ISO 27001 Statement of Applicability
Maintain a living ISO 27001:2022 Statement of Applicability: mark each of the 93 Annex-A controls as applicable or not, record the justification and evidence, and track review cadence — exportable as the SoA your certification body expects.
Self-assessment
Runs entirely in your browser — nothing is uploaded; your answers are saved only on this device.
Frequently asked
How many controls?
All 93 Annex-A controls from ISO/IEC 27001:2022, grouped by theme (organizational, people, physical, technological).
Can I export it?
Yes — export the full SoA to CSV/PDF for your ISMS documentation.