01
Applicability decisions
Record whether each control applies and why, using risk, legal, contractual and organisational context.
Your Statement of Applicability, connected to the rest of your ISMS.
Manage control applicability, ownership, implementation and evidence from one place while keeping the reasons behind each decision visible.
02
Implementation status
Keep applicability separate from planned, in progress, implemented or operating-with-exceptions status.
03
Control ownership
Assign accountability and surface evidence refreshes, tests and exceptions to the right people.
04
Evidence & testing
Link uploaded records, connected assurance, test definitions and results directly to the control.
05
Risk-to-audit traceability
See why a control exists, what governs it, what proves it and what auditors have found.
06
Controlled export
Generate an audit-friendly SoA snapshot with generation date and version context.
A living management view, not a spreadsheet prepared before audit.
Risk→Control→Policy→Evidence→Test→Audit finding
Bring the SoA into the rest of your ISMS
Manage applicability, implementation, ownership and evidence in the same system as your risks and policies.