Controls, SoA & measures — found from sitemap — Scrut Automation

Cited by

Facts read from this source

• Soa plan availability Report an error

  “Supported on Foundation, Growth, and Scale plans”

• Soa definition Report an error

  “The Statement of Applicability (SoA) is a critical compliance document for ISO certifications. It lists every control from your selected ISO framework, records whether each control is in scope or out of scope, captures the justification for that decision, documents how each control is implemented in your organization, and references the organizational policies that back each control.”

• Soa supported frameworks Report an error

  “You can generate an SoA for the following frameworks: ISO 27001:2022 ISO 27017:2015 ISO 27018:2019 ISO 27701:2019 ISO 27701:2025 ISO 42001:2023”

• Soa dependent frameworks Report an error

  “Note: ISO 27701, ISO 27017, ISO 27018, and ISO 42001 are dependent frameworks that rely on ISO 27001 and do not have standalone SoAs.”

• Soa export format Report an error

  “When you download an SoA, Scrut exports it as an XLSX file with two sheets.”

• Soa document version control tab Report an error

  “The Document Version Control tab includes the document title, owner, approver, version number, effective date, distribution scope, and a revision history table populated from the details you enter when generating the SoA.”

• Soa export columns Report an error

  “Clause and section reference Control name and objective Control requirement description Applicability (Yes or No) Justification for applicability or non-applicability (Legal/Regulatory, Contractual Obligations, Business Requirements or Best Practices, Risk Assessment results) Implementation Details: the content you enter per control in the Frameworks module. Pre-populated with default content and editable before export. Blank for out-of-scope controls. Document Reference: auto-populated at export time from the policies linked to each control in Scrut. Shows "No policy linked" if no policy is mapped. Blank for out-of-scope controls.”

• Soa implementation details char limit Report an error

  “Locate the Implementation Details field. Edit the field to describe how your organization implements this control. The field supports up to 10,000 characters.”

• Soa out of scope field behavior Report an error

  “The Implementation Details field is only visible when a control is marked as in scope. If you mark a control as out of scope, the field is hidden and the corresponding cell in the SoA export will be blank. If you later mark the control back as in scope, the field reappears with the content you previously saved. No data is lost.”

• Soa export delivery Report an error

  “Scrut generates the SoA and sends a download link to your email. Click Download SoA in the email to download the file as an XLSX.”

• Soa versioning Report an error

  “Scrut replaces the existing file with a new version using the updated details. You will receive an email with a link to download the updated file.”

• Soa multiple reviewers Report an error

  “Enter the names of users who prepared, reviewed, and approved the SoA. You can add multiple names in each field, separated by a semicolon (;).”

Scores citing this record

• The CISO Controls, SoA & measures
• The CISO Audit readiness & evidence
• The CISO Controls, SoA & measures
• The CISO Audit readiness & evidence
• The GRC Consultant Pricing transparency
• The GRC Consultant Controls, SoA & measures
• The GRC Consultant Pricing transparency
• The GRC Consultant Controls, SoA & measures
• The Evidence Integrator Controls, SoA & measures
• The Evidence Integrator Audit readiness & evidence
• The Evidence Integrator Pricing transparency
• The Evidence Integrator Controls, SoA & measures
• The Drafted IT Officer Pricing transparency
• The Drafted IT Officer Controls, SoA & measures
• The Drafted IT Officer Framework & standard coverage
• The Drafted IT Officer Pricing transparency
• The Drafted IT Officer Controls, SoA & measures
• The Lead Auditor Pricing transparency
• The Lead Auditor Controls, SoA & measures
• The Lead Auditor Audit readiness & evidence
• The Lead Auditor Pricing transparency
• The Lead Auditor Controls, SoA & measures
• The Lead Auditor Audit readiness & evidence
• The Skeptic Pricing transparency
• The Skeptic Controls, SoA & measures
• The Skeptic Audit readiness & evidence
• The Skeptic Pricing transparency
• The Skeptic Controls, SoA & measures