Sources
What was read, when, and where to check it
Each source below was read on the date shown. The ISO record is the authority for the stage and the dates. The held frameworks are the authority for every requirement stated on this site.
| Source | Read |
|---|---|
| ISO/IEC DIS 20996 record and lifecycle | 2026-10-20 |
| ISO 22301:2019 held framework page | 2026-10-20 |
| EIOPA Guidelines on Outsourcing to Cloud Service Providers | 2026-10-20 |
| UK FCA/PRA Operational Resilience Framework | 2026-10-20 |
Not held, and stated as such
- The ISO/IEC DIS 20996 draft text, its clause list and its annexes. ISO sells the draft; it is not public.
- The ballot result. ISO has not recorded 40.92, 40.93 or 40.99 as at 2026-10-20.
- The Digital Operational Resilience Act and APRA's operational risk standard, which are named on the market page as obligations and not stated.
How to check a line
Every clause page carries its citation and a link to the held framework page. If a link does not open, write to support@theartofservice.com with the page address and we will correct it and record the correction in the change log.
The rules this is built from
Every requirement on this site is written from a held rule and points to the clause it came from. Nothing is invented while you wait.
- Read from the real rules, not invented
- 57 official requirements behind it
- Cross-checked against 7 continuity and resilience frameworks
- Check any line yourself
How the record is made and where each source comes from. The continuity baseline is ISO 22301:2019, read here.