ISO Management Systems
Statement of Applicability
The document recording, for every Annex A control, whether it applies, why, and whether it is implemented. Required by ISO/IEC 27001 clause 6.1.3.
Why it matters: it is the first document a certification body reads at Stage 1, and a weak one is the most common reason Stage 1 goes badly.
Related terms
Questions about how this applies to you? Book a free 45 minute diagnostic.