statement-of-applicability-author

What problem does it solve?

This Skill helps compliance teams write or update an ISO Statement of Applicability so every Annex A control is explicitly marked applicable or excluded with a defensible justification tied to risk treatment or obligation.

Core Features & Use Cases

• ISO 27001 and ISO 42001 support: Produces SoAs for either standard or a combined document with per-standard applicability kept distinct.
• Audit-ready control tracing: Forces each inclusion to cite risk-treatment decisions or obligations and each exclusion to have a concrete, verifiable rationale.
• Controlled-document discipline: Captures versioning, named approver, review cadence, implementation status, and evidence hooks for downstream audit work.
• Use case: A security team finishing certification prep can use this Skill to turn their risk register and licensed Annex A table into a reviewable SoA draft instead of a vague checklist.

Quick Start

Use the statement-of-applicability-author skill to draft a controlled SoA from the licensed Annex A table and our risk-treatment decisions, with per-control applicability, justification, status, and approver metadata.