Statement of Applicability Template
Annex A control selection and justification.
What This Policy Covers
Required Sections
A compliant Statement of Applicability for ISO 27001 must include the following5 sections. Each section addresses a specific control requirement that auditors will review.
Introduction
Purpose and scope.
Organizational Controls
A.5 controls.
People Controls
A.6 controls.
Physical Controls
A.7 controls.
Technological Controls
A.8 controls.
Generate a Customized Version
This template shows the required structure. PoliWriter generates a fully customized Statement of Applicability that references your actual cloud providers, identity systems, tools, and team practices — ready for auditor review.
Policy Details
Other ISO 27001 Templates
Top-level information security management system policy.
Risk management methodology aligned with ISO 27005.
Defines access control requirements aligned with ISO 27001 Annex A controls A.5.15 and A.8.2.
Information asset inventory and classification aligned with ISO 27001 controls A.5.9 and A.5.10.
Information security incident management aligned with ISO 27001 controls A.5.24 and A.5.25.
Information security aspects of business continuity aligned with ISO 27001 controls A.5.29 and A.5.30.
Managing information security risks in supplier relationships per ISO 27001 controls A.5.19 and A.5.20.
Cryptographic controls and key management aligned with ISO 27001 control A.8.24.