Reply : The SoA need to involve a list of your security controls from Annex A of ISO/IEC 27001. It also needs to demonstrate the steps to implement each control, such as any modifications or exclusions and references concerning policies, procedures, or documents. Understanding the meaning of ISO 27001 also https://mohamedt011awt9.tokka-blog.com/profile