ISO 27566-3 Revision Checker
ISO/IEC DIS 27566-3stage 40.20ballot closes 4 December 2026planning date 14 September 2027

All 17 analysis units · Report and maintain

P3-17

Set the re-run triggers

Set the events that require the comparison to be run again: a new system version, a changed threshold, a new attack pattern, a change in the practice statement, or publication of the final text that this draft becomes.

Group Report and maintainPublic source WG 5 N3928, clause 4.4.1.3Evidence 3 items

What the unit asks

A comparison is a statement about a version at a time. The draft's concern with comparability over time is the reason the trigger list belongs in the programme, not in a footnote. The publication of the final standard is one trigger among several, and it is the one this site is built to watch.

What good practice looks like

Write the trigger list and the owner. Put the key date in the calendar. Where the trigger fires, re-run the affected tests and publish a new summary with a new date, keeping the old one.

Evidence an assessor asks for

ArtefactWhy it matters
The trigger list with the owner and the response for each.It turns change management into an auditable rule.
The calendar entry for the key date and the review date.It shows the programme is scheduled, not reactive.
The re-run record, with what changed and what the new result was.It shows the programme responded.

What a good answer sounds like

A good answer to P3-17 names The trigger list with the owner and the response for each., dates it, and says what it does not cover. A policy or a promise is not an answer. If P3-17 has no artefact, the row is not met and the absence is the finding.

Where comparisons commonly fail

  • The comparison is treated as a one-off project.
  • A threshold change is deployed without a re-test.
  • No one owns the trigger list.

Questions to put to the supplier

  1. What would make this comparison out of date?
  2. Who is responsible for re-running it, and by when?

How this is used in the kit

P3-17 becomes one row of the comparison register, with an owner, a status and the evidence named above. A status of met asks for the artefact and its date, and the free check uses the same row as an evidence question, so the page and the register share one vocabulary.

Source for this page

Retrieved 2026-10-21. P3-17 is our statement of WG 5 N3928, clause 4.4.1.3; the DIS body is not public, so no DIS clause number is claimed.