{"id":16334,"date":"2023-11-13T14:00:59","date_gmt":"2023-11-13T13:00:59","guid":{"rendered":"https:\/\/compleye.io\/?p=16334"},"modified":"2023-11-13T14:03:42","modified_gmt":"2023-11-13T13:03:42","slug":"the-complete-guide-to-iso-27001-statement-of-applicability-soa","status":"publish","type":"post","link":"https:\/\/compleye.io\/de\/artikel\/the-complete-guide-to-iso-27001-statement-of-applicability-soa\/","title":{"rendered":"Der vollst\u00e4ndige Leitfaden zur ISO 27001-Anwendbarkeitserkl\u00e4rung (SoA)"},"content":{"rendered":"<div data-elementor-type=\"wp-post\" data-elementor-id=\"16334\" class=\"elementor elementor-16334\" data-elementor-post-type=\"post\">\n\t\t\t\t\t\t<section class=\"elementor-section elementor-top-section elementor-element elementor-element-d85a30a elementor-section-boxed elementor-section-height-default elementor-section-height-default\" data-id=\"d85a30a\" data-element_type=\"section\">\n\t\t\t\t\t\t<div class=\"elementor-container elementor-column-gap-default\">\n\t\t\t\t\t<div class=\"elementor-column elementor-col-100 elementor-top-column elementor-element elementor-element-71d2021\" data-id=\"71d2021\" data-element_type=\"column\">\n\t\t\t<div class=\"elementor-widget-wrap elementor-element-populated\">\n\t\t\t\t\t\t<div class=\"elementor-element elementor-element-07d33d5 elementor-widget__width-initial elementor-widget elementor-widget-text-editor\" data-id=\"07d33d5\" data-element_type=\"widget\" data-widget_type=\"text-editor.default\">\n\t\t\t\t\t\t\t\t\t<p>Learn how to develop an effective Statement of Applicability (SoA) for ISO 27001 compliance with this comprehensive guide. Discover key steps, best practices, and expert insights to ensure your organisation meets the requirements of ISO 27001.<\/p><div><\/div><h2>Understanding the Importance of a Statement of Applicability<\/h2><div><\/div><h3>The Role of the Statement of Applicability in ISO 27001 Compliance\u00a0<\/h3><p>The SoA is a required document for ISO 27001 compliance. In the SoA, your organisation will catalogue its chosen security protocols from 114 Annex A controls, and justify these choices with risk assessments and audits.<\/p><h3>Why a Well-crafted SoA is Crucial for Information Security Management\u00a0<\/h3><p>A well-crafted SoA is crucial for information security management because it:<\/p><ul><li>Helps to demonstrate compliance<\/li><li>Identifies and analyses risks and needs<\/li><li>Delineates controls and their roles<\/li><li>Ensures your security needs are met<\/li><li>Serves as a roadmap for future implementation<\/li><\/ul><h2>Key Components of an ISO 27001 Statement of Applicability<\/h2><h3>Identifying and Documenting the Scope of the SoA\u00a0<\/h3><p>Figuring out the scope of your SoA means setting limits for your Information Security Management System (ISMS). You\u2019ll need to find out what threats you\u2019re up against, what resources you have available, and how your chosen security controls are going to support your overall strategy.<\/p><p>Remember, your SoA will evolve as your organisation\u2019s security needs change.<\/p><h3>Inclusion of Organisational Security Objectives and Controls\u00a0<\/h3><p>Adding security goals and controls to your SoA means matching specific security targets with the best safety measures to achieve them. You\u2019ll need to align these goals with stakeholder and consumer expectations.\u00a0<\/p><p>For example, <a href=\"https:\/\/assets.ey.com\/content\/dam\/ey-sites\/ey-com\/en_gl\/topics\/consulting\/ey-global-consumer-privacy-survey\/ey-data-privacy-report-v2.pdf\"><span>63% of consumers consider an organization&#8217;s data collection and storage practices to be the most important factor when deciding whether to share sensitive information<\/span><\/a>. An emphasis on data privacy in your SoA matches consumer expectations and strengthens your organisation&#8217;s overall security framework.<\/p><h2>Step-by-Step Guide to Developing a Statement of Applicability<\/h2><h3>3.1 Conducting a Comprehensive Information Security Risk Assessment\u00a0\u00a0<\/h3><p>Since a SoA is all about finding the right controls to combat risks, you\u2019ll need to find out what those risks are. Here\u2019s how to do just that:<\/p><ol><li>Identify and catalogue all valuable assets. This means data, hardware systems, software systems, and processes.<\/li><li>Find out what weaknesses are present in these systems where threats could originate.<\/li><li>Evaluate how likely it is that these threats will take place, including the impact they could have.<\/li><li>Prioritise threats based on a blend of their likelihood and the damage they may cause.<\/li><li>Select appropriate controls from Annex A to mitigate and manage risks should they become a reality.<\/li><\/ol><ol><\/ol><ol><\/ol><ol><\/ol><ol><\/ol><p><span><a href=\"https:\/\/compleye.io\/de\/artikel\/iso-27001-risk-assessment-for-your-isms-7-examples-to-get-you-started\/\">Check out our handy guide to ISMS risk assessments here for more tips.<\/a><\/span><\/p><h3>3.2 Identifying Applicable Legal, Regulatory, and Contractual Requirements<\/h3><p>Did you know that <a href=\"https:\/\/www.okera.com\/news\/new-corinium-report-data-privacy-compliance-top-priority\/\"><span>94% of data, privacy, and security professionals say compliance with data privacy regulations is a top priority for their organization<\/span><\/a>? The SoA ensures that implemented security measures address the requirements outlined in data privacy regulations.<\/p><p>So, it\u2019s time to put your reading glasses on.<\/p><p>When choosing your controls, you\u2019ll need to take into account all laws and regulations relevant to information security standards in your industry, identify those that apply to your organisation, and add in any contractual commitments made to your suppliers\/customers.<\/p><h3>3.3 Mapping Controls to Address Identified Risks and Requirements\u00a0\u00a0<\/h3><p>Now it\u2019s time to ensure that your chosen controls can effectively handle risks, meet your security targets and comply with commitments. This involves:<\/p><p><strong>Correlation &#8211;<\/strong> Align each identified risk with a corresponding control from Annex A<\/p><p><strong>Justification &#8211;<\/strong> Demonstrate how the chosen controls mitigate\/manage the risk<\/p><p><strong>Completeness &#8211;<\/strong> Ensure each risk and requirement has a corresponding control<\/p><h3>3.4 Documenting the Control Objectives and Their Implementation Status\u00a0\u00a0<\/h3><p>This stage of the SoA is where its evolutionary nature becomes clear. You\u2019ll be updating it every time you take a step toward meeting your control objectives.<\/p><p>Clearly articulate what you\u2019re aiming to achieve with your chosen controls. Then, document what stage of implementation the controls are at. This may be planned, in progress, or already implemented. Explain current statuses, including reasons for delays and analysis of successful implementations.<\/p><h3>3.5 Establishing a Clear Rationale for the Inclusion or Exclusion of Controls\u00a0<\/h3><p>Just because a control is featured in Annex A, doesn\u2019t mean it\u2019s going to fit with your security objectives. However, if you\u2019re excluding a certain control, you\u2019re going to need to explain why and maintain this reasoning for similar risks and controls.<\/p><p>In your SoA, each control will be listed. Annotate, analyse and justify why certain controls were selected and others weren\u2019t. A comprehensive rationale will make this process much simpler, and further outline your specific security needs.<\/p><h3>3.6 Reviewing and Validating the SoA with Relevant Stakeholders\u00a0<\/h3><p>Finally, you\u2019ll need to get stakeholder approval for the content of your SoA. This includes:<\/p><p><strong>Engaging Key Individuals<\/strong><\/p><p>During the review process, involve stakeholders from relevant departments or areas of expertise.<\/p><p><strong>Collecting Feedback<\/strong><\/p><p>Gather stakeholders\u2019 insights and suggestions on the SoA\u2019s accuracy and relevance regarding their area\u2019s requirements.<\/p><p><strong>Refine the Document<\/strong><\/p><p>Make necessary changes and additions to align the SoA with stakeholder goals and expectations, all while adhering to regulations.<\/p><h2>Best Practices for Creating an Effective Statement of Applicability<\/h2><h3>Involving Key Stakeholders Throughout the SoA Development Process\u00a0<\/h3><p>Stakeholder engagement with the SoA ensures the document is comprehensive. However, you\u2019ll have a lot fewer changes to make if you involve key personnel from the off.<\/p><p>Identify important players who have a vested interest in the SoA, and get their approval on sections that concern them. Work together to ensure improvements are thorough and far-reaching.<\/p><h3>Regularly Reviewing and Updating the SoA to Reflect Changes in the Organisation&#8217;s Environment\u00a0<\/h3><p>Your organisation\u2019s security needs are constantly changing. As your business grows, so do your assets. Your data systems and processes evolve, staff join and leave, and cybersecurity threats become more advanced.<\/p><p>Your risk assessments and chosen controls will need to reflect these changes to maintain compliance. Don\u2019t be shy; check your SoA at least annually.<\/p><p class=\"p1\"><span class=\"s1\"><a href=\"https:\/\/compleye.io\/de\/artikel\/what-is-compliance-management\/\">Check out our article on compliance management for more tips on how to set and meet ongoing compliance targets.<\/a><\/span><\/p><h2>Overcoming Challenges in Developing the Statement of Applicability<\/h2><h3>Addressing Complexities in Mapping Controls to Specific Risks and Requirements\u00a0<\/h3><p>Sometimes it can seem as if:<\/p><ul><li>A risk doesn\u2019t match up to any Annex A controls.<\/li><li>A risk needs multiple controls to mitigate and manage it.<\/li><\/ul><p>If A is an issue, collaborate with relevant personnel, perform a thorough analysis and seek expert help to select one or a few of the best controls.<\/p><p>If B is the case, you can break risks down into the sequence of events that might transpire. Then, assign a specific control to each of these.<\/p><p>Remember, it\u2019s recommended that you continually refine the SoA. As long as you can effectively justify why a control was selected using a review or audit, that risk is considered managed.<\/p><h3>Ensuring Alignment Between the SoA and Other Information Security Management System (ISMS) Documents\u00a0<\/h3><p>There are <a href=\"https:\/\/compleye.io\/de\/artikel\/what-are-the-mandatory-documents-needed-for-iso-27001\/\"><span>quite a few mandatory documents<\/span><\/a> you\u2019ll need to create to achieve ISO 27001 compliance. With so many documents being written up simultaneously, it can be a challenge to make sure the information included in your Statement of Applicability matches up.<\/p><p>To simplify this process, you can:<\/p><ul><li>Develop document control processes<\/li><li>Use a consistent framework and terminology set<\/li><li>Regularly cross-reference<\/li><li>Facilitate communication between those responsible for different documents<\/li><li>Integrate documentation for easy referencing and linkage<\/li><\/ul><h2>Tools and Resources to Simplify the SoA Development Process<\/h2><h3>Utilising Automated Compliance Platforms and Software\u00a0<\/h3><p>Automated compliance platforms, <a href=\"https:\/\/compleye.io\/de\/\"><span>such as Compleye<\/span><\/a>, provide a whole host of benefits if you\u2019re working your way through ISO 27001 documentation.<\/p><p>We\u2019ll help you map controls to specific risks with a structured approach. On top of that, our automated workflows and user-friendly document storage make the approval process a breeze. Your colleagues can collaborate on one, easy-to-use central platform.\u00a0<\/p><p><span style=\"font-size: 28px;\">Leveraging Templates and Frameworks for Efficient SoA Creation<\/span><\/p><p>Compleye also offers templates and frameworks for superlative SoAs. Lucky you. These save you valuable time and ensure your SoA is comprehensive. <a href=\"https:\/\/compleye.io\/de\/compliance-consulting-services\/\"><span>Don&#8217;t forget, our consultation service<\/span><\/a> can provide you with guidance every step of the way.<\/p><h2>Ensuring Ongoing Compliance and Continuous Improvement<\/h2><h3>Incorporating the SoA into the Organisation&#8217;s ISMS Maintenance Activities\u00a0<\/h3><p>Did you know that only <a href=\"https:\/\/www.cisco.com\/c\/dam\/en_us\/about\/doing_business\/trust-center\/docs\/cisco-privacy-benchmark-study-2021.pdf\"><span>34% of organizations said data privacy had become one of the core responsibilities of their cybersecurity team<\/span><\/a>?<\/p><p>It\u2019s stats like these that demonstrate the importance of the SoA beyond being a requirement for ISO 27001 compliance. This document is going to be your best friend as you and your team identify and manage evolving risks for years to come.<\/p><p>When it comes to emerging threats and changing business landscapes, the SoA will guide your team\u2019s assessment and adjustment of security controls. Use your SoA as a reference point to continually align controls with goals and requirements.<\/p><h3>Conducting Regular Audits and Reviews to Validate the Effectiveness of Controls\u00a0<\/h3><p>Writing your chosen controls down is one thing, but figuring out if they\u2019ll work is another. Conducting regular audits and reviews will help you select adequate options, and ensure that your chosen controls do their job. As your organisation\u2019s needs change, you should conduct further audits and reviews.<\/p><p>Struggling to work out where to start with internal audits? No problem &#8211; <a href=\"https:\/\/compleye.io\/de\/artikel\/iso-27001-internal-audit-checklist-template\/\"><span>here\u2019s our checklist and free template<\/span><\/a>.<\/p><h2>Conclusion\u00a0<\/h2><h3>Key Takeaways and Final Thoughts on Creating a Robust and Compliant ISO 27001 Statement of Applicability<\/h3><p>The Statement of Applicability isn\u2019t just a box to tick. It\u2019s your ISMS\u2019s best friend for the long haul. From risk assessment to stakeholder validation, the SoA is pivotal to your organisation\u2019s security.<\/p><p>You\u2019ll need to:<\/p><ul><li>Identify assets and potential threat origin points<\/li><li>Get stakeholders involved from the start<\/li><li>Evaluate risks and assign controls from Annex A<\/li><li>Justify these decisions and any exclusions<\/li><li>Conduct regular audits and reviews<\/li><li>Make necessary changes and refine your SoA<\/li><li>Manage ongoing compliance<\/li><\/ul><p>By leveraging <a href=\"https:\/\/compleye.io\/de\/vollstandiges-online-paket\/\"><span>Compleye\u2019s automated tools and templates<\/span><\/a>, you can streamline the process and perfect your SoA (for the moment, at least), ensuring ongoing compliance and adaptability.<\/p><p>All that\u2019s left to do is get writing, and you\u2019ll be one step closer to ISO 27001 compliance.<\/p><h3>\u00a0\u00a0<\/h3>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/section>\n\t\t\t\t<\/div>","protected":false},"excerpt":{"rendered":"<p>Learn how to develop an effective Statement of Applicability (SoA) for ISO 27001 compliance with this comprehensive guide. Discover key steps, best practices, and expert insights to ensure your organisation meets the requirements of ISO 27001. Understanding the Importance of a Statement of Applicability The Role of the Statement of [&hellip;]<\/p>","protected":false},"author":17,"featured_media":16339,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[1],"tags":[],"class_list":["post-16334","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-lean"],"yoast_head":"<!-- This site is optimized with the Yoast SEO plugin v28.7 - https:\/\/yoast.com\/product\/yoast-seo-wordpress\/ -->\n<title>The Complete Guide to ISO 27001 Statement of Applicability (SoA)<\/title>\n<meta name=\"description\" content=\"Learn how to develop an effective Statement of Applicability (SoA) for ISO 27001 compliance with this comprehensive guide. Discover key steps, best practices, and expert insights to ensure your organisation meets the requirements of ISO 27001.\" \/>\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<link rel=\"canonical\" href=\"https:\/\/compleye.io\/de\/artikel\/the-complete-guide-to-iso-27001-statement-of-applicability-soa\/\" \/>\n<meta property=\"og:locale\" content=\"de_DE\" \/>\n<meta property=\"og:type\" content=\"article\" \/>\n<meta property=\"og:title\" content=\"The Complete Guide to ISO 27001 Statement of Applicability (SoA)\" \/>\n<meta property=\"og:description\" content=\"Learn how to develop an effective Statement of Applicability (SoA) for ISO 27001 compliance with this comprehensive guide. Discover key steps, best practices, and expert insights to ensure your organisation meets the requirements of ISO 27001.\" \/>\n<meta property=\"og:url\" content=\"https:\/\/compleye.io\/de\/artikel\/the-complete-guide-to-iso-27001-statement-of-applicability-soa\/\" \/>\n<meta property=\"og:site_name\" content=\"compleye.io\" \/>\n<meta property=\"article:published_time\" content=\"2023-11-13T13:00:59+00:00\" \/>\n<meta property=\"article:modified_time\" content=\"2023-11-13T13:03:42+00:00\" \/>\n<meta property=\"og:image\" content=\"https:\/\/compleye.io\/wp-content\/uploads\/2023\/11\/sigmund-AQTA5E6mCNU-unsplash-scaled.jpg\" \/>\n\t<meta property=\"og:image:width\" content=\"2560\" \/>\n\t<meta property=\"og:image:height\" content=\"1696\" \/>\n\t<meta property=\"og:image:type\" content=\"image\/jpeg\" \/>\n<meta name=\"author\" content=\"Karolin Kruiskamp\" \/>\n<meta name=\"twitter:card\" content=\"summary_large_image\" \/>\n<meta name=\"twitter:label1\" content=\"Geschrieben von\" \/>\n\t<meta name=\"twitter:data1\" content=\"Karolin Kruiskamp\" \/>\n\t<meta name=\"twitter:label2\" content=\"Gesch\u00e4tzte Lesezeit\" \/>\n\t<meta name=\"twitter:data2\" content=\"8\u00a0Minuten\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\"@context\":\"https:\\\/\\\/schema.org\",\"@graph\":[{\"@type\":[\"Article\",\"BlogPosting\"],\"@id\":\"https:\\\/\\\/compleye.io\\\/articles\\\/the-complete-guide-to-iso-27001-statement-of-applicability-soa\\\/#article\",\"isPartOf\":{\"@id\":\"https:\\\/\\\/compleye.io\\\/articles\\\/the-complete-guide-to-iso-27001-statement-of-applicability-soa\\\/\"},\"author\":{\"name\":\"Karolin Kruiskamp\",\"@id\":\"https:\\\/\\\/compleye.io\\\/#\\\/schema\\\/person\\\/0cec6d61467336a3c2ea74f0beb84bc3\"},\"headline\":\"The Complete Guide to ISO 27001 Statement of Applicability (SoA)\",\"datePublished\":\"2023-11-13T13:00:59+00:00\",\"dateModified\":\"2023-11-13T13:03:42+00:00\",\"mainEntityOfPage\":{\"@id\":\"https:\\\/\\\/compleye.io\\\/articles\\\/the-complete-guide-to-iso-27001-statement-of-applicability-soa\\\/\"},\"wordCount\":1702,\"commentCount\":0,\"publisher\":{\"@id\":\"https:\\\/\\\/compleye.io\\\/#organization\"},\"image\":{\"@id\":\"https:\\\/\\\/compleye.io\\\/articles\\\/the-complete-guide-to-iso-27001-statement-of-applicability-soa\\\/#primaryimage\"},\"thumbnailUrl\":\"https:\\\/\\\/compleye.io\\\/wp-content\\\/uploads\\\/2023\\\/11\\\/sigmund-AQTA5E6mCNU-unsplash-scaled.jpg\",\"articleSection\":[\"Compleye Lean Compliance Designers\"],\"inLanguage\":\"de\",\"potentialAction\":[{\"@type\":\"CommentAction\",\"name\":\"Comment\",\"target\":[\"https:\\\/\\\/compleye.io\\\/articles\\\/the-complete-guide-to-iso-27001-statement-of-applicability-soa\\\/#respond\"]}]},{\"@type\":\"WebPage\",\"@id\":\"https:\\\/\\\/compleye.io\\\/articles\\\/the-complete-guide-to-iso-27001-statement-of-applicability-soa\\\/\",\"url\":\"https:\\\/\\\/compleye.io\\\/articles\\\/the-complete-guide-to-iso-27001-statement-of-applicability-soa\\\/\",\"name\":\"The Complete Guide to ISO 27001 Statement of Applicability (SoA)\",\"isPartOf\":{\"@id\":\"https:\\\/\\\/compleye.io\\\/#website\"},\"primaryImageOfPage\":{\"@id\":\"https:\\\/\\\/compleye.io\\\/articles\\\/the-complete-guide-to-iso-27001-statement-of-applicability-soa\\\/#primaryimage\"},\"image\":{\"@id\":\"https:\\\/\\\/compleye.io\\\/articles\\\/the-complete-guide-to-iso-27001-statement-of-applicability-soa\\\/#primaryimage\"},\"thumbnailUrl\":\"https:\\\/\\\/compleye.io\\\/wp-content\\\/uploads\\\/2023\\\/11\\\/sigmund-AQTA5E6mCNU-unsplash-scaled.jpg\",\"datePublished\":\"2023-11-13T13:00:59+00:00\",\"dateModified\":\"2023-11-13T13:03:42+00:00\",\"description\":\"Learn how to develop an effective Statement of Applicability (SoA) for ISO 27001 compliance with this comprehensive guide. Discover key steps, best practices, and expert insights to ensure your organisation meets the requirements of ISO 27001.\",\"breadcrumb\":{\"@id\":\"https:\\\/\\\/compleye.io\\\/articles\\\/the-complete-guide-to-iso-27001-statement-of-applicability-soa\\\/#breadcrumb\"},\"inLanguage\":\"de\",\"potentialAction\":[{\"@type\":\"ReadAction\",\"target\":[\"https:\\\/\\\/compleye.io\\\/articles\\\/the-complete-guide-to-iso-27001-statement-of-applicability-soa\\\/\"]}]},{\"@type\":\"ImageObject\",\"inLanguage\":\"de\",\"@id\":\"https:\\\/\\\/compleye.io\\\/articles\\\/the-complete-guide-to-iso-27001-statement-of-applicability-soa\\\/#primaryimage\",\"url\":\"https:\\\/\\\/compleye.io\\\/wp-content\\\/uploads\\\/2023\\\/11\\\/sigmund-AQTA5E6mCNU-unsplash-scaled.jpg\",\"contentUrl\":\"https:\\\/\\\/compleye.io\\\/wp-content\\\/uploads\\\/2023\\\/11\\\/sigmund-AQTA5E6mCNU-unsplash-scaled.jpg\",\"width\":2560,\"height\":1696},{\"@type\":\"BreadcrumbList\",\"@id\":\"https:\\\/\\\/compleye.io\\\/articles\\\/the-complete-guide-to-iso-27001-statement-of-applicability-soa\\\/#breadcrumb\",\"itemListElement\":[{\"@type\":\"ListItem\",\"position\":1,\"name\":\"Home\",\"item\":\"https:\\\/\\\/compleye.io\\\/\"},{\"@type\":\"ListItem\",\"position\":2,\"name\":\"The Complete Guide to ISO 27001 Statement of Applicability (SoA)\"}]},{\"@type\":\"WebSite\",\"@id\":\"https:\\\/\\\/compleye.io\\\/#website\",\"url\":\"https:\\\/\\\/compleye.io\\\/\",\"name\":\"compleye.io\",\"description\":\"security and privacy compliance getting done\",\"publisher\":{\"@id\":\"https:\\\/\\\/compleye.io\\\/#organization\"},\"potentialAction\":[{\"@type\":\"SearchAction\",\"target\":{\"@type\":\"EntryPoint\",\"urlTemplate\":\"https:\\\/\\\/compleye.io\\\/?s={search_term_string}\"},\"query-input\":{\"@type\":\"PropertyValueSpecification\",\"valueRequired\":true,\"valueName\":\"search_term_string\"}}],\"inLanguage\":\"de\"},{\"@type\":\"Organization\",\"@id\":\"https:\\\/\\\/compleye.io\\\/#organization\",\"name\":\"Compleye\",\"url\":\"https:\\\/\\\/compleye.io\\\/\",\"logo\":{\"@type\":\"ImageObject\",\"inLanguage\":\"de\",\"@id\":\"https:\\\/\\\/compleye.io\\\/#\\\/schema\\\/logo\\\/image\\\/\",\"url\":\"https:\\\/\\\/compleye.io\\\/wp-content\\\/uploads\\\/2023\\\/03\\\/Compleye_Logo_Logo_Black.png\",\"contentUrl\":\"https:\\\/\\\/compleye.io\\\/wp-content\\\/uploads\\\/2023\\\/03\\\/Compleye_Logo_Logo_Black.png\",\"width\":2451,\"height\":892,\"caption\":\"Compleye\"},\"image\":{\"@id\":\"https:\\\/\\\/compleye.io\\\/#\\\/schema\\\/logo\\\/image\\\/\"},\"sameAs\":[\"https:\\\/\\\/www.linkedin.com\\\/company\\\/c-board\\\/\",\"https:\\\/\\\/www.youtube.com\\\/channel\\\/UCpe1Z7aynfqWSrjgJORgKXw\"]},{\"@type\":\"Person\",\"@id\":\"https:\\\/\\\/compleye.io\\\/#\\\/schema\\\/person\\\/0cec6d61467336a3c2ea74f0beb84bc3\",\"name\":\"Karolin Kruiskamp\",\"image\":{\"@type\":\"ImageObject\",\"inLanguage\":\"de\",\"@id\":\"https:\\\/\\\/secure.gravatar.com\\\/avatar\\\/e9c574805c26ff058e494916fb42a856824ea78280afec8044becfcbddce78c7?s=96&d=mm&r=g\",\"url\":\"https:\\\/\\\/secure.gravatar.com\\\/avatar\\\/e9c574805c26ff058e494916fb42a856824ea78280afec8044becfcbddce78c7?s=96&d=mm&r=g\",\"contentUrl\":\"https:\\\/\\\/secure.gravatar.com\\\/avatar\\\/e9c574805c26ff058e494916fb42a856824ea78280afec8044becfcbddce78c7?s=96&d=mm&r=g\",\"caption\":\"Karolin Kruiskamp\"},\"url\":\"https:\\\/\\\/compleye.io\\\/de\\\/articles\\\/author\\\/karolin\\\/\"}]}<\/script>\n<!-- \/ Yoast SEO plugin. -->","yoast_head_json":{"title":"The Complete Guide to ISO 27001 Statement of Applicability (SoA)","description":"Learn how to develop an effective Statement of Applicability (SoA) for ISO 27001 compliance with this comprehensive guide. Discover key steps, best practices, and expert insights to ensure your organisation meets the requirements of ISO 27001.","robots":{"index":"index","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"canonical":"https:\/\/compleye.io\/de\/artikel\/the-complete-guide-to-iso-27001-statement-of-applicability-soa\/","og_locale":"de_DE","og_type":"article","og_title":"The Complete Guide to ISO 27001 Statement of Applicability (SoA)","og_description":"Learn how to develop an effective Statement of Applicability (SoA) for ISO 27001 compliance with this comprehensive guide. Discover key steps, best practices, and expert insights to ensure your organisation meets the requirements of ISO 27001.","og_url":"https:\/\/compleye.io\/de\/artikel\/the-complete-guide-to-iso-27001-statement-of-applicability-soa\/","og_site_name":"compleye.io","article_published_time":"2023-11-13T13:00:59+00:00","article_modified_time":"2023-11-13T13:03:42+00:00","og_image":[{"width":2560,"height":1696,"url":"https:\/\/compleye.io\/wp-content\/uploads\/2023\/11\/sigmund-AQTA5E6mCNU-unsplash-scaled.jpg","type":"image\/jpeg"}],"author":"Karolin Kruiskamp","twitter_card":"summary_large_image","twitter_misc":{"Geschrieben von":"Karolin Kruiskamp","Gesch\u00e4tzte Lesezeit":"8\u00a0Minuten"},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":["Article","BlogPosting"],"@id":"https:\/\/compleye.io\/articles\/the-complete-guide-to-iso-27001-statement-of-applicability-soa\/#article","isPartOf":{"@id":"https:\/\/compleye.io\/articles\/the-complete-guide-to-iso-27001-statement-of-applicability-soa\/"},"author":{"name":"Karolin Kruiskamp","@id":"https:\/\/compleye.io\/#\/schema\/person\/0cec6d61467336a3c2ea74f0beb84bc3"},"headline":"The Complete Guide to ISO 27001 Statement of Applicability (SoA)","datePublished":"2023-11-13T13:00:59+00:00","dateModified":"2023-11-13T13:03:42+00:00","mainEntityOfPage":{"@id":"https:\/\/compleye.io\/articles\/the-complete-guide-to-iso-27001-statement-of-applicability-soa\/"},"wordCount":1702,"commentCount":0,"publisher":{"@id":"https:\/\/compleye.io\/#organization"},"image":{"@id":"https:\/\/compleye.io\/articles\/the-complete-guide-to-iso-27001-statement-of-applicability-soa\/#primaryimage"},"thumbnailUrl":"https:\/\/compleye.io\/wp-content\/uploads\/2023\/11\/sigmund-AQTA5E6mCNU-unsplash-scaled.jpg","articleSection":["Compleye Lean Compliance Designers"],"inLanguage":"de","potentialAction":[{"@type":"CommentAction","name":"Comment","target":["https:\/\/compleye.io\/articles\/the-complete-guide-to-iso-27001-statement-of-applicability-soa\/#respond"]}]},{"@type":"WebPage","@id":"https:\/\/compleye.io\/articles\/the-complete-guide-to-iso-27001-statement-of-applicability-soa\/","url":"https:\/\/compleye.io\/articles\/the-complete-guide-to-iso-27001-statement-of-applicability-soa\/","name":"The Complete Guide to ISO 27001 Statement of Applicability (SoA)","isPartOf":{"@id":"https:\/\/compleye.io\/#website"},"primaryImageOfPage":{"@id":"https:\/\/compleye.io\/articles\/the-complete-guide-to-iso-27001-statement-of-applicability-soa\/#primaryimage"},"image":{"@id":"https:\/\/compleye.io\/articles\/the-complete-guide-to-iso-27001-statement-of-applicability-soa\/#primaryimage"},"thumbnailUrl":"https:\/\/compleye.io\/wp-content\/uploads\/2023\/11\/sigmund-AQTA5E6mCNU-unsplash-scaled.jpg","datePublished":"2023-11-13T13:00:59+00:00","dateModified":"2023-11-13T13:03:42+00:00","description":"Learn how to develop an effective Statement of Applicability (SoA) for ISO 27001 compliance with this comprehensive guide. Discover key steps, best practices, and expert insights to ensure your organisation meets the requirements of ISO 27001.","breadcrumb":{"@id":"https:\/\/compleye.io\/articles\/the-complete-guide-to-iso-27001-statement-of-applicability-soa\/#breadcrumb"},"inLanguage":"de","potentialAction":[{"@type":"ReadAction","target":["https:\/\/compleye.io\/articles\/the-complete-guide-to-iso-27001-statement-of-applicability-soa\/"]}]},{"@type":"ImageObject","inLanguage":"de","@id":"https:\/\/compleye.io\/articles\/the-complete-guide-to-iso-27001-statement-of-applicability-soa\/#primaryimage","url":"https:\/\/compleye.io\/wp-content\/uploads\/2023\/11\/sigmund-AQTA5E6mCNU-unsplash-scaled.jpg","contentUrl":"https:\/\/compleye.io\/wp-content\/uploads\/2023\/11\/sigmund-AQTA5E6mCNU-unsplash-scaled.jpg","width":2560,"height":1696},{"@type":"BreadcrumbList","@id":"https:\/\/compleye.io\/articles\/the-complete-guide-to-iso-27001-statement-of-applicability-soa\/#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https:\/\/compleye.io\/"},{"@type":"ListItem","position":2,"name":"The Complete Guide to ISO 27001 Statement of Applicability (SoA)"}]},{"@type":"WebSite","@id":"https:\/\/compleye.io\/#website","url":"https:\/\/compleye.io\/","name":"compleye.io","description":"security and privacy compliance getting done","publisher":{"@id":"https:\/\/compleye.io\/#organization"},"potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/compleye.io\/?s={search_term_string}"},"query-input":{"@type":"PropertyValueSpecification","valueRequired":true,"valueName":"search_term_string"}}],"inLanguage":"de"},{"@type":"Organization","@id":"https:\/\/compleye.io\/#organization","name":"Compleye","url":"https:\/\/compleye.io\/","logo":{"@type":"ImageObject","inLanguage":"de","@id":"https:\/\/compleye.io\/#\/schema\/logo\/image\/","url":"https:\/\/compleye.io\/wp-content\/uploads\/2023\/03\/Compleye_Logo_Logo_Black.png","contentUrl":"https:\/\/compleye.io\/wp-content\/uploads\/2023\/03\/Compleye_Logo_Logo_Black.png","width":2451,"height":892,"caption":"Compleye"},"image":{"@id":"https:\/\/compleye.io\/#\/schema\/logo\/image\/"},"sameAs":["https:\/\/www.linkedin.com\/company\/c-board\/","https:\/\/www.youtube.com\/channel\/UCpe1Z7aynfqWSrjgJORgKXw"]},{"@type":"Person","@id":"https:\/\/compleye.io\/#\/schema\/person\/0cec6d61467336a3c2ea74f0beb84bc3","name":"Karolin Kruiskamp","image":{"@type":"ImageObject","inLanguage":"de","@id":"https:\/\/secure.gravatar.com\/avatar\/e9c574805c26ff058e494916fb42a856824ea78280afec8044becfcbddce78c7?s=96&d=mm&r=g","url":"https:\/\/secure.gravatar.com\/avatar\/e9c574805c26ff058e494916fb42a856824ea78280afec8044becfcbddce78c7?s=96&d=mm&r=g","contentUrl":"https:\/\/secure.gravatar.com\/avatar\/e9c574805c26ff058e494916fb42a856824ea78280afec8044becfcbddce78c7?s=96&d=mm&r=g","caption":"Karolin Kruiskamp"},"url":"https:\/\/compleye.io\/de\/articles\/author\/karolin\/"}]}},"_links":{"self":[{"href":"https:\/\/compleye.io\/de\/wp-json\/wp\/v2\/posts\/16334","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/compleye.io\/de\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/compleye.io\/de\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/compleye.io\/de\/wp-json\/wp\/v2\/users\/17"}],"replies":[{"embeddable":true,"href":"https:\/\/compleye.io\/de\/wp-json\/wp\/v2\/comments?post=16334"}],"version-history":[{"count":7,"href":"https:\/\/compleye.io\/de\/wp-json\/wp\/v2\/posts\/16334\/revisions"}],"predecessor-version":[{"id":16342,"href":"https:\/\/compleye.io\/de\/wp-json\/wp\/v2\/posts\/16334\/revisions\/16342"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/compleye.io\/de\/wp-json\/wp\/v2\/media\/16339"}],"wp:attachment":[{"href":"https:\/\/compleye.io\/de\/wp-json\/wp\/v2\/media?parent=16334"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/compleye.io\/de\/wp-json\/wp\/v2\/categories?post=16334"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/compleye.io\/de\/wp-json\/wp\/v2\/tags?post=16334"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}