ISO 27566-3 Revision Checker
ISO/IEC DIS 27566-3stage 40.20ballot closes 4 December 2026planning date 14 September 2027

All 17 analysis units · Report and maintain

P3-14

Write the analysis report

Produce a summary for the reader and a detailed report. The summary states the headline accuracy and the indicator. The detailed report carries the object description, the method, the sample, the continuous and binary results, the equality analysis, the attack results and the limitations.

Group Report and maintainPublic source WG 5 N3928, clauses 4.3.3 and 4.4Evidence 3 items

What the unit asks

The draft ties the report to the ISO/IEC 29155-3 reporting structure and asks for the summary to be published alongside the practice statement. That combination is what makes a comparison useful outside the buying organisation: the public can see the claim and the method, and a regulator can see the scope.

What good practice looks like

Write the limitations section with the same care as the results. Name the version of the system, the date of the test and the version of the practice statement. Publish the summary beside the statement and keep the detailed report available under the confidentiality terms the draft allows.

Evidence an assessor asks for

ArtefactWhy it matters
The executive summary, published with the practice statement.It is the public claim the market can check.
The detailed report with method, sample, results and limitations.It is what an assessor or regulator needs to review the claim.
The version record for the system and the statement.It ties the report to the service it describes.

What a good answer sounds like

A good answer to P3-14 names The executive summary, published with the practice statement., dates it, and says what it does not cover. A policy or a promise is not an answer. If P3-14 has no artefact, the row is not met and the absence is the finding.

Where comparisons commonly fail

  • The public summary is a marketing page with one percentage on it.
  • The detailed report omits the sample and the limitations.
  • The report does not say which version of the system was tested.

Questions to put to the supplier

  1. Can a reader see the method as well as the number?
  2. Is the public summary the same claim as the detailed report?

How this is used in the kit

P3-14 becomes one row of the comparison register, with an owner, a status and the evidence named above. A status of met asks for the artefact and its date, and the free check uses the same row as an evidence question, so the page and the register share one vocabulary.

Source for this page

Retrieved 2026-10-21. P3-14 is our statement of WG 5 N3928, clauses 4.3.3 and 4.4; the DIS body is not public, so no DIS clause number is claimed.