Respond to : The SoA ought to contain a list with the security controls from Annex A of ISO/IEC 27001. It also needs to demonstrate the steps to implement Each individual control, including any modifications or exclusions and references concerning policies, procedures, or documents. Make sure that assets for example https://iso27001accreditation60369.blogminds.com/the-smart-trick-of-iso-27001-la-certification-cost-that-no-one-is-discussing-29538976