Statement of Applicability
Document which controls apply, which do not and why. Keep applicability decisions with their rationale and supporting context for audit review.
Explore framework managementISO/IEC 27001:2022
Prepare for ISO 27001
with connected controls and evidence.
Help your team prepare for ISO/IEC 27001:2022 certification, including Amendment 1:2024. Defensiq connects the Statement of Applicability, control implementation, risk assessments and supporting evidence in one workspace.
14-day trial of the GRC platform
HOW DEFENSIQ HELPS
Keep ISO 27001 work
clear and auditable.
ISO/IEC 27001:2022 requires organisations to establish an information security management system, document applicability decisions and demonstrate control implementation and review. Defensiq helps you organise the connected work behind certification.
Build your Statement of Applicability
Use the ISO 27001:2022 framework, including Amendment 1:2024 controls. Record why each control applies, does not apply or is addressed through an alternative measure. Assign responsible owners and keep applicability decisions with their rationale.
Document control implementation and evidence
Record implementation status, connect supporting policies and link evidence for each control. Keep implementation separate from assurance review so your team can see what is in place and what still needs verification.
Connect risk assessments and treatment
Link risk records to the controls that address them. Document treatment decisions, assign follow-up actions and keep review dates visible. Show how your ISMS addresses identified risks.
Prepare for certification audit
Export assessment records and prepare scoped views for internal review or external audit. With Audit Preparation, organise the engagement scope, checklist and supporting evidence your auditor needs to see.
Defensiq helps you prepare, organise and evidence your ISO 27001 work. Certification requires an accredited external audit.
CONNECTED WORKFLOWS
The work ISO 27001 connects
ISO 27001 certification depends on documented applicability, implemented controls, risk management and evidence—not just a checklist.
Controls & evidence
Record control implementation, connect policies and evidence, and track assurance reviews. Keep the supporting records behind each control visible and traceable.
Explore controls & evidenceRisk assessment & treatment
Document risk assessments, treatment plans and acceptance decisions. Link risks to the controls that address them and assign follow-up actions with deadlines.
Explore risk managementISO/IEC 27001:2022 content, including Amendment 1:2024, is available for eligible workspaces. Supplier, audit and other capabilities require the relevant base plan and activated modules. Confirm the edition, scope and access you need during your demo.
YOUR NEXT STEP
Start preparing for ISO 27001.
Try Defensiq for 14 days and organise your Statement of Applicability, control implementation and evidence in one connected workspace.