{
  "schemaVersion": "artifactExample.v2",
  "artifactId": "CIL",
  "title": "Continual Improvement Log",
  "definitionRef": {
    "artifactId": "CIL",
    "definitionSchemaVersion": "artifactDefinition.v2",
    "definitionId": "CIL.artifactDefinition.v2",
    "title": "Continual Improvement Log"
  },
  "organization": "Arcfield",
  "sections": [
    {
      "id": "title_page",
      "title": "Title Page",
      "values": {
        "Register Title": "Continual Improvement Log",
        "Register ID": "CIL-REG-001",
        "Version": "1.1",
        "Status": "Approved",
        "Organization": "Arcfield",
        "Owner": "ISMS Manager",
        "Approver": "Top Management",
        "Classification": "Internal",
        "Effective Date": "2026-09-11",
        "Next Review Date": "2027-09-11"
      },
      "items": [
        "Register Title: Continual Improvement Log",
        "Register ID: CIL-REG-001",
        "Version: 1.1",
        "Status: Approved",
        "Organization: Arcfield",
        "Owner: ISMS Manager",
        "Approver: Top Management",
        "Classification: Internal",
        "Effective Date: 2026-09-11",
        "Next Review Date: 2027-09-11"
      ],
      "contentType": "metadata"
    },
    {
      "id": "abstract",
      "title": "Abstract",
      "text": "This example records Arcfield ISMS improvement opportunities, management decisions, ownership, prioritization, implementation status, benefit checks and evidence. Entries are the dated Arcfield Platform operating log sampled on the 11 September 2026 freeze in the surveillance cycle after certificate ARC-ISMS-2025-001.",
      "contentType": "narrative"
    },
    {
      "id": "document_control",
      "title": "Document Control",
      "rows": [
        {
          "Property": "Purpose",
          "Value": "Track ISMS improvement opportunities from decision through implementation and benefit review."
        },
        {
          "Property": "Used by",
          "Value": "ISMS Manager, Process Owners, Top Management, Internal Auditor"
        },
        {
          "Property": "Maintained by",
          "Value": "ISMS Manager"
        },
        {
          "Property": "Evidence role",
          "Value": "Continual improvement and management review evidence"
        },
        {
          "Property": "ISO reference",
          "Value": "ISO/IEC 27001:2022 Clause 10.1"
        },
        {
          "Property": "Review cadence",
          "Value": "Monthly during implementation and before management review"
        }
      ],
      "contentType": "control_table"
    },
    {
      "id": "instructions",
      "title": "Instructions",
      "items": [
        "Record improvement ideas from audits, monitoring, incidents, risk reviews, supplier reviews and management review.",
        "Decide whether each improvement is accepted, deferred or rejected.",
        "Assign owner, priority and target date.",
        "Link implementation evidence.",
        "Check whether the expected benefit was achieved.",
        "Escalate high-priority or overdue improvements to management review.",
        "Use sheets ending in “Ex” as read-only examples. Enter live data only on the matching “Wk” (Working) sheets.",
        "Every operative list is an Excel Table with frozen headers and filters. Add new rows on the next empty worksheet row beneath the table so Excel expands it — do not leave blank rows inside the table.",
        "Where a column offers a dropdown, choose a value from the list (Status, Owner role, Priority, Severity, Likelihood, Impact, Applicability, Evidence Status, Review Result). Do not invent free-text variants.",
        "Enter dates as YYYY-MM-DD. Date columns are validated and formatted accordingly.",
        "Review the Flag columns (Overdue, Review Due, Missing Owner, Missing Evidence). They calculate automatically and highlight gaps for follow-up.",
        "Keep Cover, Legal, Book, Lists and Metadata unchanged. System sheets are protected on purpose."
      ],
      "contentType": "ordered_list"
    },
    {
      "id": "continual_improvement_log",
      "title": "Continual improvement log",
      "schemaRef": {
        "definitionId": "CIL.artifactDefinition.v2",
        "sectionId": "continual_improvement_log",
        "columnsRef": "sections.continual_improvement_log.columns"
      },
      "rows": [
        {
          "Improvement ID": "CIL-001",
          "Date raised": "2026-08-05",
          "Source": "Internal audit",
          "Improvement opportunity": "Automate evidence reminders for access reviews.",
          "Related clause or control": "A.5.18; Clause 9.2",
          "Expected benefit": "Reduce incomplete review evidence and late evidence collection.",
          "Priority": "High",
          "Decision": "Accepted",
          "Owner": "IT Operations Manager",
          "Target date": "2026-09-30",
          "Status": "In progress",
          "Implementation evidence": "Workflow ticket IAM-214",
          "Benefit check": "Verify Q4 access review evidence completeness.",
          "Benefit status": "Pending",
          "Next review date": "2026-10-31",
          "Notes": "Linked to CAR-001."
        },
        {
          "Improvement ID": "CIL-002",
          "Date raised": "2026-08-10",
          "Source": "Management review",
          "Improvement opportunity": "Add supplier exit-readiness status to the supplier inventory.",
          "Related clause or control": "A.5.19; A.5.20",
          "Expected benefit": "Improve visibility over critical supplier dependency risks.",
          "Priority": "Medium",
          "Decision": "Accepted",
          "Owner": "Supplier Manager",
          "Target date": "2026-10-15",
          "Status": "Proposed",
          "Implementation evidence": "SINV enhancement backlog",
          "Benefit check": "Review critical supplier records after field rollout.",
          "Benefit status": "Pending",
          "Next review date": "2026-11-15",
          "Notes": "Prioritize cloud hosting supplier."
        },
        {
          "Improvement ID": "CIL-003",
          "Date raised": "2026-07-20",
          "Source": "Monitoring",
          "Improvement opportunity": "Add vulnerability SLA trend chart to monthly ISMS metrics.",
          "Related clause or control": "A.8.8; Clause 9.1",
          "Expected benefit": "Improve management visibility of vulnerability remediation performance.",
          "Priority": "Medium",
          "Decision": "Accepted",
          "Owner": "Security Lead",
          "Target date": "2026-08-31",
          "Status": "Implemented",
          "Implementation evidence": "MME-2026-Q3 dashboard update",
          "Benefit check": "Trend reviewed in September ISMS meeting.",
          "Benefit status": "Partially confirmed",
          "Next review date": "2026-09-30",
          "Notes": "First monthly trend included."
        },
        {
          "Improvement ID": "CIL-004",
          "Date raised": "2026-06-12",
          "Source": "Employee suggestion",
          "Improvement opportunity": "Create a short secure remote-working refresher.",
          "Related clause or control": "A.6.7",
          "Expected benefit": "Improve awareness for laptop handling and public Wi-Fi use.",
          "Priority": "Low",
          "Decision": "Deferred",
          "Owner": "HR Manager",
          "Target date": "2026-12-15",
          "Status": "Deferred",
          "Implementation evidence": "",
          "Benefit check": "Reassess after annual awareness module update.",
          "Benefit status": "Pending",
          "Next review date": "2026-11-29",
          "Notes": "Combine with annual awareness refresh."
        },
        {
          "Improvement ID": "CIL-005",
          "Date raised": "2026-05-22",
          "Source": "Risk review",
          "Improvement opportunity": "Introduce data masking for production-like test data.",
          "Related clause or control": "A.8.11; A.8.33",
          "Expected benefit": "Reduce privacy and confidentiality risk in test environments.",
          "Priority": "High",
          "Decision": "Accepted",
          "Owner": "Engineering Lead",
          "Target date": "2026-10-31",
          "Status": "In progress",
          "Implementation evidence": "DMASK-PLAN-2026",
          "Benefit check": "Sample test dataset after masking rollout.",
          "Benefit status": "Pending",
          "Next review date": "2026-10-31",
          "Notes": "Aligned with SoA planned controls."
        }
      ],
      "contentType": "register_table"
    },
    {
      "id": "improvement_review_decision",
      "title": "Improvement review decision",
      "values": {
        "Review result": "Controlled with two high-priority improvements in progress",
        "Open improvements": 3,
        "Implemented improvements": 1,
        "Deferred improvements": 1,
        "Rejected improvements": 0,
        "Reviewed by": "ISMS Manager",
        "Decision date": "2026-08-29",
        "Evidence reference": "CIL-REVIEW-2026-Q3"
      },
      "rows": [
        {
          "Field": "Review result",
          "Value": "Controlled with two high-priority improvements in progress"
        },
        {
          "Field": "Open improvements",
          "Value": "3"
        },
        {
          "Field": "Implemented improvements",
          "Value": "1"
        },
        {
          "Field": "Deferred improvements",
          "Value": "1"
        },
        {
          "Field": "Rejected improvements",
          "Value": "0"
        },
        {
          "Field": "Reviewed by",
          "Value": "ISMS Manager"
        },
        {
          "Field": "Decision date",
          "Value": "2026-08-29"
        },
        {
          "Field": "Evidence reference",
          "Value": "CIL-REVIEW-2026-Q3"
        }
      ],
      "contentType": "decision_table"
    },
    {
      "id": "external_references",
      "title": "References",
      "groups": [
        {
          "text": "Cite these sources from workshops and audits. This list names ISO clauses, book chapters and companion artifacts used by this file."
        },
        {
          "rows": [
            {
              "Kind": "ISO",
              "Reference": "ISO/IEC 27001:2022 10.1",
              "How this document uses it": "Normative source this artifact implements or cites.",
              "href": "https://www.iso.org/standard/82875.html"
            },
            {
              "Kind": "Book",
              "Reference": "Implementation & Certification, Internal Audit & Management Review",
              "How this document uses it": "Primary operating chapter for this companion artifact.",
              "href": "https://www.amazon.com/s?k=ISO+27001+for+Software+Companies+Implementation+and+Certification"
            },
            {
              "Kind": "Artifact",
              "Reference": "ISO Information Security Objectives (Building the ISMS, Information Security Policies & Risk Management)",
              "How this document uses it": "Interface record. Cite this Document Control version; do not copy this file into that record.",
              "href": "https://www.amazon.com/dp/9789908983448"
            },
            {
              "Kind": "Artifact",
              "Reference": "CAR Corrective Actions Register (Building the ISMS, Context of the Organization (Clause 4))",
              "How this document uses it": "Interface record. Cite this Document Control version; do not copy this file into that record.",
              "href": "https://www.amazon.com/dp/9789908983448"
            },
            {
              "Kind": "Artifact",
              "Reference": "MME Monitoring and Measurement Evidence (Implementation & Certification, Monitoring, Measurement & Performance Metrics)",
              "How this document uses it": "Interface record. Cite this Document Control version; do not copy this file into that record.",
              "href": "https://www.amazon.com/s?k=ISO+27001+for+Software+Companies+Implementation+and+Certification"
            },
            {
              "Kind": "Artifact",
              "Reference": "SINV Supplier Inventory (Building the ISMS, Supplier Security & Third-party Risk Management)",
              "How this document uses it": "Interface record. Cite this Document Control version; do not copy this file into that record.",
              "href": "https://www.amazon.com/dp/9789908983448"
            }
          ]
        }
      ],
      "contentType": "reference_table"
    }
  ],
  "enrichment": {
    "source": "Example.json",
    "method": "curated-json",
    "note": "Completes Example JSON with renderer-native sections and generalized groups; no mdSource helper fields."
  },
  "snapshotRef": {
    "snapshotId": "arcfield.platform.surv.2026-09-11",
    "schemaVersion": "evidenceSnapshot.v1"
  },
  "scenarioRef": {
    "githubIssue": 64,
    "crId": "CR-TYPE-ARCFIELD-001",
    "family": "Log",
    "role": "Dated operating log sampled on the freeze"
  }
}