{"title":"Home page","description":null,"products":[{"product_id":"statement-of-applicability-pack","title":"ISO 27001 Statement of Applicability Pack","description":"\u003ch1 class=\"PDq2pG_selectionAnchorContainer\"\u003eISO 27001 Statement of Applicability Toolkit\u003cspan class=\"PDq2pG_selectionAnchor\"\u003e\u003c\/span\u003e\n\u003c\/h1\u003e\n\u003ch2\u003eBuild and Maintain a Structured Statement of Applicability\u003c\/h2\u003e\n\u003cp\u003eThe \u003cstrong\u003eStatement of Applicability (SoA)\u003c\/strong\u003e is a central component of an ISO\/IEC 27001 Information Security Management System, connecting an organisation's information security risks and treatment decisions with the controls determined to be applicable.\u003c\/p\u003e\n\u003cp\u003eThe \u003cstrong\u003eVerivexa ISO 27001 Statement of Applicability Toolkit\u003c\/strong\u003e provides a structured set of templates and practical guidance designed to help organisations develop, justify, maintain and review their Statement of Applicability.\u003c\/p\u003e\n\u003cp\u003eRather than starting with an empty spreadsheet, the toolkit helps establish the reasoning and supporting process behind the SoA.\u003c\/p\u003e\n\u003cp\u003e\u003cstrong\u003e£69 | 7 practical resources | Word, Excel \u0026amp; PDF | Immediate digital delivery\u003c\/strong\u003e\u003c\/p\u003e\n\u003ch2\u003eMore Than an SoA Template\u003c\/h2\u003e\n\u003cp\u003eA Statement of Applicability shouldn't simply be a list of controls.\u003c\/p\u003e\n\u003cp\u003eOrganisations need to determine which controls are applicable to their circumstances, document appropriate justification for inclusion or exclusion, consider their relationship with information security risks and treatment decisions, and keep the SoA appropriately maintained.\u003c\/p\u003e\n\u003cp\u003eThe Verivexa toolkit provides supporting methodology and guidance alongside the working SoA resource to help organisations approach this process in a structured way.\u003c\/p\u003e\n\u003ch2\u003eWhat's Included?\u003c\/h2\u003e\n\u003ch3\u003eStatement of Applicability\u003c\/h3\u003e\n\u003cp\u003e\u003cstrong\u003eStatement of Applicability Workbook\u003c\/strong\u003e\u003cbr\u003eAn editable Excel resource providing the working foundation for developing and maintaining your organisation's Statement of Applicability.\u003c\/p\u003e\n\u003ch3\u003eApplicability \u0026amp; Justification\u003c\/h3\u003e\n\u003cp\u003e\u003cstrong\u003eSoA Control Applicability \u0026amp; Justification Guide\u003c\/strong\u003e\u003cbr\u003ePractical guidance to support decisions about control applicability and the development of appropriate organisation-specific justifications.\u003c\/p\u003e\n\u003cp\u003e\u003cstrong\u003eStatement of Applicability Implementation Guidance\u003c\/strong\u003e\u003cbr\u003eSupporting guidance explaining how to approach the SoA as part of the wider ISMS implementation process.\u003c\/p\u003e\n\u003ch3\u003eReview \u0026amp; Certification Readiness\u003c\/h3\u003e\n\u003cp\u003e\u003cstrong\u003eSoA Review \u0026amp; Audit Readiness Guide\u003c\/strong\u003e\u003cbr\u003eHelps organisations review their Statement of Applicability and prepare to demonstrate the rationale and supporting implementation behind their decisions.\u003c\/p\u003e\n\u003ch3\u003eRisk Management Integration\u003c\/h3\u003e\n\u003cp\u003e\u003cstrong\u003eInformation Security Risk Assessment Methodology\u003c\/strong\u003e\u003cbr\u003eProvides a structured approach to information security risk assessment, helping establish the risk-management context that informs control and treatment decisions.\u003c\/p\u003e\n\u003cp\u003e\u003cstrong\u003eInformation Security Risk Treatment Policy\u003c\/strong\u003e\u003cbr\u003eSupports the relationship between identified information security risks, treatment decisions and the controls selected as part of the ISMS.\u003c\/p\u003e\n\u003ch3\u003eGetting Started\u003c\/h3\u003e\n\u003cp\u003e\u003cstrong\u003eSTART HERE – Statement of Applicability Pack\u003c\/strong\u003e\u003cbr\u003eIntroduces the toolkit and explains how the individual resources fit together.\u003c\/p\u003e\n\u003ch2\u003eRisk → Treatment → Controls → SoA → Implementation → Evidence\u003c\/h2\u003e\n\u003cp\u003eThe Statement of Applicability should not operate in isolation.\u003c\/p\u003e\n\u003cp\u003eThe Verivexa toolkit is designed to help organisations understand the relationship between their information security risks, treatment decisions, applicable controls and the evidence generated through implementation.\u003c\/p\u003e\n\u003cp\u003eThis helps make the SoA a meaningful part of the ISMS rather than simply a document created for certification.\u003c\/p\u003e\n\u003ch2\u003eWho Is This Toolkit For?\u003c\/h2\u003e\n\u003cp\u003eThe ISO 27001 Statement of Applicability Toolkit may be particularly useful for:\u003c\/p\u003e\n\u003cul\u003e\n\u003cli\u003eOrganisations implementing ISO 27001\u003c\/li\u003e\n\u003cli\u003eBusinesses preparing for certification\u003c\/li\u003e\n\u003cli\u003eOrganisations developing their first SoA\u003c\/li\u003e\n\u003cli\u003eInformation security and compliance teams\u003c\/li\u003e\n\u003cli\u003eOrganisations reviewing or improving an existing SoA\u003c\/li\u003e\n\u003cli\u003eConsultants supporting ISO 27001 implementation\u003c\/li\u003e\n\u003c\/ul\u003e\n\u003ch2\u003eNeed Wider ISO 27001 Implementation Support?\u003c\/h2\u003e\n\u003cp\u003eThe Statement of Applicability Toolkit is designed as a focused standalone package for organisations that already have other elements of their ISMS in place.\u003c\/p\u003e\n\u003cp\u003eFor broader implementation support, Statement of Applicability resources are also incorporated within selected Verivexa ISO 27001 packages.\u003c\/p\u003e\n\u003cp\u003e\u003cstrong\u003e\u003ca href=\"\/pages\/compare-iso-27001-packages\" target=\"_blank\"\u003eCompare ISO 27001 Packages →\u003c\/a\u003e\n\u003c\/strong\u003e\u003c\/p\u003e\n\u003cp\u003e\u003cstrong\u003e\u003ca href='\/pages\/iso-27001-landing-pagetarget=\"_blank\"'\u003eExplore ISO 27001 Toolkits →\u003c\/a\u003e\n\u003c\/strong\u003e\u003c\/p\u003e\n\u003ch2\u003eImportant Information\u003c\/h2\u003e\n\u003cp\u003eVerivexa provides independently developed templates, implementation resources and guidance designed to support ISO management system implementation.\u003c\/p\u003e\n\u003cp\u003eThe organisation remains responsible for determining the controls appropriate to its risks, circumstances and applicable obligations.\u003c\/p\u003e\n\u003cp\u003ePurchasing or using the toolkit does not constitute ISO certification or guarantee conformity.\u003c\/p\u003e","brand":"Verivexa","offers":[{"title":"Default Title","offer_id":60433516921166,"sku":null,"price":69.0,"currency_code":"GBP","in_stock":true}],"thumbnail_url":"\/\/cdn.shopify.com\/s\/files\/1\/1067\/9189\/5374\/files\/ISO27001StatementofApplicability.png?v=1789236220"}],"url":"https:\/\/verivexa.co.uk\/collections\/frontpage.oembed","provider":"Verivexa","version":"1.0","type":"link"}