{
  "schemaVersion": "artifactDefinition.v2",
  "definitionId": "COMM-P.artifactDefinition.v2",
  "artifactId": "COMM-P",
  "title": "ISMS Communication Plan",
  "artifactType": "Register",
  "format": "xlsx",
  "productTier": "Basic",
  "definitionRole": "contract",
  "sourceModel": {
    "body": "canonical human-readable register maintained in the Artifact Candidate page",
    "jsonDefinition": "machine-readable contract and validation model",
    "jsonExample": "curated realistic example data fixture"
  },
  "purpose": "Define the required structure for planning and tracking ISMS communications by audience, message, trigger, frequency, owner, channel, evidence and effectiveness.",
  "sections": [
    {
      "order": 1,
      "id": "title_page",
      "title": "Title Page",
      "required": true,
      "hint": null
    },
    {
      "order": 2,
      "id": "abstract",
      "title": "Abstract",
      "required": true,
      "hint": {
        "text": "Use the communication plan to show that ISMS communication is intentional, owned, timely and evidenced.",
        "bookReference": "Volume 2, S-09-01-00 Implementation Readiness & Planning"
      }
    },
    {
      "order": 3,
      "id": "document_control",
      "title": "Document Control",
      "required": true,
      "hint": null
    },
    {
      "order": 4,
      "id": "instructions",
      "title": "Instructions",
      "required": true,
      "hint": {
        "text": "Treat each communication as an auditable control activity with a recipient, owner, trigger and evidence record.",
        "bookReference": "Volume 2, S-09-01-00 Implementation Readiness & Planning"
      },
      "intro": "Complete the Working sheets using the example tabs as a model. Follow the workbook usage rules below."
    },
    {
      "order": 5,
      "id": "communication_plan",
      "title": "Communication plan",
      "contentType": "register_table",
      "required": true,
      "minimumExampleRows": 6,
      "columns": [
        {
          "name": "Communication ID",
          "type": "text",
          "required": "yes",
          "description": "Unique communication identifier.",
          "example": "COMM-001"
        },
        {
          "name": "Audience",
          "type": "text",
          "required": "yes",
          "description": "Recipient group.",
          "example": "All employees"
        },
        {
          "name": "Message / Topic",
          "type": "text",
          "required": "yes",
          "description": "Communication topic.",
          "example": "Information security policy reminder"
        },
        {
          "name": "Purpose",
          "type": "text",
          "required": "yes",
          "description": "Why communication is required.",
          "example": "Maintain awareness"
        },
        {
          "name": "Trigger or Frequency",
          "type": "text",
          "required": "yes",
          "description": "Timing rule.",
          "example": "Quarterly"
        },
        {
          "name": "Channel",
          "type": "text",
          "required": "yes",
          "description": "Communication channel.",
          "example": "Email"
        },
        {
          "name": "Owner",
          "type": "select",
          "required": "yes",
          "description": "Accountable role.",
          "example": "ISMS Manager",
          "valueSet": "domain.owner",
          "options": [
            "ISMS Manager",
            "Control Owner",
            "Risk Owner",
            "Process Owner",
            "Asset Owner",
            "IT Security",
            "HR",
            "Legal",
            "Executive Management",
            "Internal Audit"
          ],
          "validation": {
            "allowBlank": false,
            "errorTitle": "Invalid value",
            "error": "Select a value from the list."
          }
        },
        {
          "name": "Approver",
          "type": "text",
          "required": "conditional",
          "description": "Approver where required.",
          "example": "Top Management"
        },
        {
          "name": "Evidence Required",
          "type": "text",
          "required": "yes",
          "description": "Evidence to retain.",
          "example": "Sent email"
        },
        {
          "name": "Evidence Reference",
          "type": "text",
          "required": "yes",
          "description": "Concrete evidence record.",
          "example": "COMM-001-2026-Q3"
        },
        {
          "name": "Status",
          "type": "select",
          "required": "yes",
          "description": "Planned, In progress, Completed or Overdue.",
          "example": "Completed",
          "valueSet": "domain.status.generic",
          "options": [
            "Draft",
            "In Progress",
            "Under Review",
            "Approved",
            "Closed",
            "Deferred"
          ],
          "validation": {
            "allowBlank": false,
            "errorTitle": "Invalid value",
            "error": "Select a value from the list."
          }
        },
        {
          "name": "Next Communication Date",
          "type": "date",
          "required": "yes",
          "description": "Next scheduled date.",
          "example": "2026-11-15"
        },
        {
          "name": "Notes",
          "type": "text",
          "required": "no",
          "description": "Additional context.",
          "example": "Linked to policy acknowledgement."
        }
      ],
      "hint": {
        "text": "Each row should make clear who must receive which ISMS message, why, when, through which channel and how evidence is retained.",
        "bookReference": "Volume 2, S-09-01-00 Implementation Readiness & Planning"
      }
    },
    {
      "order": 6,
      "id": "communication_review_decision",
      "title": "Communication review decision",
      "required": true,
      "fields": [
        {
          "name": "Review result",
          "type": "select",
          "required": "yes",
          "valueSet": "domain.reviewResult",
          "options": [
            "Pass",
            "Pass with observations",
            "Fail",
            "Deferred"
          ],
          "validation": {
            "allowBlank": false,
            "errorTitle": "Invalid value",
            "error": "Select a value from the list."
          }
        },
        {
          "name": "Planned communications",
          "type": "text",
          "required": "yes"
        },
        {
          "name": "Completed communications",
          "type": "text",
          "required": "yes"
        },
        {
          "name": "Overdue communications",
          "type": "text",
          "required": "yes"
        },
        {
          "name": "Reviewed by",
          "type": "text",
          "required": "yes"
        },
        {
          "name": "Decision date",
          "type": "date",
          "required": "yes"
        },
        {
          "name": "Evidence reference",
          "type": "text",
          "required": "yes"
        }
      ],
      "hint": {
        "text": "Close with a communication review decision so gaps can be escalated before audits or management review.",
        "bookReference": "Volume 2, S-09-01-00 Implementation Readiness & Planning"
      },
      "contentType": "decision_table"
    },
    {
      "order": 7,
      "id": "external_references",
      "title": "References",
      "contentType": "reference_table",
      "required": true
    }
  ],
  "validationRules": [
    "JSON Example must contain definitionRef pointing to COMM-P.artifactDefinition.v2.",
    "JSON Example register sections must contain schemaRef pointing to the matching definition section.",
    "Communication rows must include audience, message, owner, trigger or frequency, channel and evidence reference.",
    "Body must render the contract schema and the example data.",
    "No standalone Book reference section and no generic Sample placeholders are allowed."
  ],
  "enrichment": {
    "source": "Contract.json",
    "method": "curated-json",
    "note": "Completes Contract JSON from MD-only schema/sections, removes duplicate alias sections, and normalizes string columns into structured column objects."
  },
  "editorialStandard": {
    "isoAnchors": [
      {
        "label": "ISO/IEC 27001:2022 7.4",
        "href": "https://www.iso.org/standard/82875.html",
        "role": "Normative source this artifact implements or cites."
      },
      {
        "label": "ISO/IEC 27001:2022 7.5",
        "href": "https://www.iso.org/standard/82875.html",
        "role": "Documented information: identify, review and cite this workbook by version."
      }
    ],
    "bookSources": [
      {
        "series": "ISO 27001 for Software Companies",
        "volume": 2,
        "volumeTitle": "Implementation & Certification",
        "chapterId": "S-09-01-00",
        "chapterTitle": "Implementation Readiness & Planning",
        "primary": true,
        "role": "Primary operating chapter for this companion artifact.",
        "href": "https://www.amazon.com/s?k=ISO+27001+for+Software+Companies+Implementation+and+Certification"
      },
      {
        "series": "ISO 27001 for Software Companies",
        "volume": 1,
        "volumeTitle": "Building the ISMS",
        "chapterId": "S-00-03-00",
        "chapterTitle": "Planning, Risk & Objectives (Clause 6)",
        "primary": false,
        "role": "Documented information, review and version discipline.",
        "href": "https://www.amazon.com/dp/9789908983448"
      }
    ],
    "acronyms": [
      {
        "abbr": "ISMS",
        "longForm": "Information Security Management System"
      },
      {
        "abbr": "SaaS",
        "longForm": "Software as a Service"
      },
      {
        "abbr": "CIA",
        "longForm": "Confidentiality, Integrity, and Availability"
      },
      {
        "abbr": "CI/CD",
        "longForm": "Continuous Integration / Continuous Delivery"
      },
      {
        "abbr": "CI",
        "longForm": "Continuous Integration"
      },
      {
        "abbr": "CD",
        "longForm": "Continuous Delivery"
      },
      {
        "abbr": "CEO",
        "longForm": "Chief Executive Officer"
      },
      {
        "abbr": "JSON",
        "longForm": "JavaScript Object Notation"
      },
      {
        "abbr": "SLA",
        "longForm": "Service Level Agreement"
      }
    ],
    "must": [
      "Keep one live row per record on Working sheets. Do not merge several cases into one row.",
      "Example sheets must contain realistic Arcfield rows for every required sheet. Empty required cells are not an example."
    ],
    "mustNot": [
      "Do not invent live rows in the renderer. Example data lives in the Example JSON.",
      "Do not treat Ex example tabs as working sheets. Do not put live data on system sheets."
    ],
    "softwareCompanyAdaptations": [
      "Use Arcfield as the worked example (cover variant A).",
      "Name SaaS, CI/CD, privileged access or supplier interfaces in example rows where they affect this register."
    ],
    "exampleWorkbook": {
      "workedExampleOrg": "Arcfield",
      "requiredSheets": [
        "communication_plan",
        "communication_review_decision"
      ],
      "minExampleRows": 6,
      "coverFromExample": true
    }
  },
  "editorialContractId": "editorial.xlsx.register.v1",
  "contentContractId": "content.register.items.v1"
}