Control Applicability Assessment Tool

Not sure which of the Annex A controls apply to your business? This tool can help you decide.

The tool gives you a first-draft applicability list. For what the finished document must contain, a worked example with accepted not-applicable justifications, and a free Excel template, see my ISO 27001 Statement of Applicability guide.