ISO 27001 Statement of Applicability (SoA) Template

Save hours of work with this pre-built, audit-tested Statement of Applicability (SoA) template.

This editable Excel file includes:

• All 93 Annex A controls from ISO 27001:2022

• Control titles, objectives, and example implementations

• Built-in conditional formatting to help assess implementation status and effectiveness

• Space to record control justifications, including example wording that has passed external audits

• Columns for information security attributes to guide best-practice control selection

• A layout that’s 99% complete, just tailor it to your business

• Includes a user guide to help you fill in the few blanks.

Whether you’re building an SoA from scratch or reviewing your current one, this template gives you a practical head start.