Statement of Applicability
Annex A decisions, coverage and versioned snapshots.
Maintain ISO 27001 Annex A applicability decisions with implementation status and justification. Review decision coverage and save versioned snapshots of the organisation-wide register.
What you can do
Record applicability decisions
Prepare Annex A entries and record whether each control is applicable, not applicable, compensating or planned, alongside implementation status and justification.
Review coverage and versions
View recorded decisions and missing mandatory controls, review saved versions and export the register.
Save a signed version
Select an active organisation user as the recorded approver, add a note and save a snapshot through Sign & Version.
Who uses it
- ISMS and control owners
- Compliance teams preparing an SoA
Things to know
- The organisation-wide register and the ISO 27001 programme workspace store separate decisions. Catalogue and write actions require the relevant standard subscription and licence attestation. Sign & Version records the selected approver without a separate confirmation from that person; same-person approval uses a reasoned, audited break-glass path. Applicability coverage does not establish control effectiveness.