How to develop a Statement of Applicability according to ISO 27001

SoA - Statement of Applicability - ISO 27001

The Statement of Applicability (SoA) is a central, mandatory part of the ISO 27001 standard for Information Security Management Systems. Your SoA describes what controls are part of your ISMS.

In this guide you will learn:

  • why the Statement of Applicability is important
  • how to develop it
  • about some tools to help you develop your Statement of Applicability.
   

Try NorthGRC

NorthGRC has since 2002 helped enterprises manage complex regulatory mandates and operational risk. We aid businesses with compliance expertise by offering consultation and our full-featured Governance, Risk, and Compliance platform to everyone who faces requirements within ISO 27001/2, NIS2, GDPR, DORA, and many other standards.

© 2024 NorthGRC   -   Privacy policy
[fa icon="chevron-up"]