Statement of Applicability

Document required by ISO 27001 that lists all Annex A controls, indicates which are applicable and which are not, and justifies exclusions. It is a key deliverable in ISMS implementation.