Expert Advice Community

Home / ISO 27001 & 22301 / SoA update

Guest

SoA update

ISO 27001 & 22301
  Quote
Guest
Guest user Created:   Sep 28, 2018 Last commented:   Sep 28, 2018

SoA update

ISO 27001 & 22301
Hi, should we update the statuses in the SOA ongoing or is this done annually?
0 0

Assign topic to the user

ISO 27001 STATEMENT OF APPLICABILITY

List all controls and determine which are applicable and why.

ISO 27001 STATEMENT OF APPLICABILITY

List all controls and determine which are applicable and why.
Expert
Rhand Leal Sep 28, 2018

Answer:

Once a year is not enough. You should update SoA at least once a month or more often, considering how changes in the ISMS environment and new and modified risks affect the implemented controls, so the SoA can keep reflecting the way the organization handles its information security.

This article will provide you further explanation about SOA:
- The importance of Statement of Applicability for ISO 27001 https://advisera.com/27001academy/knowledgebase/the-importance-of-statement-of-applicability-for-iso-27001/

Quote
0 0

Comment as guest or Sign in

HTML tags are not allowed

Sep 27, 2018

Sep 27, 2018

Suggested Topics
Guest user Created:   Dec 14, 2022 ISO 27001 & 22301
Replies: 1
0 0

SoA update
Guest user Created:   Sep 30, 2017 ISO 27001 & 22301
Replies: 1
0 0

SoA update
Guest user Created:   Nov 26, 2021 ISO 27001 & 22301
Replies: 1
0 0

Declaration of applicability in ISO 27001

This website stores cookies on your computer. These cookies are used to collect information about how you interact with our website and allow us to remember you. We use this information in order to improve and customize your browsing experience and for analytics and metrics about our visitors both on this website and other media. To find out more about the cookies we use, see our Privacy Policy.

If you decline, your information won't be tracked when you visit this website. A single cookie will be used in your browser to remember your preference not to be tracked.