How should a team prepare for ISO/IEC 27566-3?
Fix the object of comparison, name the decision it feeds, collect current practice statements, choose the indicator and threshold, and put the key date and a review date in the calendar. All of that can be done while the DIS text is still in ballot, and it does not depend on the final wording.
Start with the objects and the decision
Write one sentence per system or component, with its version and supplier. Then write the decision the comparison supports and the cost of a wrong answer. Those two pages decide the indicator, the sample and the report.
Collect the practice statements
The public working draft makes the practice statement the core benchmark. Ask every supplier for the current statement before you design a test, and record its version date. A test against an old statement describes a service that no longer exists.
Set the method before the result
Choose the accuracy measure, the equality groups, the attack potential and the sample size. Write the evidence list and the pass mark down. An evaluation designed after the results is a rationalisation.
Put the date in the programme
The ballot closes on 4 December 2026. This site uses 14 September 2027 as a planning estimate, taken from the stage and the BSI timeline. Set the review date, the re-run triggers and the owner, and label the planning date as an estimate.
Not legal advice; does not certify. The draft is a guidance document in ballot. Check the published text before a decision depends on it.