{ "schemaVersion": "artifactExample.v2", "artifactId": "RAE", "title": "Resource Allocation Evidence", "definitionRef": { "artifactId": "RAE", "definitionSchemaVersion": "artifactDefinition.v2", "definitionId": "RAE.artifactDefinition.v2", "title": "Resource Allocation Evidence" }, "organization": "Arcfield", "sections": [ { "id": "title_page", "title": "Title Page", "values": { "Register Title": "Resource Allocation Evidence", "Register ID": "RAE-REG-001", "Version": "1.1", "Status": "Approved", "Organization": "Arcfield", "Owner": "ISMS Manager", "Approver": "Top Management", "Classification": "Internal", "Effective Date": "2026-09-11", "Next Review Date": "2027-09-11" }, "items": [ "Register Title: Resource Allocation Evidence", "Register ID: RAE-REG-001", "Version: 1.1", "Status: Approved", "Organization: Arcfield", "Owner: ISMS Manager", "Approver: Top Management", "Classification: Internal", "Effective Date: 2026-09-11", "Next Review Date: 2027-09-11" ], "contentType": "metadata" }, { "id": "abstract", "title": "Abstract", "text": "This example evidences Arcfield ISMS resource allocation decisions, including resource needs, related activities, owners, approvals, allocated resources, planned and actual dates, status and evidence references. Rows are the 11 September 2026 operating sample of the certified Arcfield Platform ISMS in the surveillance cycle after certificate ARC-ISMS-2025-001.", "contentType": "narrative" }, { "id": "document_control", "title": "Document Control", "rows": [ { "Property": "Purpose", "Value": "Evidence ISMS resource planning and allocation decisions." }, { "Property": "Used by", "Value": "ISMS Manager, Top Management, Process Owners, Internal Auditor" }, { "Property": "Maintained by", "Value": "ISMS Manager" }, { "Property": "Evidence role", "Value": "Clause 7.1 resource evidence" }, { "Property": "ISO reference", "Value": "ISO/IEC 27001:2022 Clause 7.1 and Clause 9.3" }, { "Property": "Review cadence", "Value": "Monthly during implementation and before management review" } ], "contentType": "control_table" }, { "id": "instructions", "title": "Instructions", "items": [ "Record resource needs that affect ISMS implementation or operation.", "Link each need to an ISMS activity, objective, risk treatment or evidence requirement.", "Capture requested owner, approval role, decision and allocated resource.", "Track planned and actual dates.", "Link evidence of approval, allocation or review.", "Escalate blocked or under-resourced items before management review.", "Use sheets ending in “Ex” as read-only examples. Enter live data only on the matching “Wk” (Working) sheets.", "Every operative list is an Excel Table with frozen headers and filters. Add new rows on the next empty worksheet row beneath the table so Excel expands it — do not leave blank rows inside the table.", "Where a column offers a dropdown, choose a value from the list (Status, Owner role, Priority, Severity, Likelihood, Impact, Applicability, Evidence Status, Review Result). Do not invent free-text variants.", "Enter dates as YYYY-MM-DD. Date columns are validated and formatted accordingly.", "Review the Flag columns (Overdue, Review Due, Missing Owner, Missing Evidence). They calculate automatically and highlight gaps for follow-up.", "Keep Cover, Legal, Book, Lists and Metadata unchanged. System sheets are protected on purpose." ], "contentType": "ordered_list" }, { "id": "resource_allocation_register", "title": "Resource allocation register", "schemaRef": { "definitionId": "RAE.artifactDefinition.v2", "sectionId": "resource_allocation_register", "columnsRef": "sections.resource_allocation_register.columns" }, "rows": [ { "Resource ID": "RAE-001", "Resource Need": "ISMS implementation coordination capacity", "Related ISMS Activity": "Phased implementation plan", "Resource Type": "People", "Owner": "ISMS Manager", "Requested By": "Compliance Lead", "Approval Role": "Top Management", "Decision": "Approved", "Allocated Resource": "0.5 FTE ISMS Manager for 12 weeks", "Planned Date": "2026-09-02", "Actual Date": "2026-09-02", "Evidence Reference": "IMPL-P-REVIEW-2026-W35", "Status": "Allocated", "Notes": "Supports scope, risk and evidence phases." }, { "Resource ID": "RAE-002", "Resource Need": "Access review automation pilot", "Related ISMS Activity": "Privileged access review", "Resource Type": "Tooling", "Owner": "Security Lead", "Requested By": "IT Operations Manager", "Approval Role": "ISMS Manager", "Decision": "Approved", "Allocated Resource": "Security engineer plus integration sandbox", "Planned Date": "2026-10-01", "Actual Date": "", "Evidence Reference": "ELAI-AUTO-2026-PILOT", "Status": "Planned", "Notes": "Related to ISMS-CHG-002." }, { "Resource ID": "RAE-003", "Resource Need": "Supplier evidence review support", "Related ISMS Activity": "Critical supplier assurance", "Resource Type": "People", "Owner": "Supplier Manager", "Requested By": "Compliance Lead", "Approval Role": "COO", "Decision": "Approved", "Allocated Resource": "Supplier Manager and Legal Counsel review slot", "Planned Date": "2026-09-10", "Actual Date": "", "Evidence Reference": "SINV-CLOUDHOST-2026-Q3", "Status": "In progress", "Notes": "CloudHost addendum pending." }, { "Resource ID": "RAE-004", "Resource Need": "Internal audit readiness review", "Related ISMS Activity": "Internal audit programme", "Resource Type": "People", "Owner": "Internal Auditor", "Requested By": "ISMS Manager", "Approval Role": "Top Management", "Decision": "Approved", "Allocated Resource": "Two-day internal audit window", "Planned Date": "2026-11-11", "Actual Date": "", "Evidence Reference": "IAP-PLAN-2026-Q4", "Status": "Planned", "Notes": "Evidence freeze required first." }, { "Resource ID": "RAE-005", "Resource Need": "Incident response tabletop exercise", "Related ISMS Activity": "Incident handling improvement", "Resource Type": "People and time", "Owner": "Incident Manager", "Requested By": "Security Lead", "Approval Role": "ISMS Manager", "Decision": "Approved", "Allocated Resource": "Two-hour cross-functional tabletop session", "Planned Date": "2026-09-25", "Actual Date": "", "Evidence Reference": "IRRT-REVIEW-2026-08", "Status": "Scheduled", "Notes": "Supplier incident scenario planned." }, { "Resource ID": "RAE-006", "Resource Need": "Data masking remediation effort", "Related ISMS Activity": "Secure development and privacy review", "Resource Type": "Engineering capacity", "Owner": "Engineering Lead", "Requested By": "Privacy Lead", "Approval Role": "CTO", "Decision": "Approved with priority review", "Allocated Resource": "One sprint story plus privacy review checkpoint", "Planned Date": "2026-09-10", "Actual Date": "", "Evidence Reference": "EXR-004", "Status": "Open", "Notes": "Linked to ISMS-CHG-005." } ], "contentType": "register_table" }, { "id": "resource_review_decision", "title": "Resource review decision", "values": { "Review result": "Resource allocations are sufficient for the current implementation phase; one remediation item remains open.", "Resource items reviewed": 6, "Approved items": 6, "Open items": 4, "Blocked items": 0, "Reviewed by": "ISMS Manager", "Decision date": "2026-08-29", "Evidence reference": "RAE-REVIEW-2026-Q3" }, "rows": [ { "Field": "Review result", "Value": "Resource allocations are sufficient for the current implementation phase; one remediation item remains open." }, { "Field": "Resource items reviewed", "Value": "6" }, { "Field": "Approved items", "Value": "6" }, { "Field": "Open items", "Value": "4" }, { "Field": "Blocked items", "Value": "0" }, { "Field": "Reviewed by", "Value": "ISMS Manager" }, { "Field": "Decision date", "Value": "2026-08-29" }, { "Field": "Evidence reference", "Value": "RAE-REVIEW-2026-Q3" } ], "contentType": "decision_table" }, { "id": "external_references", "title": "References", "groups": [ { "text": "Cite these sources from workshops and audits. This list names ISO clauses, book chapters and companion artifacts used by this file." }, { "rows": [ { "Kind": "ISO", "Reference": "ISO/IEC 27001:2022 7.1", "How this document uses it": "Normative source this artifact implements or cites.", "href": "https://www.iso.org/standard/82875.html" }, { "Kind": "Book", "Reference": "Building the ISMS, Support & Resources (Clause 7)", "How this document uses it": "Primary operating chapter for this companion artifact.", "href": "https://www.amazon.com/dp/9789908983448" }, { "Kind": "Artifact", "Reference": "ISO Information Security Objectives (Building the ISMS, Information Security Policies & Risk Management)", "How this document uses it": "Interface record. Cite this Document Control version; do not copy this file into that record.", "href": "https://www.amazon.com/dp/9789908983448" }, { "Kind": "Artifact", "Reference": "ELAI Evidence Log / Audit Pack Index (Implementation & Certification, Audit Process)", "How this document uses it": "Interface record. Cite this Document Control version; do not copy this file into that record.", "href": "https://www.amazon.com/s?k=ISO+27001+for+Software+Companies+Implementation+and+Certification" }, { "Kind": "Artifact", "Reference": "EXR Exceptions Register (Implementation & Certification, Asset Management & Information Classification)", "How this document uses it": "Interface record. Cite this Document Control version; do not copy this file into that record.", "href": "https://www.amazon.com/s?k=ISO+27001+for+Software+Companies+Implementation+and+Certification" }, { "Kind": "Artifact", "Reference": "IAP Internal Audit Plan (Implementation & Certification, Internal Audit & Management Review)", "How this document uses it": "Interface record. Cite this Document Control version; do not copy this file into that record.", "href": "https://www.amazon.com/s?k=ISO+27001+for+Software+Companies+Implementation+and+Certification" } ] } ], "contentType": "reference_table" } ], "enrichment": { "source": "Example.json", "method": "curated-json", "note": "Completes Example JSON with renderer-native sections and generalized groups; no mdSource helper fields." }, "snapshotRef": { "snapshotId": "arcfield.platform.surv.2026-09-11", "schemaVersion": "evidenceSnapshot.v1" }, "scenarioRef": { "githubIssue": 64, "crId": "CR-TYPE-ARCFIELD-001", "family": "Register", "role": "Operating sample of the 11 September 2026 freeze" } }