Skip to content

Statement of Applicability (SoA)

A required ISO 27001 document listing all Annex A controls, indicating which are applicable, which are implemented, and justification for any exclusions.

Information Security

Related Terms

Related Frameworks

Frequently Asked Questions

What is Statement of Applicability (SoA)?
A required ISO 27001 document listing all Annex A controls, indicating which are applicable, which are implemented, and justification for any exclusions.
Why is Statement of Applicability (SoA) important for compliance?
Statement of Applicability (SoA) is a key concept in Information Security. Understanding statement of applicability (soa) helps organizations meet regulatory requirements, reduce risk, and demonstrate due diligence during audits. Our compliance platform covers this concept across 692 frameworks with 819,000+ control mappings.
What concepts are related to Statement of Applicability (SoA)?
Key concepts related to Statement of Applicability (SoA) include ISO 27001, Annex A. Understanding these interconnected concepts provides a more comprehensive view of Information Security requirements and helps organizations build holistic compliance programs.
Where can I learn more about Statement of Applicability (SoA)?
Explore our compliance framework pages to see how statement of applicability (soa) applies across different standards and regulations. Our implementation guides provide step-by-step guidance, and the compliance platform offers AI-powered analysis of how this concept maps across 692 frameworks.

See how Statement of Applicability (SoA) applies across compliance frameworks

Our AI-powered platform maps 692 frameworks with 819,000+ control connections. Explore how this concept is addressed across standards.