What should be the recommended structure of SOA for a multi location organisation. We as certification body prefer, that the organisation describes the applicability of relevant controls for each location. It helps us to know what controls to see at each location. Please confirm.
In Statement of Applicability you could simply add columns "Applicability" and "Status" for each location - this way you would show which controls are applicable for each location, and whether they are implemented or not in a particular location.
This website stores cookies on your computer. These cookies are used to collect information about how you interact with our website and allow us to remember you. We use this information in order to improve and customize your browsing experience and for analytics and metrics about our visitors both on this website and other media. To find out more about the cookies we use, see our Privacy Policy.
If you decline, your information won't be tracked when you visit this website. A single cookie will be used in your browser to remember your preference not to be tracked.