@honze_net @jwildeboer This was already enforced by law though, and this decision seems to be about a case where adhering to the standard was required by law. So there's an explicit reference, hence the standard should be open.

ISO 27001 practices are not required by law, it's most often a requirement of – and regulated by – industry partners. So there's no explicit reference that will open the standard to the public.