Assemble an ISO 27001:2022 Statement of Applicability with all 93 Annex A controls.
npx skills add https://github.com/gombing/ISO27001Agent --skill soa
Please help me install this Agent Skill. Skill: soa Source: https://github.com/gombing/ISO27001Agent/tree/main/soa Command: npx skills add https://github.com/gombing/ISO27001Agent --skill soa
The SoA skill streamlines the creation of a formal Statement of Applicability by consolidating risk-treatment decisions and Annex A reviews into a complete, auditable document. It prevents gaps by enforcing pre-populated statuses and documented justifications for exclusions, supporting Stage 1 and Stage 2 audits.
Run the /soa command to generate the Statement of Applicability for the current engagement.
High-intent search queries and answers about installing and using this skill.
Generating an ISO 27001 Statement of Applicability requires consolidating risk treatment decisions and Annex A reviews to pre-populate inclusion statuses for all 93 controls. This process outputs a structured document with per-control details and justifications required for audits.
Documenting justifications for excluded ISO 27001 Annex A controls requires written explanations categorized as RT, LR, CR, BP, or NA. This ensures traceability for audits by referencing source documents and building an internal mapping of control applicability.
Preparing a Statement of Applicability for Stage 1 and Stage 2 audits involves mapping implementation statuses (IMP, PAR, NIM, NAP) against risk treatment decisions. This creates an auditable document with a Not Applicable register and version history to prevent compliance gaps.
Yes, the ISO 27001 SoA must include all 93 Annex A controls within the Clause 6.1.3(d) scope. The SoA enforces pre-populated statuses reflecting risk treatment and annex reviews, requiring documented justifications for any exclusions.
Automating implementation status tracking for ISMS controls involves applying statuses like Implemented, Partially Implemented, Not Implemented, or Not Applicable. This maps directly to your risk treatment plan to support audit roadmaps and engagement-driven workflows.
nguyenpv1980-wqGenerate ISO 27001 and ISO 42001 Statements of Applicability from Annex A tables and risk-treatment outputs.
zhangzhang-111-iGenerate risk-based ISO 27001 ISMS audit plans and testing procedures.
salamientarkAutomate ISMS audit planning, evidence collection, and reporting for ISO 27001 compliance.
gombingAssess ISO 27001 risks and generate a Risk Treatment Plan with controls.
