ISO 27001 Practice Question: Why is the Statement of Applicability critical during the... | CyberCertPrep
ISOISO 27001Certification and Audit ProcessEASYFree question
Why is the Statement of Applicability critical during the certification audit?
A.It documents which controls are implemented and justified, providing the auditor with a map of the organization's control environment
B.It is optional
C.It is only reviewed in Stage 1
D.It is a marketing document
Why A is correct
The SoA is critical as it documents applicable controls, their justification, implementation status, and exclusion justifications, serving as a key reference for auditors.
Know someone studying for ISO 27001? Send them this one.
CyberCertPrep gives you 20 free ISO 27001 questions per day with this same answer-and-explanation depth, plus timed exam simulations and progress tracking. No card required.
ISO 27001 and ISO are trademarks or registered trademarks of their respective owners. CyberCertPrep is an independent exam-preparation resource and is not affiliated with, authorized by, sponsored by, or endorsed by ISO or any other certification body. All study material is independently created; the certification name is used only to identify the exam this resource helps you prepare for.
What must an organization do when nonconformities are found during an audit?