{
  "schemaVersion": "artifactDefinition.v2",
  "definitionId": "MRMT.artifactDefinition.v2",
  "artifactId": "MRMT",
  "title": "Management Review Minutes",
  "artifactType": "Minutes",
  "format": "docx",
  "productTier": "Premium",
  "definitionRole": "contract",
  "sourceModel": {
    "body": "canonical human-readable template maintained in the Artifact Candidate page",
    "jsonDefinition": "machine-readable contract and validation model",
    "jsonExample": "curated realistic example data fixture"
  },
  "editorialStandard": {
    "purpose": "Capture management review inputs, decisions, outputs and action items.",
    "requiredEditorialElements": [
      "introduction as purpose prose",
      "scope of this document versus neighbouring records",
      "terms as a first-class group",
      "worked Arcfield example",
      "practical examples, pitfalls, evidence and external references"
    ],
    "isoAnchors": [
      {
        "label": "ISO/IEC 27001:2022 9.3",
        "href": "https://www.iso.org/standard/82875.html",
        "role": "Normative source this artifact implements or cites."
      }
    ],
    "bookSources": [
      {
        "series": "ISO 27001 for Software Companies",
        "volume": 2,
        "volumeTitle": "Implementation & Certification",
        "chapterId": "S-07-05-00",
        "chapterTitle": "Internal Audit & Management Review",
        "primary": true,
        "role": "Primary operating chapter for this companion artifact.",
        "href": "https://www.amazon.com/s?k=ISO+27001+for+Software+Companies+Implementation+and+Certification"
      },
      {
        "series": "ISO 27001 for Software Companies",
        "volume": 1,
        "volumeTitle": "Building the ISMS",
        "chapterId": "S-00-03-00",
        "chapterTitle": "Planning, Risk & Objectives (Clause 6)",
        "primary": false,
        "role": "Documented information, review and version discipline.",
        "href": "https://www.amazon.com/dp/9789908983448"
      }
    ],
    "acronyms": [
      {
        "abbr": "ISMS",
        "longForm": "Information Security Management System"
      },
      {
        "abbr": "SaaS",
        "longForm": "Software as a Service"
      },
      {
        "abbr": "CIA",
        "longForm": "Confidentiality, Integrity, and Availability"
      },
      {
        "abbr": "CI/CD",
        "longForm": "Continuous Integration / Continuous Delivery"
      },
      {
        "abbr": "ISO",
        "longForm": "International Organization for Standardization"
      },
      {
        "abbr": "CI",
        "longForm": "Continuous Integration"
      },
      {
        "abbr": "CD",
        "longForm": "Continuous Delivery"
      },
      {
        "abbr": "EV",
        "longForm": "Extended Validation"
      },
      {
        "abbr": "JSON",
        "longForm": "JavaScript Object Notation"
      },
      {
        "abbr": "MFA",
        "longForm": "Multi-Factor Authentication"
      },
      {
        "abbr": "RAM",
        "longForm": "Risk Assessment Methodology"
      },
      {
        "abbr": "RAMT",
        "longForm": "Risk Acceptance Minutes"
      },
      {
        "abbr": "SoA",
        "longForm": "Statement of Applicability"
      },
      {
        "abbr": "CISO",
        "longForm": "Chief Information Security Officer"
      }
    ],
    "must": [
      "This file's function is: Capture management review inputs, decisions, outputs and action items. It must not be rewritten as a generic operating-rules essay.",
      "Record meeting date, review period, attendees and decision authority.",
      "Link each required input to evidence and summarize what management concluded.",
      "Write decisions as approve, reject, defer or request more evidence.",
      "Assign every action one accountable owner, due date and follow-up evidence.",
      "Record resource decisions, residual-risk decisions and accepted open issues explicitly.",
      "Carry open actions and deferred decisions into the next review."
    ],
    "mustNot": [
      "Do not replace this artifact's function with a shared family skeleton (operating_rules, systems_and_records)."
    ],
    "softwareCompanyAdaptations": [
      "Use Arcfield as the worked example (cover variant A).",
      "Name SaaS, cloud, CI/CD, privileged access or supplier interfaces where they affect this artifact's function."
    ],
    "exampleBody": {
      "sectionId": "minutes_content",
      "workedExampleOrg": "Arcfield",
      "minBodyWords": 400,
      "requiredGroups": [
        {
          "id": "introduction",
          "heading": "What these minutes are",
          "mustInclude": [
            "these",
            "minutes"
          ]
        },
        {
          "id": "scope",
          "heading": "Scope",
          "mustInclude": [
            "Scope"
          ]
        },
        {
          "id": "terms",
          "heading": "Terms used here",
          "mustInclude": [
            "Terms"
          ]
        },
        {
          "id": "meeting_information",
          "heading": "Meeting information",
          "mustInclude": [
            "Meeting",
            "information"
          ]
        },
        {
          "id": "required_inputs_reviewed",
          "heading": "Required inputs reviewed",
          "mustInclude": [
            "Required",
            "inputs",
            "reviewed"
          ]
        },
        {
          "id": "decisions_and_outputs",
          "heading": "Decisions and outputs",
          "mustInclude": [
            "Decisions",
            "outputs"
          ]
        },
        {
          "id": "action_items",
          "heading": "Action items",
          "mustInclude": [
            "Action",
            "items"
          ]
        },
        {
          "id": "resource_and_improvement_decisions",
          "heading": "Resource and improvement decisions",
          "mustInclude": [
            "Resource",
            "improvement",
            "decisions"
          ]
        },
        {
          "id": "next_review_tracking",
          "heading": "Next review tracking",
          "mustInclude": [
            "Next",
            "review",
            "tracking"
          ]
        }
      ],
      "requiredSections": [
        {
          "id": "change_log",
          "title": "Revision history",
          "role": "Versioned freeze log with how-to sentence and rows Version, Date, Change, Approved by. Last Version matches title_page.values.Version."
        },
        {
          "id": "external_references",
          "title": "References",
          "role": "ISO clauses, book chapters and companion artifacts. Not a series catalogue."
        }
      ]
    }
  },
  "sections": [
    {
      "order": 1,
      "id": "title_page",
      "title": "Title Page",
      "contentType": "metadata",
      "required": true,
      "hint": null
    },
    {
      "order": 2,
      "id": "abstract",
      "title": "Abstract",
      "contentType": "narrative",
      "required": true,
      "hint": {
        "text": "Apply Abstract with named owners, systems and exportable evidence. Do not leave this chapter as a heading plus a bare table.",
        "bookReference": "Volume 2, S-07-05-00 Internal Audit & Management Review"
      }
    },
    {
      "order": 3,
      "id": "document_control",
      "title": "Document Control",
      "contentType": "control_table",
      "required": true
    },
    {
      "order": 4,
      "id": "change_log",
      "title": "Revision history",
      "contentType": "revision_table",
      "required": true
    },
    {
      "order": 5,
      "id": "instructions",
      "title": "Instructions",
      "contentType": "ordered_list",
      "required": true,
      "hint": {
        "text": "Apply Instructions with named owners, systems and exportable evidence. Do not leave this chapter as a heading plus a bare table.",
        "bookReference": "Volume 2, S-07-05-00 Internal Audit & Management Review"
      }
    },
    {
      "order": 6,
      "id": "minutes_content",
      "title": "Minutes",
      "contentType": "minutes_sections",
      "required": true,
      "hint": {
        "text": "Apply Minutes with named owners, systems and exportable evidence. Do not leave this chapter as a heading plus a bare table.",
        "bookReference": "Volume 2, S-07-05-00 Internal Audit & Management Review"
      }
    },
    {
      "order": 9,
      "id": "evidence_and_records",
      "title": "Evidence and records",
      "contentType": "evidence_table",
      "required": true,
      "hint": {
        "text": "Apply Evidence and records with named owners, systems and exportable evidence. Do not leave this chapter as a heading plus a bare table.",
        "bookReference": "Volume 2, S-07-05-00 Internal Audit & Management Review"
      }
    },
    {
      "order": 10,
      "id": "external_references",
      "title": "References",
      "contentType": "reference_table",
      "required": true,
      "hint": {
        "text": "Apply References with named owners, systems and exportable evidence. Do not leave this chapter as a heading plus a bare table.",
        "bookReference": "Volume 2, S-07-05-00 Internal Audit & Management Review"
      }
    }
  ],
  "validationRules": [
    "JSON Example must contain definitionRef pointing to MRMT.artifactDefinition.v2.",
    "Minutes must capture required inputs reviewed, decisions, owners, due dates, residual-risk decisions and follow-up evidence.",
    "Body must include practical examples, common pitfalls and evidence expectations.",
    "No legacy MD references or standalone Book reference section allowed."
  ],
  "enrichment": {
    "source": "Contract.json",
    "method": "curated-json",
    "note": "Completes Contract JSON from MD-only schema/sections, removes duplicate alias sections, and normalizes string columns into structured column objects."
  },
  "purpose": "Capture management review inputs, decisions, outputs and action items.",
  "editorialContractId": "editorial.docx.minutes.v1",
  "contentContractId": "content.minutes.v1"
}