISMS Manager",
            "Control Owner",
            "Risk Owner",
            "Process Owner",
            "Asset Owner",
            "IT Security",
            "HR",
            "Legal",
            "Executive Management",
            "Internal Audit"
          ],
          "validation": {
            "allowBlank": false,
            "errorTitle": "Invalid value",
            "error": "Select a value from the list."
          }
        },
        {
          "name": "Review Cadence",
          "type": "text",
          "required": "yes",
          "description": "Review frequency or trigger.",
          "example": "Quarterly"
        },
        {
          "name": "Status",
          "type": "select",
          "required": "yes",
          "description": "Active, changed, pending or retired.",
          "example": "Active",
          "valueSet": "domain.status.generic",
          "options": [
            "Draft",
            "In Progress",
            "Under Review",
            "Approved",
            "Closed",
            "Deferred"
          ],
          "validation": {
            "allowBlank": false,
            "errorTitle": "Invalid value",
            "error": "Select a value from the list."
          }
        },
        {
          "name": "Evidence Reference",
          "type": "text",
          "required": "yes",
          "description": "Linked evidence record.",
          "example": "ELAI-2026-Q3"
        },
        {
          "name": "Notes",
          "type": "text",
          "required": "no",
          "description": "Additional context.",
          "example": "Contract renewal target."
        }
      ],
      "hint": {
        "text": "Each row should connect an interested party to a concrete requirement, affected ISMS process and evidence expectation.",
        "bookReference": "Volume 1, S-00-08-00 Annex A Controls"
      }
    },
    {
      "order": 6,
      "id": "interested_parties_review",
      "title": "Interested parties review",
      "contentType": "decision_table",
      "required": true,
      "fields": [
        {
          "name": "Review result",
          "type": "select",
          "required": "yes",
          "valueSet": "domain.reviewResult",
          "options": [
            "Pass",
            "Pass with observations",
            "Fail",
            "Deferred"
          ],
          "validation": {
            "allowBlank": false,
            "errorTitle": "Invalid value",
            "error": "Select a value from the list."
          }
        },
        {
          "name": "Parties reviewed",
          "type": "text",
          "required": "yes"
        },
        {
          "name": "New or changed requirements",
          "type": "text",
          "required": "yes"
        },
        {
          "name": "Open follow-up actions",
          "type": "text",
          "required": "yes"
        },
        {
          "name": "Reviewed by",
          "type": "text",
          "required": "yes"
        },
        {
          "name": "Decision date",
          "type": "date",
          "required": "yes"
        },
        {
          "name": "Evidence reference",
          "type": "text",
          "required": "yes"
        }
      ],
      "hint": {
        "text": "Close with a review decision so stakeholder requirements stay aligned with scope, risk and management review.",
        "bookReference": "Volume 1, S-00-08-00 Annex A Controls"
      }
    },
    {
      "order": 7,
      "id": "external_references",
      "title": "References",
      "contentType": "reference_table",
      "required": true
    }
  ],
  "validationRules": [
    "JSON Example must contain definitionRef pointing to IPR.artifactDefinition.v2.",
    "JSON Example register sections must contain schemaRef pointing to the matching definition section.",
    "Interested-party rows must include a relevant requirement, source, ISMS relevance, owner and evidence expectation.",
    "Body must render the contract schema and the example data.",
    "No standalone Book reference section and no generic Sample placeholders are allowed."
  ],
  "enrichment": {
    "source": "Contract.json",
    "method": "curated-json",
    "note": "Completes Contract JSON from MD-only schema/sections, removes duplicate alias sections, and normalizes string columns into structured column objects."
  },
  "editorialStandard": {
    "isoAnchors": [
      {
        "label": "ISO/IEC 27001:2022 4.2",
        "href": "https://www.iso.org/standard/82875.html",
        "role": "Normative source this artifact implements or cites."
      },
      {
        "label": "ISO/IEC 27001:2022",
        "href": "https://www.iso.org/standard/82875.html",
        "role": "Normative source this artifact implements or cites."
      },
      {
        "label": "ISO/IEC 27001:2022 7.5",
        "href": "https://www.iso.org/standard/82875.html",
        "role": "Documented information: identify, review and cite this workbook by version."
      }
    ],
    "bookSources": [
      {
        "series": "ISO 27001 for Software Companies",
        "volume": 1,
        "volumeTitle": "Building the ISMS",
        "chapterId": "S-00-08-00",
        "chapterTitle": "Annex A Controls",
        "primary": true,
        "role": "Primary operating chapter for this companion artifact.",
        "href": "https://www.amazon.com/dp/9789908983448"
      },
      {
        "series": "ISO 27001 for Software Companies",
        "volume": 1,
        "volumeTitle": "Building the ISMS",
        "chapterId": "S-00-03-00",
        "chapterTitle": "Planning, Risk & Objectives (Clause 6)",
        "primary": false,
        "role": "Documented information, review and version discipline.",
        "href": "https://www.amazon.com/dp/9789908983448"
      }
    ],
    "acronyms": [
      {
        "abbr": "ISMS",
        "longForm": "Information Security Management System"
      },
      {
        "abbr": "SaaS",
        "longForm": "Software as a Service"
      },
      {
        "abbr": "CIA",
        "longForm": "Confidentiality, Integrity, and Availability"
      },
      {
        "abbr": "CI/CD",
        "longForm": "Continuous Integration / Continuous Delivery"
      },
      {
        "abbr": "CI",
        "longForm": "Continuous Integration"
      },
      {
        "abbr": "CD",
        "longForm": "Continuous Delivery"
      },
      {
        "abbr": "HR",
        "longForm": "Human Resources"
      },
      {
        "abbr": "JSON",
        "longForm": "JavaScript Object Notation"
      },
      {
        "abbr": "SoA",
        "longForm": "Statement of Applicability"
      }
    ],
    "must": [
      "Keep one live row per record on Working sheets. Do not merge several cases into one row.",
      "Example sheets must contain realistic Arcfield rows for every required sheet. Empty required cells are not an example."
    ],
    "mustNot": [
      "Do not invent live rows in the renderer. Example data lives in the Example JSON.",
      "Do not treat Ex example tabs as working sheets. Do not put live data on system sheets."
    ],
    "softwareCompanyAdaptations": [
      "Use Arcfield as the worked example (cover variant A).",
      "Name SaaS, CI/CD, privileged access or supplier interfaces in example rows where they affect this register."
    ],
    "exampleWorkbook": {
      "workedExampleOrg": "Arcfield",
      "requiredSheets": [
        "interested_parties_register",
        "interested_parties_review"
      ],
      "minExampleRows": 7,
      "coverFromExample": true
    }
  },
  "editorialContractId": "editorial.xlsx.register.v1",
  "contentContractId": "content.register.items.v1"
}