The SoA lists each of the controls discovered in ISO 27001, aspects irrespective of whether Every single control is used and describes why it absolutely was included or excluded. The RTP describes the methods to generally be taken to manage Every threat recognized in the danger evaluation. Offer a http://iso27001checklist78887.blogofchange.com/7898295/not-known-facts-about-iso-27001-checklist