{"id":1833,"date":"2019-05-30T13:05:59","date_gmt":"2019-05-30T12:05:59","guid":{"rendered":"https:\/\/www.imsm.com\/ie\/?p=1833"},"modified":"2021-05-17T13:56:11","modified_gmt":"2021-05-17T12:56:11","slug":"what-is-the-statement-of-applicability-for-iso-27001","status":"publish","type":"post","link":"https:\/\/www.imsm.com\/ie\/news\/what-is-the-statement-of-applicability-for-iso-27001\/","title":{"rendered":"What is the statement of applicability for ISO 27001?"},"content":{"rendered":"<p>When researching the steps you need to take for <a href=\"https:\/\/www.imsm.com\/ie\/iso-27001-2\/\">ISO 27001<\/a> certification, you may have stumbled upon the term \u2018statement of applicability\u2019. If the terminology of the ISO has got you scratching your head, we\u2019re here to do all the hard work and explain what the statement of applicability is and why it\u2019s important.<\/p>\n<h3>What is the statement of applicability for ISO 27001?<\/h3>\n<p>Part of the risk assessment and Information Security Management Systems (ISMS &#8211; not to be confused with IMSM!) component of ISO 27001, it\u2019s a framework of policies surrounding the legality, physicality and technicality of your cyber security systems. Completion of the statement of applicability (SoA) is a requirement of the ISO: a document you have to develop, prepare and submit as part of your steps toward best practice data management systems.<\/p>\n<p>There are no exact rules for developing your SoA as ISO 27001 recognises that details of cyber security are unique to your business\u2019 requirements, however you must include:<\/p>\n<ul>\n<li>An explanation of the elements of the security controls you\u2019ve chosen to mitigate risks as well as justification for why you\u2019ve included them. These are decided through performing a gap analysis and risk assessment in the starting stages of your ISO 27001 certification.<\/li>\n<li>Whether the chosen controls have been implemented. If they haven\u2019t, you must state when you intend to implement them.<\/li>\n<li>If you\u2019ve excluded any part of ISO 27001\u2019s Annex A &#8211; a list of 133 controls and explanations of what they are and what they do &#8211; and why. Note: clauses 4-8 are mandatory.<\/li>\n<\/ul>\n<h3>Why is the statement of applicability for ISO 27001 important?<\/h3>\n<ul>\n<li>Your SoA is your roadmap to smooth and effective ISO 27001 certification. It\u2019s a comprehensive document that identifies and categorises elements of ISMS by product and department as well as a host of other criteria.<\/li>\n<li>In ISO certification, documentation is crucial. Your SoA provides physical proof to your auditor that you\u2019re taking steps to achieve ISO 27001 certification by laying out your company\u2019s legal, statutory, regulator and contractual commitments.<\/li>\n<li>It flags any controls implemented for reasons other than risk assessment.<\/li>\n<li>Your SoA assists in the continual improvement of your digital security as it gives you a framework to be able to compare what\u2019s working and what\u2019s not. It will then give you scope in which to update.<\/li>\n<li>If a data breach occurs, the controls you put into place will be justified. Your compliance will be proven, giving you confidence in your next steps.<\/li>\n<\/ul>\n<h3>Want to find out more about how ISO 27001 can help your business? Download the free guide.<\/h3>\n<p><!--HubSpot Call-to-Action Code --><span id=\"hs-cta-wrapper-edcc4cc4-9eb0-4902-a150-32cef28ddfe8\" class=\"hs-cta-wrapper\"><span id=\"hs-cta-edcc4cc4-9eb0-4902-a150-32cef28ddfe8\" class=\"hs-cta-node hs-cta-edcc4cc4-9eb0-4902-a150-32cef28ddfe8\"><!-- [if lte IE 8]>\n\n\n<div id=\"hs-cta-ie-element\"><\/div>\n\n\n<![endif]--><a href=\"https:\/\/cta-redirect.hubspot.com\/cta\/redirect\/3038466\/edcc4cc4-9eb0-4902-a150-32cef28ddfe8\"><img loading=\"lazy\" decoding=\"async\" id=\"hs-cta-img-edcc4cc4-9eb0-4902-a150-32cef28ddfe8\" class=\"hs-cta-img aligncenter\" style=\"border-width: 0px;\" src=\"https:\/\/no-cache.hubspot.com\/cta\/default\/3038466\/edcc4cc4-9eb0-4902-a150-32cef28ddfe8.png\" alt=\"ISO 27001 Guide A\" width=\"700\" height=\"266\" \/><\/a><\/span><script charset=\"utf-8\" src=\"https:\/\/js.hscta.net\/cta\/current.js\"><\/script><script type=\"text\/javascript\"> hbspt.cta.load(3038466, 'edcc4cc4-9eb0-4902-a150-32cef28ddfe8', {}); <\/script><\/span><\/p>\n","protected":false},"excerpt":{"rendered":"<p>When researching the steps you need to take for ISO 27001 certification, you may have stumbled upon the term \u2018statement [&hellip;]<\/p>\n","protected":false},"author":25,"featured_media":3560,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"content-type":"","inline_featured_image":false,"pgc_sgb_lightbox_settings":"","footnotes":""},"categories":[1],"tags":[],"class_list":["post-1833","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-uncategorised"],"acf":[],"yoast_head":"<!-- This site is optimized with the Yoast SEO plugin v23.9 - https:\/\/yoast.com\/wordpress\/plugins\/seo\/ -->\n<title>What is the statement of applicability for ISO 27001? - IMSM IE<\/title>\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<link rel=\"canonical\" href=\"https:\/\/www.imsm.com\/ie\/news\/what-is-the-statement-of-applicability-for-iso-27001\/\" \/>\n<meta property=\"og:locale\" content=\"en_GB\" \/>\n<meta property=\"og:type\" content=\"article\" \/>\n<meta property=\"og:title\" content=\"What is the statement of applicability for ISO 27001? - IMSM IE\" \/>\n<meta property=\"og:description\" content=\"When researching the steps you need to take for ISO 27001 certification, you may have stumbled upon the term \u2018statement [&hellip;]\" \/>\n<meta property=\"og:url\" content=\"https:\/\/www.imsm.com\/ie\/news\/what-is-the-statement-of-applicability-for-iso-27001\/\" \/>\n<meta property=\"og:site_name\" content=\"IMSM IE\" \/>\n<meta property=\"article:published_time\" content=\"2019-05-30T12:05:59+00:00\" \/>\n<meta property=\"article:modified_time\" content=\"2021-05-17T12:56:11+00:00\" \/>\n<meta property=\"og:image\" content=\"https:\/\/www.imsm.com\/ie\/wp-content\/uploads\/sites\/5\/2019\/05\/What-is-the-statement-of-applicability-for-ISO-27001.jpg\" \/>\n\t<meta property=\"og:image:width\" content=\"1024\" \/>\n\t<meta property=\"og:image:height\" content=\"731\" \/>\n\t<meta property=\"og:image:type\" content=\"image\/jpeg\" \/>\n<meta name=\"author\" content=\"amywright\" \/>\n<meta name=\"twitter:card\" content=\"summary_large_image\" \/>\n<meta name=\"twitter:label1\" content=\"Written by\" \/>\n\t<meta name=\"twitter:data1\" content=\"amywright\" \/>\n\t<meta name=\"twitter:label2\" content=\"Estimated reading time\" \/>\n\t<meta name=\"twitter:data2\" content=\"2 minutes\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\"@context\":\"https:\/\/schema.org\",\"@graph\":[{\"@type\":\"WebPage\",\"@id\":\"https:\/\/www.imsm.com\/ie\/news\/what-is-the-statement-of-applicability-for-iso-27001\/\",\"url\":\"https:\/\/www.imsm.com\/ie\/news\/what-is-the-statement-of-applicability-for-iso-27001\/\",\"name\":\"What is the statement of applicability for ISO 27001? - IMSM IE\",\"isPartOf\":{\"@id\":\"https:\/\/www.imsm.com\/ie\/#website\"},\"primaryImageOfPage\":{\"@id\":\"https:\/\/www.imsm.com\/ie\/news\/what-is-the-statement-of-applicability-for-iso-27001\/#primaryimage\"},\"image\":{\"@id\":\"https:\/\/www.imsm.com\/ie\/news\/what-is-the-statement-of-applicability-for-iso-27001\/#primaryimage\"},\"thumbnailUrl\":\"https:\/\/www.imsm.com\/ie\/wp-content\/uploads\/sites\/5\/2019\/05\/What-is-the-statement-of-applicability-for-ISO-27001.jpg\",\"datePublished\":\"2019-05-30T12:05:59+00:00\",\"dateModified\":\"2021-05-17T12:56:11+00:00\",\"author\":{\"@id\":\"https:\/\/www.imsm.com\/ie\/#\/schema\/person\/990a6ba5dfd82cda313e2dd00eb363b0\"},\"breadcrumb\":{\"@id\":\"https:\/\/www.imsm.com\/ie\/news\/what-is-the-statement-of-applicability-for-iso-27001\/#breadcrumb\"},\"inLanguage\":\"en-GB\",\"potentialAction\":[{\"@type\":\"ReadAction\",\"target\":[\"https:\/\/www.imsm.com\/ie\/news\/what-is-the-statement-of-applicability-for-iso-27001\/\"]}]},{\"@type\":\"ImageObject\",\"inLanguage\":\"en-GB\",\"@id\":\"https:\/\/www.imsm.com\/ie\/news\/what-is-the-statement-of-applicability-for-iso-27001\/#primaryimage\",\"url\":\"https:\/\/www.imsm.com\/ie\/wp-content\/uploads\/sites\/5\/2019\/05\/What-is-the-statement-of-applicability-for-ISO-27001.jpg\",\"contentUrl\":\"https:\/\/www.imsm.com\/ie\/wp-content\/uploads\/sites\/5\/2019\/05\/What-is-the-statement-of-applicability-for-ISO-27001.jpg\",\"width\":1024,\"height\":731,\"caption\":\"What is the statement of applicability for ISO 27001\"},{\"@type\":\"BreadcrumbList\",\"@id\":\"https:\/\/www.imsm.com\/ie\/news\/what-is-the-statement-of-applicability-for-iso-27001\/#breadcrumb\",\"itemListElement\":[{\"@type\":\"ListItem\",\"position\":1,\"name\":\"Home\",\"item\":\"https:\/\/www.imsm.com\/ie\/\"},{\"@type\":\"ListItem\",\"position\":2,\"name\":\"What is the statement of applicability for ISO 27001?\"}]},{\"@type\":\"WebSite\",\"@id\":\"https:\/\/www.imsm.com\/ie\/#website\",\"url\":\"https:\/\/www.imsm.com\/ie\/\",\"name\":\"IMSM IE\",\"description\":\"\",\"potentialAction\":[{\"@type\":\"SearchAction\",\"target\":{\"@type\":\"EntryPoint\",\"urlTemplate\":\"https:\/\/www.imsm.com\/ie\/?s={search_term_string}\"},\"query-input\":{\"@type\":\"PropertyValueSpecification\",\"valueRequired\":true,\"valueName\":\"search_term_string\"}}],\"inLanguage\":\"en-GB\"},{\"@type\":\"Person\",\"@id\":\"https:\/\/www.imsm.com\/ie\/#\/schema\/person\/990a6ba5dfd82cda313e2dd00eb363b0\",\"name\":\"amywright\",\"image\":{\"@type\":\"ImageObject\",\"inLanguage\":\"en-GB\",\"@id\":\"https:\/\/www.imsm.com\/ie\/#\/schema\/person\/image\/\",\"url\":\"https:\/\/secure.gravatar.com\/avatar\/b9a7d7e0f867d04d3ec6ad1557548ab8?s=96&d=mm&r=g\",\"contentUrl\":\"https:\/\/secure.gravatar.com\/avatar\/b9a7d7e0f867d04d3ec6ad1557548ab8?s=96&d=mm&r=g\",\"caption\":\"amywright\"},\"url\":\"https:\/\/www.imsm.com\/ie\/news\/author\/amywright\/\"}]}<\/script>\n<!-- \/ Yoast SEO plugin. -->","yoast_head_json":{"title":"What is the statement of applicability for ISO 27001? - IMSM IE","robots":{"index":"index","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"canonical":"https:\/\/www.imsm.com\/ie\/news\/what-is-the-statement-of-applicability-for-iso-27001\/","og_locale":"en_GB","og_type":"article","og_title":"What is the statement of applicability for ISO 27001? - IMSM IE","og_description":"When researching the steps you need to take for ISO 27001 certification, you may have stumbled upon the term \u2018statement [&hellip;]","og_url":"https:\/\/www.imsm.com\/ie\/news\/what-is-the-statement-of-applicability-for-iso-27001\/","og_site_name":"IMSM IE","article_published_time":"2019-05-30T12:05:59+00:00","article_modified_time":"2021-05-17T12:56:11+00:00","og_image":[{"width":1024,"height":731,"url":"https:\/\/www.imsm.com\/ie\/wp-content\/uploads\/sites\/5\/2019\/05\/What-is-the-statement-of-applicability-for-ISO-27001.jpg","type":"image\/jpeg"}],"author":"amywright","twitter_card":"summary_large_image","twitter_misc":{"Written by":"amywright","Estimated reading time":"2 minutes"},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"WebPage","@id":"https:\/\/www.imsm.com\/ie\/news\/what-is-the-statement-of-applicability-for-iso-27001\/","url":"https:\/\/www.imsm.com\/ie\/news\/what-is-the-statement-of-applicability-for-iso-27001\/","name":"What is the statement of applicability for ISO 27001? - IMSM IE","isPartOf":{"@id":"https:\/\/www.imsm.com\/ie\/#website"},"primaryImageOfPage":{"@id":"https:\/\/www.imsm.com\/ie\/news\/what-is-the-statement-of-applicability-for-iso-27001\/#primaryimage"},"image":{"@id":"https:\/\/www.imsm.com\/ie\/news\/what-is-the-statement-of-applicability-for-iso-27001\/#primaryimage"},"thumbnailUrl":"https:\/\/www.imsm.com\/ie\/wp-content\/uploads\/sites\/5\/2019\/05\/What-is-the-statement-of-applicability-for-ISO-27001.jpg","datePublished":"2019-05-30T12:05:59+00:00","dateModified":"2021-05-17T12:56:11+00:00","author":{"@id":"https:\/\/www.imsm.com\/ie\/#\/schema\/person\/990a6ba5dfd82cda313e2dd00eb363b0"},"breadcrumb":{"@id":"https:\/\/www.imsm.com\/ie\/news\/what-is-the-statement-of-applicability-for-iso-27001\/#breadcrumb"},"inLanguage":"en-GB","potentialAction":[{"@type":"ReadAction","target":["https:\/\/www.imsm.com\/ie\/news\/what-is-the-statement-of-applicability-for-iso-27001\/"]}]},{"@type":"ImageObject","inLanguage":"en-GB","@id":"https:\/\/www.imsm.com\/ie\/news\/what-is-the-statement-of-applicability-for-iso-27001\/#primaryimage","url":"https:\/\/www.imsm.com\/ie\/wp-content\/uploads\/sites\/5\/2019\/05\/What-is-the-statement-of-applicability-for-ISO-27001.jpg","contentUrl":"https:\/\/www.imsm.com\/ie\/wp-content\/uploads\/sites\/5\/2019\/05\/What-is-the-statement-of-applicability-for-ISO-27001.jpg","width":1024,"height":731,"caption":"What is the statement of applicability for ISO 27001"},{"@type":"BreadcrumbList","@id":"https:\/\/www.imsm.com\/ie\/news\/what-is-the-statement-of-applicability-for-iso-27001\/#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https:\/\/www.imsm.com\/ie\/"},{"@type":"ListItem","position":2,"name":"What is the statement of applicability for ISO 27001?"}]},{"@type":"WebSite","@id":"https:\/\/www.imsm.com\/ie\/#website","url":"https:\/\/www.imsm.com\/ie\/","name":"IMSM IE","description":"","potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/www.imsm.com\/ie\/?s={search_term_string}"},"query-input":{"@type":"PropertyValueSpecification","valueRequired":true,"valueName":"search_term_string"}}],"inLanguage":"en-GB"},{"@type":"Person","@id":"https:\/\/www.imsm.com\/ie\/#\/schema\/person\/990a6ba5dfd82cda313e2dd00eb363b0","name":"amywright","image":{"@type":"ImageObject","inLanguage":"en-GB","@id":"https:\/\/www.imsm.com\/ie\/#\/schema\/person\/image\/","url":"https:\/\/secure.gravatar.com\/avatar\/b9a7d7e0f867d04d3ec6ad1557548ab8?s=96&d=mm&r=g","contentUrl":"https:\/\/secure.gravatar.com\/avatar\/b9a7d7e0f867d04d3ec6ad1557548ab8?s=96&d=mm&r=g","caption":"amywright"},"url":"https:\/\/www.imsm.com\/ie\/news\/author\/amywright\/"}]}},"_links":{"self":[{"href":"https:\/\/www.imsm.com\/ie\/wp-json\/wp\/v2\/posts\/1833","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.imsm.com\/ie\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.imsm.com\/ie\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.imsm.com\/ie\/wp-json\/wp\/v2\/users\/25"}],"replies":[{"embeddable":true,"href":"https:\/\/www.imsm.com\/ie\/wp-json\/wp\/v2\/comments?post=1833"}],"version-history":[{"count":3,"href":"https:\/\/www.imsm.com\/ie\/wp-json\/wp\/v2\/posts\/1833\/revisions"}],"predecessor-version":[{"id":3561,"href":"https:\/\/www.imsm.com\/ie\/wp-json\/wp\/v2\/posts\/1833\/revisions\/3561"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/www.imsm.com\/ie\/wp-json\/wp\/v2\/media\/3560"}],"wp:attachment":[{"href":"https:\/\/www.imsm.com\/ie\/wp-json\/wp\/v2\/media?parent=1833"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.imsm.com\/ie\/wp-json\/wp\/v2\/categories?post=1833"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.imsm.com\/ie\/wp-json\/wp\/v2\/tags?post=1833"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}