{ "schemaVersion": "artifactExample.v2", "artifactId": "TR", "title": "Training Register", "definitionRef": { "artifactId": "TR", "definitionSchemaVersion": "artifactDefinition.v2", "definitionId": "TR.artifactDefinition.v2", "title": "Training Register" }, "organization": "Arcfield", "sections": [ { "id": "title_page", "title": "Title Page", "values": { "Register Title": "Training Register", "Register ID": "TR-REG-001", "Version": "1.1", "Status": "Approved", "Organization": "Arcfield", "Owner": "HR Manager", "Approver": "ISMS Manager", "Classification": "Internal", "Effective Date": "2026-09-11", "Next Review Date": "2027-09-11" }, "items": [ "Register Title: Training Register", "Register ID: TR-REG-001", "Version: 1.1", "Status: Approved", "Organization: Arcfield", "Owner: HR Manager", "Approver: ISMS Manager", "Classification: Internal", "Effective Date: 2026-09-11", "Next Review Date: 2027-09-11" ], "contentType": "metadata" }, { "id": "abstract", "title": "Abstract", "text": "This example defines Arcfield mandatory and role-specific training requirements with audience, competence need, frequency, owner, due date, evidence required, effectiveness check and status. Rows are the 11 September 2026 operating sample of the certified Arcfield Platform ISMS in the surveillance cycle after certificate ARC-ISMS-2025-001.", "contentType": "narrative" }, { "id": "document_control", "title": "Document Control", "rows": [ { "Property": "Purpose", "Value": "Maintain the catalogue of required security and ISMS trainings." }, { "Property": "Used by", "Value": "HR Manager, ISMS Manager, Managers, Internal Auditor" }, { "Property": "Maintained by", "Value": "HR Manager" }, { "Property": "Evidence role", "Value": "Competence and awareness planning evidence" }, { "Property": "ISO reference", "Value": "ISO/IEC 27001:2022 Clause 7.2 and Clause 7.3" }, { "Property": "Review cadence", "Value": "Quarterly and after role, process or scope changes" } ], "contentType": "control_table" }, { "id": "instructions", "title": "Instructions", "items": [ "Define mandatory and role-specific trainings.", "Link each training to a role, competence requirement and owner.", "Set due dates, frequency and evidence requirements.", "Track completion status at training-item level.", "Link individual completion records in TRC.", "Review overdue items and pending effectiveness checks before audit.", "Use sheets ending in “Ex” as read-only examples. Enter live data only on the matching “Wk” (Working) sheets.", "Every operative list is an Excel Table with frozen headers and filters. Add new rows on the next empty worksheet row beneath the table so Excel expands it — do not leave blank rows inside the table.", "Where a column offers a dropdown, choose a value from the list (Status, Owner role, Priority, Severity, Likelihood, Impact, Applicability, Evidence Status, Review Result). Do not invent free-text variants.", "Enter dates as YYYY-MM-DD. Date columns are validated and formatted accordingly.", "Review the Flag columns (Overdue, Review Due, Missing Owner, Missing Evidence). They calculate automatically and highlight gaps for follow-up.", "Keep Cover, Legal, Book, Lists and Metadata unchanged. System sheets are protected on purpose." ], "contentType": "ordered_list" }, { "id": "training_register", "title": "Training register", "schemaRef": { "definitionId": "TR.artifactDefinition.v2", "sectionId": "training_register", "columnsRef": "sections.training_register.columns" }, "rows": [ { "Training ID": "TR-001", "Training Title": "Information security awareness", "Role or Audience": "All employees and contractors", "Competence Requirement": "Understand security responsibilities, reporting channels and acceptable use.", "Required": "Yes", "Frequency": "Annual and onboarding", "Owner": "HR Manager", "Due Date": "2026-09-30", "Completion Status": "In progress", "Evidence Required": "Training completion report", "Effectiveness Check": "Awareness quiz and phishing-report trend review", "Evidence Reference": "TRC-2026-Q3", "Status": "Active", "Notes": "Two contractor completions pending." }, { "Training ID": "TR-002", "Training Title": "Incident reporting and escalation", "Role or Audience": "All employees", "Competence Requirement": "Recognize and report suspected incidents through the approved route.", "Required": "Yes", "Frequency": "Annual", "Owner": "Incident Manager", "Due Date": "2026-09-25", "Completion Status": "Assigned", "Evidence Required": "Acknowledgement record", "Effectiveness Check": "Tabletop participation and incident-report quality review", "Evidence Reference": "ICL-004", "Status": "Active", "Notes": "Newsletter reminder sent." }, { "Training ID": "TR-003", "Training Title": "Secure development practices", "Role or Audience": "Engineering team", "Competence Requirement": "Apply secure coding, change validation and privacy checkpoint rules.", "Required": "Yes", "Frequency": "Annual and after process changes", "Owner": "Engineering Lead", "Due Date": "2026-10-15", "Completion Status": "Planned", "Evidence Required": "Completion report and release checklist samples", "Effectiveness Check": "Review two release changes for security validation evidence", "Evidence Reference": "CIL-2026-Q3", "Status": "Active", "Notes": "Privacy checkpoint added after EXR-004." }, { "Training ID": "TR-004", "Training Title": "Supplier security review", "Role or Audience": "Supplier Manager and service owners", "Competence Requirement": "Assess supplier evidence, contract safeguards, subprocessors and exit plans.", "Required": "Yes", "Frequency": "Annual and before critical supplier renewal", "Owner": "Supplier Manager", "Due Date": "2026-09-10", "Completion Status": "In progress", "Evidence Required": "Workshop attendance and supplier review checklist", "Effectiveness Check": "CloudHost evidence pack reviewed without missing mandatory fields", "Evidence Reference": "SINV-REVIEW-2026-Q3", "Status": "Action open", "Notes": "Breach-notification addendum pending." }, { "Training ID": "TR-005", "Training Title": "Privileged access review training", "Role or Audience": "System owners", "Competence Requirement": "Review privileged access accurately and document decisions.", "Required": "Yes", "Frequency": "Annual and before first review assignment", "Owner": "IT Operations Manager", "Due Date": "2026-09-05", "Completion Status": "In progress", "Evidence Required": "Access review walkthrough record", "Effectiveness Check": "Next access review completed without missing owner decisions", "Evidence Reference": "ARR-2026-08", "Status": "Open follow-up", "Notes": "Cloud admin review pending." }, { "Training ID": "TR-006", "Training Title": "Management review responsibilities", "Role or Audience": "Top management and ISMS leadership", "Competence Requirement": "Understand ISMS performance, risk, objective and improvement review responsibilities.", "Required": "Yes", "Frequency": "Annual", "Owner": "ISMS Manager", "Due Date": "2026-11-12", "Completion Status": "Scheduled", "Evidence Required": "Management review briefing and attendance record", "Effectiveness Check": "Review decisions include objectives, risks, resources and improvement actions", "Evidence Reference": "MR-2026-Q3", "Status": "Active", "Notes": "Quarterly cadence approved." } ], "contentType": "register_table" }, { "id": "training_review_decision", "title": "Training review decision", "values": { "Review result": "Six training requirements reviewed; two items need follow-up before the September readiness review.", "Training items reviewed": 6, "Mandatory trainings": 6, "Items overdue": 0, "Effectiveness checks pending": 4, "Reviewed by": "HR Manager", "Decision date": "2026-08-29", "Evidence reference": "TR-REVIEW-2026-Q3" }, "rows": [ { "Field": "Review result", "Value": "Six training requirements reviewed; two items need follow-up before the September readiness review." }, { "Field": "Training items reviewed", "Value": "6" }, { "Field": "Mandatory trainings", "Value": "6" }, { "Field": "Items overdue", "Value": "0" }, { "Field": "Effectiveness checks pending", "Value": "4" }, { "Field": "Reviewed by", "Value": "HR Manager" }, { "Field": "Decision date", "Value": "2026-08-29" }, { "Field": "Evidence reference", "Value": "TR-REVIEW-2026-Q3" } ], "contentType": "decision_table" }, { "id": "external_references", "title": "References", "groups": [ { "text": "Cite these sources from workshops and audits. This list names ISO clauses, book chapters and companion artifacts used by this file." }, { "rows": [ { "Kind": "ISO", "Reference": "ISO/IEC 27001:2022 7.2", "How this document uses it": "Normative source this artifact implements or cites.", "href": "https://www.iso.org/standard/82875.html" }, { "Kind": "Book", "Reference": "Building the ISMS, Security Awareness & Training Programs", "How this document uses it": "Primary operating chapter for this companion artifact.", "href": "https://www.amazon.com/dp/9789908983448" }, { "Kind": "Artifact", "Reference": "ISO Information Security Objectives (Building the ISMS, Information Security Policies & Risk Management)", "How this document uses it": "Interface record. Cite this Document Control version; do not copy this file into that record.", "href": "https://www.amazon.com/dp/9789908983448" }, { "Kind": "Artifact", "Reference": "TRC Training Records (Building the ISMS, Security Awareness & Training Programs)", "How this document uses it": "Interface record. Cite this Document Control version; do not copy this file into that record.", "href": "https://www.amazon.com/dp/9789908983448" }, { "Kind": "Artifact", "Reference": "ARR Access Rights Register (Secure Engineering, Access Control & Identity Management)", "How this document uses it": "Interface record. Cite this Document Control version; do not copy this file into that record.", "href": "https://www.amazon.com/dp/9789908983455" }, { "Kind": "Artifact", "Reference": "CIL Continual Improvement Log (Building the ISMS, Continual Improvement (Clause 10))", "How this document uses it": "Interface record. Cite this Document Control version; do not copy this file into that record.", "href": "https://www.amazon.com/dp/9789908983448" } ] } ], "contentType": "reference_table" } ], "enrichment": { "source": "Example.json", "method": "curated-json", "note": "Completes Example JSON with renderer-native sections and generalized groups; no mdSource helper fields." }, "snapshotRef": { "snapshotId": "arcfield.platform.surv.2026-09-11", "schemaVersion": "evidenceSnapshot.v1" }, "scenarioRef": { "githubIssue": 64, "crId": "CR-TYPE-ARCFIELD-001", "family": "Register", "role": "Operating sample of the 11 September 2026 freeze" } }