.png)
ISO27001 has 93 Annex A Controls which you need to assess and decide if they are applicable to your organisation.
Once you know what assets you have to protect, these controls will help you determine what to implement (applicable) and what to leave alone (not applicable).
All 93 controls are contained within the SoA, which is one of the many mandatory documents you need for ISO27001.
Statement of Applicability (SoA)
Hey, we're not going to go all 'legal' on you here... that's not our style. But this is our Intellectual Property, and we'd prefer it if you didn't go sharing this with other people who haven't spent the money and bought a copy.
Of course, we can't really stop you... But are you that kind of person? We don't think you are. So if you want to tell people about your new found super power of ISO27001-Awesomeness, great... just don't give it away for free!