Remedy : The SoA should really contain a list with the security controls from Annex A of ISO/IEC 27001. It also needs to reveal the steps to implement Each and every control, including any modifications or exclusions and references regarding policies, procedures, or documents. Some organizations opt to implement the https://iso27001cost70369.shotblogs.com/the-best-side-of-are-you-ukas-iso-27001-certified-46126507