Definition
In ISO/IEC 27001 practice, a Statement of Applicability documents which information security controls are applicable (and which are not) with justifications, based on risk assessment and treatment decisions.
Do not treat a copied control list as an SoA without risk linkage.
Consultancy vs certification
Beyond Carbon provides ISO consultancy, implementation support, documentation assistance, and audit preparation support. Independent certification bodies issue certificates after successful certification audits. Beyond Carbon does not present itself as a certification body or accreditation body.
Sources & References
FAQs
The SoA concept is specific to ISMS practice under ISO/IEC 27001. Other standards have different documented information needs.
What happens after you submit?
We do not promise minute-level response times unless operationally guaranteed.
- We received your request
- Your requirements are reviewed
- A consultant contacts you
- Scope is clarified
- Next steps are recommended
Ready to strengthen your management system?
Tell us about your organization, scope, and requirements. We’ll help clarify the appropriate next step.