Get your free ISO 27001 Statement of Applicability template
Document every Annex A control decision in one place, ready for your Stage 1 and Stage 2 certification audits.
Our SOA template includes:
- All 93 ISO/IEC 27001:2022 Annex A controls, grouped by theme
- Columns for applicability, exclusion justification, implementation status, and references
- Worked examples showing how to justify inclusions and exclusions
- Revision history tab for version control and approvals
- Audit-friendly Excel format, easy to customize
Get the template
Fill in the form and your download link appears right away.
See what you get
Build an auditor-ready Statement of Applicability
The Statement of Applicability is one of the first documents an ISO 27001 auditor asks for. It records which Annex A controls apply to your ISMS, why any are excluded, and whether each one is implemented. This template lists all 93 controls from ISO/IEC 27001:2022 with their descriptions, so your team can record each decision, link it to the policy or procedure that proves it, and keep it current through surveillance audits.
Need help completing it? Our ISO 27001 consultants build the SOA from your risk treatment plan and stand with you through certification.
Trusted by teams that passed their audits
"They performed our initial internal audit and walked us through both the Stage 1 and Stage 2 audits all the way to certification. Their practical, expert-led support turned a daunting process into a clear, achievable path."
"Nexeris played a key role in helping us prepare for ISO 27001 and ISO 27701 certification under an aggressive timeline. They were proactive in coordinating with our external audit firm, and willing to meet tight deadlines without sacrificing quality."
"The Nexeris team worked side by side with us in a professional manner and added great value through their efforts. They are organized, efficient, and on top of their game; a pleasure to work with."