Derived from ISO/IEC 27001:2022

ISO 27001 Annex A Readiness

Rate Statement of Applicability readiness across the four Annex A themes and their ninety-three controls.

All templates

Before an ISMS audit cycle, to see which Annex A themes need attention first.

What you need and what you get

You'll need

The state of the Statement of Applicability per theme
Honest one-to-five readiness judgements

You'll get

A scored Annex A theme map, downloadable as PNG or PowerPoint
An overall readiness verdict with the next move
An Excel register carrying exactly what the diagram shows

ISO 27001 Annex A: four control themes and the Statement of Applicability

Annex A of ISO/IEC 27001:2022 groups 93 controls into four themes: Organisational with 37, People with 8, Physical with 14 and Technological with 34. Each card carries the theme's scope and, once scored, its readiness.

Rate how far the Statement of Applicability has progressed for each theme. A theme still showing absent or forming readiness means controls without recorded decisions, which is the first thing an auditor will look for.

Score each theme and the diagram fills in as you go. The overall readiness and what an auditor would make of it appear here.