Free Download

ISO 27001 Statement of Applicability Template

The complete ISO 27001:2022 Statement of Applicability template. All 93 Annex A controls organized by theme with applicability and implementation tracking.

A mandatory document for ISO 27001 certification. This template covers all 93 controls from ISO 27001:2022 Annex A — organized by the four themes (organizational, people, physical, technological) with fields for applicability, justification, and implementation status.

Actionable checklist — not just theory
Built by EU compliance specialists
PDF format — print or share with your team
Completely free, no credit card needed

Get Your Free Checklist

No credit card required. Instant download.

We'll send the download link once to the email address you provide. Marketing emails are sent only if you tick the box above.

What's Inside

Everything you need to assess, plan, and execute your compliance journey.

All 93 Annex A Controls — complete 2022 version organized by four themes
Applicability Status tracking — mark each control as applicable or not applicable
Justification Fields — document reasoning for including or excluding controls
Implementation Status — track current implementation state of each control
Organizational Controls (37) — policies, roles, asset management, access control
People Controls (8) — screening, training, awareness, remote working
Physical Controls (14) — perimeters, entry, equipment, storage media
Technological Controls (34) — endpoints, access rights, cryptography, logging

Built for EU-regulated financial services

ISO 27001SOC 2DORANIS2

Frequently Asked Questions

Is this SoA template free?

Yes, completely free. Download instantly after entering your email.

Is this the 2022 version?

Yes. The template covers all 93 controls from ISO 27001:2022 Annex A, which restructured the previous 114 controls into four themes.

Is the SoA mandatory for certification?

Yes. The Statement of Applicability is a mandatory document for ISO 27001 certification. Auditors will review it during both Stage 1 and Stage 2 audits.

Get started

Ready to automate your compliance?

The checklist is just the beginning. Matproof automates evidence collection, policy generation, and continuous monitoring — so you can focus on your business.

Book a demoView pricing