Grateful if you can please confirm on the following.
We are in the phase of a certification audit. the auditor is currently reviewing the Statement of Applicability (SoA).
For clause 18.1.5, Regulations on cryptographic controls: There is no such law currently in XXXXX. So, is this clause applicable to our company for the time being or shall it be record as exclusion in the SoA?