List each Annex A control with whether it applies, why, how it is implemented and the evidence.
Scope / period: ___ | Prepared by: ___ | Reviewed by: ___ | Date: ___
The Statement of Applicability lists the information security controls you considered, says whether each is applicable and implemented, and gives the reason for including or excluding it. List every control from Annex A of the current edition of ISO/IEC 27001 in the table below, grouped by its theme, and add any control you take from elsewhere. Read the current edition for the exact control list; the standard is a paid document.
This template follows the format published by the Institute of Chartered Accountants of India (ICAI) in the AASB Audit Working Paper Templates (June 2023), the authoritative reference for Indian statutory-audit documentation. Fill in your firm’s letterhead and the engagement details on the form above, click Download Word file, and you’ll get a fully formatted .docx ready to use.
Everything is generated in your browser and on a stateless API endpoint — no account, nothing stored on our servers. We’ll ask for a work email once before your first download so we can send you the file and the occasional relevant update; after that, downloads on this device are instant. Edit freely in Word, Google Docs or Pages before sending to your client.
