| Work item | Question | Equiv. Num. | Status | Timing | Approval process | Version | Liaison relationship | Subject / Title | Priority |
| X.1053rev | Q3/17 | | Under study | 2026-06 | AAP | Rev. | - | Information security controls based on ITU-T X.1051 for small and medium-sized telecommunication organizations | Medium |
| X.1058rev | Q3/17 | ISO/IEC 29151 | Under study | 2025-10 | TAP | Rev. | ISO/IEC JTC 1/SC 27/WG 5 | Information security, cybersecurity and privacy protection — Code of practice for personally identifiable information protection | Medium |
| X.1060rev | Q3/17 | | Under study | 2025-12 | AAP | Rev. | - | Framework for the creation and operation of a cyber defence/security centre | Medium |
| X.1062 (ex X.shcd) | Q3/17 | | Under study | 2025-04 | TAP | New | - | Framework for Security Human Capability Development | Medium |
| X.C2M2 | Q3/17 | | Under study | 2026 Q4 | AAP | New | - | Cybersecurity capability maturity model for telecommunication organisations | Medium |
| X.cdc-csirt | Q3/17 | | Under study | 2026-Q4 | AAP | New | FIRST | Relationship between Cyber Defence/Security Center and Computer Security Incident Response Team | Medium |
| X.gsm-cdc | Q3/17 | | Under study | 2026-Q4 | AAP | New | - | Guidelines on Security Metrics for CDC | Medium |
| X.srm-sup (ex X.rm-sup) | Q3/17 | | Under study | 2026-Q4 | TAP | New | ISO/IEC JTC 1/SC 27 WG4 & WG5 | Security risk management on software supply chain for telecommunication organizations | Medium |
| X.sup-cdc | Q3/17 | | Under study | 2025-04 | Agreement | New | - | Supplement to X.1060: X.1060 Tutorial material | Medium |
