·10 min read
How to write an ISO 27001 Statement of Applicability: step by step, with a worked example and a template
The Statement of Applicability is not a list of controls with a yes or a no. It records what you decided when you treated your risks: which controls you need, why, whether they are in place and why you exclude the rest. Five steps, a worked example with ACME and a template.
ComplianceISO 27001
