OSCAL source · SOA
{
"artifactId": "SOA",
"iso": [
"6.1",
"7.5"
],
"catalog": [
{
"iso": "7.5",
"oscalId": "iso27001-7.5",
"title": "Documented information",
"className": "iso27001-clause",
"group": "Support"
}
],
"profileAlters": [
{
"control-id": "iso27001-7.5",
"adds": [
{
"props": [
{
"name": "applicability",
"value": "applicable"
},
{
"name": "applicability-justification",
"value": "ISO/IEC 27001:2022 management-system clause. Always in the certification scope; not subject to Annex A SoA exclusion."
},
{
"name": "implementation-status",
"value": "always-in-scope"
}
]
}
]
}
],
"components": [],
"sspImplementedRequirements": [
{
"control-id": "iso27001-6.1.3",
"props": [
{
"name": "iso-id",
"value": "6.1.3"
},
{
"name": "applicability",
"value": "applicable"
},
{
"name": "evidence-layer",
"value": "linked"
},
{
"name": "implementation-status-raw",
"value": "always-in-scope"
},
{
"name": "control-owner",
"value": "Risk Manager"
},
{
"name": "evidence-status",
"value": "documented"
}
],
"links": [
{
"rel": "cites",
"text": "RTP"
},
{
"rel": "cites",
"text": "SOA"
},
{
"rel": "cites",
"text": "ISOCTRL"
},
{
"rel": "cites",
"text": "ISOCL"
},
{
"rel": "cites",
"text": "RASM"
},
{
"rel": "cites",
"text": "MDR"
},
{
"rel": "cites",
"text": "DR"
},
{
"rel": "cites",
"text": "RRS"
},
{
"rel": "cites",
"text": "AI"
},
{
"rel": "cites",
"text": "UAI"
}
]
},
{
"control-id": "iso27001-8.3",
"props": [
{
"name": "iso-id",
"value": "8.3"
},
{
"name": "applicability",
"value": "applicable"
},
{
"name": "evidence-layer",
"value": "linked"
},
{
"name": "implementation-status-raw",
"value": "always-in-scope"
},
{
"name": "control-owner",
"value": "Risk Manager"
},
{
"name": "evidence-status",
"value": "documented"
}
],
"links": [
{
"rel": "cites",
"text": "RTP"
},
{
"rel": "cites",
"text": "SOA"
},
{
"rel": "cites",
"text": "CAR"
},
{
"rel": "cites",
"text": "ISOCL"
}
]
},
{
"control-id": "iso27001-a.5.1",
"props": [
{
"name": "iso-id",
"value": "A.5.1"
},
{
"name": "applicability",
"value": "applicable"
},
{
"name": "evidence-layer",
"value": "documented"
},
{
"name": "implementation-status-raw",
"value": "Implemented"
},
{
"name": "control-owner",
"value": "ISMS Manager"
},
{
"name": "evidence-status",
"value": "Complete"
},
{
"name": "unresolved-evidence",
"value": "ISP"
}
],
"links": [
{
"rel": "cites",
"text": "SOA"
},
{
"rel": "cites",
"text": "ISOCTRL"
}
]
},
{
"control-id": "iso27001-a.5.2",
"props": [
{
"name": "iso-id",
"value": "A.5.2"
},
{
"name": "applicability",
"value": "applicable"
},
{
"name": "evidence-layer",
"value": "documented"
},
{
"name": "implementation-status-raw",
"value": "Implemented"
},
{
"name": "control-owner",
"value": "ISMS Manager"
},
{
"name": "evidence-status",
"value": "Complete"
},
{
"name": "unresolved-evidence",
"value": "RACI"
}
],
"links": [
{
"rel": "cites",
"text": "SOA"
},
{
"rel": "cites",
"text": "ISOCTRL"
}
]
},
{
"control-id": "iso27001-a.5.3",
"props": [
{
"name": "iso-id",
"value": "A.5.3"
},
{
"name": "applicability",
"value": "applicable"
},
{
"name": "evidence-layer",
"value": "documented"
},
{
"name": "implementation-status-raw",
"value": "In progress"
},
{
"name": "control-owner",
"value": "IT Operations"
},
{
"name": "evidence-status",
"value": "Partial"
},
{
"name": "unresolved-evidence",
"value": "SOD-CHK-2026-Q3"
}
],
"links": [
{
"rel": "cites",
"text": "SOA"
},
{
"rel": "cites",
"text": "ISOCTRL"
}
]
},
{
"control-id": "iso27001-a.5.4",
"props": [
{
"name": "iso-id",
"value": "A.5.4"
},
{
"name": "applicability",
"value": "applicable"
},
{
"name": "evidence-layer",
"value": "documented"
},
{
"name": "implementation-status-raw",
"value": "Implemented"
},
{
"name": "control-owner",
"value": "Top Management"
},
{
"name": "evidence-status",
"value": "Complete"
},
{
"name": "unresolved-evidence",
"value": "MR-2026-Q3"
}
],
"links": [
{
"rel": "cites",
"text": "SOA"
},
{
"rel": "cites",
"text": "ISOCTRL"
}
]
},
{
"control-id": "iso27001-a.5.5",
"props": [
{
"name": "iso-id",
"value": "A.5.5"
},
{
"name": "applicability",
"value": "applicable"
},
{
"name": "evidence-layer",
"value": "linked"
},
{
"name": "implementation-status-raw",
"value": "Implemented"
},
{
"name": "control-owner",
"value": "Compliance Manager"
},
{
"name": "evidence-status",
"value": "Partial"
}
],
"links": [
{
"rel": "field-ref",
"text": "COMM-P"
},
{
"rel": "cites",
"text": "SOA"
},
{
"rel": "cites",
"text": "ISOCTRL"
}
]
},
{
"control-id": "iso27001-a.5.6",
"props": [
{
"name": "iso-id",
"value": "A.5.6"
},
{
"name": "applicability",
"value": "applicable"
},
{
"name": "evidence-layer",
"value": "documented"
},
{
"name": "implementation-status-raw",
"value": "Implemented"
},
{
"name": "control-owner",
"value": "Security Lead"
},
{
"name": "evidence-status",
"value": "Partial"
},
{
"name": "unresolved-evidence",
"value": "TI-SUB-2026"
}
],
"links": [
{
"rel": "cites",
"text": "SOA"
},
{
"rel": "cites",
"text": "ISOCTRL"
}
]
},
{
"control-id": "iso27001-a.5.7",
"props": [
{
"name": "iso-id",
"value": "A.5.7"
},
{
"name": "applicability",
"value": "applicable"
},
{
"name": "evidence-layer",
"value": "documented"
},
{
"name": "implementation-status-raw",
"value": "In progress"
},
{
"name": "control-owner",
"value": "Security Lead"
},
{
"name": "evidence-status",
"value": "Partial"
},
{
"name": "unresolved-evidence",
"value": "TI-LOG-2026-Q3"
}
],
"links": [
{
"rel": "cites",
"text": "SOA"
},
{
"rel": "cites",
"text": "ISOCTRL"
}
]
},
{
"control-id": "iso27001-a.5.8",
"props": [
{
"name": "iso-id",
"value": "A.5.8"
},
{
"name": "applicability",
"value": "applicable"
},
{
"name": "evidence-layer",
"value": "documented"
},
{
"name": "implementation-status-raw",
"value": "Implemented"
},
{
"name": "control-owner",
"value": "Project Manager"
},
{
"name": "evidence-status",
"value": "Partial"
},
{
"name": "unresolved-evidence",
"value": "SSDLC"
}
],
"links": [
{
"rel": "cites",
"text": "SOA"
},
{
"rel": "cites",
"text": "ISOCTRL"
}
]
},
{
"control-id": "iso27001-a.5.9",
"props": [
{
"name": "iso-id",
"value": "A.5.9"
},
{
"name": "applicability",
"value": "applicable"
},
{
"name": "evidence-layer",
"value": "linked"
},
{
"name": "implementation-status-raw",
"value": "Implemented"
},
{
"name": "control-owner",
"value": "Asset Manager"
},
{
"name": "evidence-status",
"value": "Complete"
}
],
"links": [
{
"rel": "field-ref",
"text": "AI"
},
{
"rel": "cites",
"text": "SOA"
},
{
"rel": "cites",
"text": "ISOCTRL"
}
]
},
{
"control-id": "iso27001-a.5.10",
"props": [
{
"name": "iso-id",
"value": "A.5.10"
},
{
"name": "applicability",
"value": "applicable"
},
{
"name": "evidence-layer",
"value": "documented"
},
{
"name": "implementation-status-raw",
"value": "Implemented"
},
{
"name": "control-owner",
"value": "HR Manager"
},
{
"name": "evidence-status",
"value": "Complete"
},
{
"name": "unresolved-evidence",
"value": "AUP-ACK-2026-Q3"
}
],
"links": [
{
"rel": "cites",
"text": "SOA"
},
{
"rel": "cites",
"text": "ISOCTRL"
}
]
},
{
"control-id": "iso27001-a.5.11",
"props": [
{
"name": "iso-id",
"value": "A.5.11"
},
{
"name": "applicability",
"value": "applicable"
},
{
"name": "evidence-layer",
"value": "documented"
},
{
"name": "implementation-status-raw",
"value": "Implemented"
},
{
"name": "control-owner",
"value": "HR Manager"
},
{
"name": "evidence-status",
"value": "Complete"
},
{
"name": "unresolved-evidence",
"value": "OFC"
}
],
"links": [
{
"rel": "cites",
"text": "SOA"
},
{
"rel": "cites",
"text": "ISOCTRL"
}
]
},
{
"control-id": "iso27001-a.5.12",
"props": [
{
"name": "iso-id",
"value": "A.5.12"
},
{
"name": "applicability",
"value": "applicable"
},
{
"name": "evidence-layer",
"value": "documented"
},
{
"name": "implementation-status-raw",
"value": "Implemented"
},
{
"name": "control-owner",
"value": "ISMS Manager"
},
{
"name": "evidence-status",
"value": "Complete"
},
{
"name": "unresolved-evidence",
"value": "CLASS-STD-2026"
}
],
"links": [
{
"rel": "cites",
"text": "SOA"
},
{
"rel": "cites",
"text": "ISOCTRL"
}
]
},
{
"control-id": "iso27001-a.5.13",
"props": [
{
"name": "iso-id",
"value": "A.5.13"
},
{
"name": "applicability",
"value": "applicable"
},
{
"name": "evidence-layer",
"value": "linked"
},
{
"name": "implementation-status-raw",
"value": "Implemented"
},
{
"name": "control-owner",
"value": "Document Owner"
},
{
"name": "evidence-status",
"value": "Partial"
}
],
"links": [
{
"rel": "field-ref",
"text": "DR"
},
{
"rel": "cites",
"text": "SOA"
},
{
"rel": "cites",
"text": "ISOCTRL"
}
]
},
{
"control-id": "iso27001-a.5.14",
"props": [
{
"name": "iso-id",
"value": "A.5.14"
},
{
"name": "applicability",
"value": "applicable"
},
{
"name": "evidence-layer",
"value": "documented"
},
{
"name": "implementation-status-raw",
"value": "Implemented"
},
{
"name": "control-owner",
"value": "IT Operations"
},
{
"name": "evidence-status",
"value": "Partial"
},
{
"name": "unresolved-evidence",
"value": "ITR-2026-Q3"
}
],
"links": [
{
"rel": "cites",
"text": "SOA"
},
{
"rel": "cites",
"text": "ISOCTRL"
}
]
},
{
"control-id": "iso27001-a.5.15",
"props": [
{
"name": "iso-id",
"value": "A.5.15"
},
{
"name": "applicability",
"value": "applicable"
},
{
"name": "evidence-layer",
"value": "linked"
},
{
"name": "implementation-status-raw",
"value": "Implemented"
},
{
"name": "control-owner",
"value": "IT Operations"
},
{
"name": "evidence-status",
"value": "Partial"
}
],
"links": [
{
"rel": "field-ref",
"text": "ACM"
},
{
"rel": "cites",
"text": "SOA"
},
{
"rel": "cites",
"text": "ISOCTRL"
}
]
},
{
"control-id": "iso27001-a.5.16",
"props": [
{
"name": "iso-id",
"value": "A.5.16"
},
{
"name": "applicability",
"value": "applicable"
},
{
"name": "evidence-layer",
"value": "documented"
},
{
"name": "implementation-status-raw",
"value": "Implemented"
},
{
"name": "control-owner",
"value": "IT Operations"
},
{
"name": "evidence-status",
"value": "Partial"
},
{
"name": "unresolved-evidence",
"value": "IAM-CTRL-2026-Q3"
}
],
"links": [
{
"rel": "cites",
"text": "SOA"
},
{
"rel": "cites",
"text": "ISOCTRL"
}
]
},
{
"control-id": "iso27001-a.5.17",
"props": [
{
"name": "iso-id",
"value": "A.5.17"
},
{
"name": "applicability",
"value": "applicable"
},
{
"name": "evidence-layer",
"value": "documented"
},
{
"name": "implementation-status-raw",
"value": "Implemented"
},
{
"name": "control-owner",
"value": "IT Operations"
},
{
"name": "evidence-status",
"value": "Partial"
},
{
"name": "unresolved-evidence",
"value": "IAM-CTRL-2026-Q3"
}
],
"links": [
{
"rel": "cites",
"text": "SOA"
},
{
"rel": "cites",
"text": "ISOCTRL"
}
]
},
{
"control-id": "iso27001-a.5.18",
"props": [
{
"name": "iso-id",
"value": "A.5.18"
},
{
"name": "applicability",
"value": "applicable"
},
{
"name": "evidence-layer",
"value": "linked"
},
{
"name": "implementation-status-raw",
"value": "Implemented"
},
{
"name": "control-owner",
"value": "IT Operations"
},
{
"name": "evidence-status",
"value": "Partial"
}
],
"links": [
{
"rel": "field-ref",
"text": "ARR"
},
{
"rel": "cites",
"text": "SOA"
},
{
"rel": "cites",
"text": "ISOCTRL"
},
{
"rel": "field-ref",
"text": "AST-001"
},
{
"rel": "field-ref",
"text": "AST-003"
},
{
"rel": "field-ref",
"text": "AST-002"
},
{
"rel": "field-ref",
"text": "AST-009"
},
{
"rel": "field-ref",
"text": "AST-007"
},
{
"rel": "field-ref",
"text": "AST-005"
}
]
},
{
"control-id": "iso27001-a.5.19",
"props": [
{
"name": "iso-id",
"value": "A.5.19"
},
{
"name": "applicability",
"value": "applicable"
},
{
"name": "evidence-layer",
"value": "linked"
},
{
"name": "implementation-status-raw",
"value": "In progress"
},
{
"name": "control-owner",
"value": "Supplier Manager"
},
{
"name": "evidence-status",
"value": "Partial"
},
{
"name": "unresolved-evidence",
"value": "SINV"
}
],
"links": [
{
"rel": "cites",
"text": "SOA"
},
{
"rel": "cites",
"text": "ISOCTRL"
},
{
"rel": "cites",
"text": "CSS"
},
{
"rel": "cites",
"text": "MDR"
},
{
"rel": "cites",
"text": "DR"
},
{
"rel": "cites",
"text": "RRS"
},
{
"rel": "cites",
"text": "AI"
},
{
"rel": "cites",
"text": "UAI"
}
]
},
{
"control-id": "iso27001-a.5.20",
"props": [
{
"name": "iso-id",
"value": "A.5.20"
},
{
"name": "applicability",
"value": "applicable"
},
{
"name": "evidence-layer",
"value": "linked"
},
{
"name": "implementation-status-raw",
"value": "In progress"
},
{
"name": "control-owner",
"value": "Supplier Manager"
},
{
"name": "evidence-status",
"value": "Partial"
}
],
"links": [
{
"rel": "field-ref",
"text": "CSS"
},
{
"rel": "cites",
"text": "SOA"
},
{
"rel": "cites",
"text": "ISOCTRL"
}
]
},
{
"control-id": "iso27001-a.5.21",
"props": [
{
"name": "iso-id",
"value": "A.5.21"
},
{
"name": "applicability",
"value": "applicable"
},
{
"name": "evidence-layer",
"value": "documented"
},
{
"name": "implementation-status-raw",
"value": "Planned"
},
{
"name": "control-owner",
"value": "Supplier Manager"
},
{
"name": "evidence-status",
"value": "Partial"
},
{
"name": "unresolved-evidence",
"value": "SINV"
}
],
"links": [
{
"rel": "cites",
"text": "SOA"
},
{
"rel": "cites",
"text": "ISOCTRL"
}
]
},
{
"control-id": "iso27001-a.5.22",
"props": [
{
"name": "iso-id",
"value": "A.5.22"
},
{
"name": "applicability",
"value": "applicable"
},
{
"name": "evidence-layer",
"value": "linked"
},
{
"name": "implementation-status-raw",
"value": "In progress"
},
{
"name": "control-owner",
"value": "Supplier Manager"
},
{
"name": "evidence-status",
"value": "Partial"
},
{
"name": "unresolved-evidence",
"value": "SINV"
}
],
"links": [
{
"rel": "cites",
"text": "SOA"
},
{
"rel": "cites",
"text": "ISOCTRL"
},
{
"rel": "cites",
"text": "CSS"
},
{
"rel": "cites",
"text": "MDR"
},
{
"rel": "cites",
"text": "DR"
},
{
"rel": "cites",
"text": "RRS"
},
{
"rel": "cites",
"text": "AI"
},
{
"rel": "cites",
"text": "UAI"
}
]
},
{
"control-id": "iso27001-a.5.23",
"props": [
{
"name": "iso-id",
"value": "A.5.23"
},
{
"name": "applicability",
"value": "applicable"
},
{
"name": "evidence-layer",
"value": "linked"
},
{
"name": "implementation-status-raw",
"value": "In progress"
},
{
"name": "control-owner",
"value": "Cloud Service Owner"
},
{
"name": "evidence-status",
"value": "Partial"
},
{
"name": "unresolved-evidence",
"value": "CLOUD-CTRL-2026-Q3"
}
],
"links": [
{
"rel": "cites",
"text": "SOA"
},
{
"rel": "cites",
"text": "ISOCTRL"
},
{
"rel": "cites",
"text": "CSS"
},
{
"rel": "cites",
"text": "MDR"
},
{
"rel": "cites",
"text": "DR"
},
{
"rel": "cites",
"text": "RRS"
},
{
"rel": "cites",
"text": "AI"
},
{
"rel": "cites",
"text": "UAI"
}
]
},
{
"control-id": "iso27001-a.5.24",
"props": [
{
"name": "iso-id",
"value": "A.5.24"
},
{
"name": "applicability",
"value": "applicable"
},
{
"name": "evidence-layer",
"value": "linked"
},
{
"name": "implementation-status-raw",
"value": "Implemented"
},
{
"name": "control-owner",
"value": "Incident Manager"
},
{
"name": "evidence-status",
"value": "Complete"
},
{
"name": "unresolved-evidence",
"value": "IRP"
}
],
"links": [
{
"rel": "cites",
"text": "SOA"
},
{
"rel": "cites",
"text": "ISOCTRL"
},
{
"rel": "cites",
"text": "IMP"
},
{
"rel": "cites",
"text": "MDR"
},
{
"rel": "cites",
"text": "DR"
},
{
"rel": "cites",
"text": "RRS"
},
{
"rel": "cites",
"text": "AI"
},
{
"rel": "cites",
"text": "UAI"
}
]
},
{
"control-id": "iso27001-a.5.25",
"props": [
{
"name": "iso-id",
"value": "A.5.25"
},
{
"name": "applicability",
"value": "applicable"
},
{
"name": "evidence-layer",
"value": "linked"
},
{
"name": "implementation-status-raw",
"value": "Implemented"
},
{
"name": "control-owner",
"value": "Incident Manager"
},
{
"name": "evidence-status",
"value": "Partial"
},
{
"name": "unresolved-evidence",
"value": "SIR"
}
],
"links": [
{
"rel": "cites",
"text": "SOA"
},
{
"rel": "cites",
"text": "ISOCTRL"
},
{
"rel": "cites",
"text": "IMP"
},
{
"rel": "cites",
"text": "MDR"
},
{
"rel": "cites",
"text": "DR"
},
{
"rel": "cites",
"text": "RRS"
},
{
"rel": "cites",
"text": "AI"
},
{
"rel": "cites",
"text": "UAI"
}
]
},
{
"control-id": "iso27001-a.5.26",
"props": [
{
"name": "iso-id",
"value": "A.5.26"
},
{
"name": "applicability",
"value": "applicable"
},
{
"name": "evidence-layer",
"value": "linked"
},
{
"name": "implementation-status-raw",
"value": "Implemented"
},
{
"name": "control-owner",
"value": "Incident Manager"
},
{
"name": "evidence-status",
"value": "Partial"
},
{
"name": "unresolved-evidence",
"value": "IR-RB"
}
],
"links": [
{
"rel": "cites",
"text": "SOA"
},
{
"rel": "cites",
"text": "ISOCTRL"
},
{
"rel": "cites",
"text": "IMP"
},
{
"rel": "cites",
"text": "MDR"
},
{
"rel": "cites",
"text": "DR"
},
{
"rel": "cites",
"text": "RRS"
},
{
"rel": "cites",
"text": "AI"
},
{
"rel": "cites",
"text": "UAI"
}
]
},
{
"control-id": "iso27001-a.5.27",
"props": [
{
"name": "iso-id",
"value": "A.5.27"
},
{
"name": "applicability",
"value": "applicable"
},
{
"name": "evidence-layer",
"value": "linked"
},
{
"name": "implementation-status-raw",
"value": "Planned"
},
{
"name": "control-owner",
"value": "Incident Manager"
},
{
"name": "evidence-status",
"value": "Partial"
}
],
"links": [
{
"rel": "field-ref",
"text": "CIL"
},
{
"rel": "cites",
"text": "SOA"
},
{
"rel": "cites",
"text": "ISOCTRL"
},
{
"rel": "cites",
"text": "IMP"
},
{
"rel": "cites",
"text": "MDR"
},
{
"rel": "cites",
"text": "DR"
},
{
"rel": "cites",
"text": "RRS"
},
{
"rel": "cites",
"text": "AI"
},
{
"rel": "cites",
"text": "UAI"
}
]
},
{
"control-id": "iso27001-a.5.28",
"props": [
{
"name": "iso-id",
"value": "A.5.28"
},
{
"name": "applicability",
"value": "applicable"
},
{
"name": "evidence-layer",
"value": "linked"
},
{
"name": "implementation-status-raw",
"value": "Implemented"
},
{
"name": "control-owner",
"value": "ISMS Manager"
},
{
"name": "evidence-status",
"value": "Complete"
}
],
"links": [
{
"rel": "field-ref",
"text": "ELAI"
},
{
"rel": "cites",
"text": "SOA"
},
{
"rel": "cites",
"text": "ISOCTRL"
},
{
"rel": "cites",
"text": "IMP"
},
{
"rel": "cites",
"text": "MDR"
},
{
"rel": "cites",
"text": "DR"
},
{
"rel": "cites",
"text": "RRS"
},
{
"rel": "cites",
"text": "AI"
},
{
"rel": "cites",
"text": "UAI"
}
]
},
{
"control-id": "iso27001-a.5.29",
"props": [
{
"name": "iso-id",
"value": "A.5.29"
},
{
"name": "applicability",
"value": "applicable"
},
{
"name": "evidence-layer",
"value": "documented"
},
{
"name": "implementation-status-raw",
"value": "Implemented"
},
{
"name": "control-owner",
"value": "Business Continuity Manager"
},
{
"name": "evidence-status",
"value": "Partial"
},
{
"name": "unresolved-evidence",
"value": "BCP"
}
],
"links": [
{
"rel": "cites",
"text": "SOA"
},
{
"rel": "cites",
"text": "ISOCTRL"
}
]
},
{
"control-id": "iso27001-a.5.30",
"props": [
{
"name": "iso-id",
"value": "A.5.30"
},
{
"name": "applicability",
"value": "applicable"
},
{
"name": "evidence-layer",
"value": "documented"
},
{
"name": "implementation-status-raw",
"value": "In progress"
},
{
"name": "control-owner",
"value": "IT Operations"
},
{
"name": "evidence-status",
"value": "Partial"
},
{
"name": "unresolved-evidence",
"value": "DRP"
}
],
"links": [
{
"rel": "cites",
"text": "SOA"
},
{
"rel": "cites",
"text": "ISOCTRL"
}
]
},
{
"control-id": "iso27001-a.5.31",
"props": [
{
"name": "iso-id",
"value": "A.5.31"
},
{
"name": "applicability",
"value": "applicable"
},
{
"name": "evidence-layer",
"value": "linked"
},
{
"name": "implementation-status-raw",
"value": "Implemented"
},
{
"name": "control-owner",
"value": "Compliance Manager"
},
{
"name": "evidence-status",
"value": "Partial"
}
],
"links": [
{
"rel": "field-ref",
"text": "LRR"
},
{
"rel": "cites",
"text": "SOA"
},
{
"rel": "cites",
"text": "ISOCTRL"
}
]
},
{
"control-id": "iso27001-a.5.32",
"props": [
{
"name": "iso-id",
"value": "A.5.32"
},
{
"name": "applicability",
"value": "applicable"
},
{
"name": "evidence-layer",
"value": "documented"
},
{
"name": "implementation-status-raw",
"value": "Planned"
},
{
"name": "control-owner",
"value": "Legal Counsel"
},
{
"name": "evidence-status",
"value": "Partial"
},
{
"name": "unresolved-evidence",
"value": "IPR"
}
],
"links": [
{
"rel": "cites",
"text": "SOA"
},
{
"rel": "cites",
"text": "ISOCTRL"
}
]
},
{
"control-id": "iso27001-a.5.33",
"props": [
{
"name": "iso-id",
"value": "A.5.33"
},
{
"name": "applicability",
"value": "applicable"
},
{
"name": "evidence-layer",
"value": "linked"
},
{
"name": "implementation-status-raw",
"value": "Implemented"
},
{
"name": "control-owner",
"value": "Document Owner"
},
{
"name": "evidence-status",
"value": "Complete"
}
],
"links": [
{
"rel": "field-ref",
"text": "RRS"
},
{
"rel": "cites",
"text": "SOA"
},
{
"rel": "cites",
"text": "ISOCTRL"
}
]
},
{
"control-id": "iso27001-a.5.34",
"props": [
{
"name": "iso-id",
"value": "A.5.34"
},
{
"name": "applicability",
"value": "applicable"
},
{
"name": "evidence-layer",
"value": "documented"
},
{
"name": "implementation-status-raw",
"value": "Implemented"
},
{
"name": "control-owner",
"value": "Privacy Lead"
},
{
"name": "evidence-status",
"value": "Partial"
},
{
"name": "unresolved-evidence",
"value": "DPAR"
}
],
"links": [
{
"rel": "cites",
"text": "SOA"
},
{
"rel": "cites",
"text": "ISOCTRL"
}
]
},
{
"control-id": "iso27001-a.5.35",
"props": [
{
"name": "iso-id",
"value": "A.5.35"
},
{
"name": "applicability",
"value": "applicable"
},
{
"name": "evidence-layer",
"value": "linked"
},
{
"name": "implementation-status-raw",
"value": "Implemented"
},
{
"name": "control-owner",
"value": "Internal Auditor"
},
{
"name": "evidence-status",
"value": "Complete"
}
],
"links": [
{
"rel": "field-ref",
"text": "IAP"
},
{
"rel": "cites",
"text": "SOA"
},
{
"rel": "cites",
"text": "ISOCTRL"
}
]
},
{
"control-id": "iso27001-a.5.36",
"props": [
{
"name": "iso-id",
"value": "A.5.36"
},
{
"name": "applicability",
"value": "applicable"
},
{
"name": "evidence-layer",
"value": "linked"
},
{
"name": "implementation-status-raw",
"value": "Implemented"
},
{
"name": "control-owner",
"value": "ISMS Manager"
},
{
"name": "evidence-status",
"value": "Partial"
}
],
"links": [
{
"rel": "field-ref",
"text": "REQT"
},
{
"rel": "cites",
"text": "SOA"
},
{
"rel": "cites",
"text": "ISOCTRL"
}
]
},
{
"control-id": "iso27001-a.5.37",
"props": [
{
"name": "iso-id",
"value": "A.5.37"
},
{
"name": "applicability",
"value": "applicable"
},
{
"name": "evidence-layer",
"value": "linked"
},
{
"name": "implementation-status-raw",
"value": "In progress"
},
{
"name": "control-owner",
"value": "Process Owner"
},
{
"name": "evidence-status",
"value": "Partial"
}
],
"links": [
{
"rel": "field-ref",
"text": "DOP"
},
{
"rel": "cites",
"text": "SOA"
},
{
"rel": "cites",
"text": "ISOCTRL"
}
]
},
{
"control-id": "iso27001-a.6.1",
"props": [
{
"name": "iso-id",
"value": "A.6.1"
},
{
"name": "applicability",
"value": "applicable"
},
{
"name": "evidence-layer",
"value": "linked"
},
{
"name": "implementation-status-raw",
"value": "Implemented"
},
{
"name": "control-owner",
"value": "HR Manager"
},
{
"name": "evidence-status",
"value": "Partial"
},
{
"name": "unresolved-evidence",
"value": "HR-ONB-2026-023"
}
],
"links": [
{
"rel": "cites",
"text": "SOA"
},
{
"rel": "cites",
"text": "ISOCTRL"
},
{
"rel": "cites",
"text": "HRSP"
},
{
"rel": "cites",
"text": "MDR"
},
{
"rel": "cites",
"text": "DR"
},
{
"rel": "cites",
"text": "RRS"
},
{
"rel": "cites",
"text": "AI"
},
{
"rel": "cites",
"text": "UAI"
}
]
},
{
"control-id": "iso27001-a.6.2",
"props": [
{
"name": "iso-id",
"value": "A.6.2"
},
{
"name": "applicability",
"value": "applicable"
},
{
"name": "evidence-layer",
"value": "linked"
},
{
"name": "implementation-status-raw",
"value": "Implemented"
},
{
"name": "control-owner",
"value": "HR Manager"
},
{
"name": "evidence-status",
"value": "Complete"
},
{
"name": "unresolved-evidence",
"value": "HR-ONB-2026-023"
}
],
"links": [
{
"rel": "cites",
"text": "SOA"
},
{
"rel": "cites",
"text": "ISOCTRL"
},
{
"rel": "cites",
"text": "HRSP"
},
{
"rel": "cites",
"text": "MDR"
},
{
"rel": "cites",
"text": "DR"
},
{
"rel": "cites",
"text": "RRS"
},
{
"rel": "cites",
"text": "AI"
},
{
"rel": "cites",
"text": "UAI"
}
]
},
{
"control-id": "iso27001-a.6.3",
"props": [
{
"name": "iso-id",
"value": "A.6.3"
},
{
"name": "applicability",
"value": "applicable"
},
{
"name": "evidence-layer",
"value": "linked"
},
{
"name": "implementation-status-raw",
"value": "Implemented"
},
{
"name": "control-owner",
"value": "HR Manager"
},
{
"name": "evidence-status",
"value": "Complete"
},
{
"name": "unresolved-evidence",
"value": "TRAIN-REC-2026-188"
}
],
"links": [
{
"rel": "cites",
"text": "SOA"
},
{
"rel": "cites",
"text": "ISOCTRL"
},
{
"rel": "cites",
"text": "HRSP"
},
{
"rel": "cites",
"text": "MDR"
},
{
"rel": "cites",
"text": "DR"
},
{
"rel": "cites",
"text": "RRS"
},
{
"rel": "cites",
"text": "AI"
},
{
"rel": "cites",
"text": "UAI"
}
]
},
{
"control-id": "iso27001-a.6.4",
"props": [
{
"name": "iso-id",
"value": "A.6.4"
},
{
"name": "applicability",
"value": "applicable"
},
{
"name": "evidence-layer",
"value": "documented"
},
{
"name": "implementation-status-raw",
"value": "Planned"
},
{
"name": "control-owner",
"value": "HR Manager"
},
{
"name": "evidence-status",
"value": "Partial"
},
{
"name": "unresolved-evidence",
"value": "HRP"
}
],
"links": [
{
"rel": "cites",
"text": "SOA"
},
{
"rel": "cites",
"text": "ISOCTRL"
}
]
},
{
"control-id": "iso27001-a.6.5",
"props": [
{
"name": "iso-id",
"value": "A.6.5"
},
{
"name": "applicability",
"value": "applicable"
},
{
"name": "evidence-layer",
"value": "linked"
},
{
"name": "implementation-status-raw",
"value": "Implemented"
},
{
"name": "control-owner",
"value": "HR Manager"
},
{
"name": "evidence-status",
"value": "Complete"
},
{
"name": "unresolved-evidence",
"value": "OFC"
}
],
"links": [
{
"rel": "cites",
"text": "SOA"
},
{
"rel": "cites",
"text": "ISOCTRL"
},
{
"rel": "cites",
"text": "HRSP"
},
{
"rel": "cites",
"text": "MDR"
},
{
"rel": "cites",
"text": "DR"
},
{
"rel": "cites",
"text": "RRS"
},
{
"rel": "cites",
"text": "AI"
},
{
"rel": "cites",
"text": "UAI"
}
]
},
{
"control-id": "iso27001-a.6.6",
"props": [
{
"name": "iso-id",
"value": "A.6.6"
},
{
"name": "applicability",
"value": "applicable"
},
{
"name": "evidence-layer",
"value": "documented"
},
{
"name": "implementation-status-raw",
"value": "Implemented"
},
{
"name": "control-owner",
"value": "Legal Counsel"
},
{
"name": "evidence-status",
"value": "Partial"
},
{
"name": "unresolved-evidence",
"value": "NDA-REG-2026"
}
],
"links": [
{
"rel": "cites",
"text": "SOA"
},
{
"rel": "cites",
"text": "ISOCTRL"
}
]
},
{
"control-id": "iso27001-a.6.7",
"props": [
{
"name": "iso-id",
"value": "A.6.7"
},
{
"name": "applicability",
"value": "applicable"
},
{
"name": "evidence-layer",
"value": "documented"
},
{
"name": "implementation-status-raw",
"value": "Implemented"
},
{
"name": "control-owner",
"value": "IT Operations"
},
{
"name": "evidence-status",
"value": "Partial"
},
{
"name": "unresolved-evidence",
"value": "REMOTE-2026"
}
],
"links": [
{
"rel": "cites",
"text": "SOA"
},
{
"rel": "cites",
"text": "ISOCTRL"
}
]
},
{
"control-id": "iso27001-a.6.8",
"props": [
{
"name": "iso-id",
"value": "A.6.8"
},
{
"name": "applicability",
"value": "applicable"
},
{
"name": "evidence-layer",
"value": "documented"
},
{
"name": "implementation-status-raw",
"value": "Implemented"
},
{
"name": "control-owner",
"value": "Incident Manager"
},
{
"name": "evidence-status",
"value": "Partial"
},
{
"name": "unresolved-evidence",
"value": "IRP"
}
],
"links": [
{
"rel": "cites",
"text": "SOA"
},
{
"rel": "cites",
"text": "ISOCTRL"
}
]
},
{
"control-id": "iso27001-a.7.1",
"props": [
{
"name": "iso-id",
"value": "A.7.1"
},
{
"name": "applicability",
"value": "applicable"
},
{
"name": "evidence-layer",
"value": "documented"
},
{
"name": "implementation-status-raw",
"value": "Implemented"
},
{
"name": "control-owner",
"value": "Facilities Manager"
},
{
"name": "evidence-status",
"value": "Partial"
},
{
"name": "unresolved-evidence",
"value": "PHY-SEC-2026"
}
],
"links": [
{
"rel": "cites",
"text": "SOA"
},
{
"rel": "cites",
"text": "ISOCTRL"
}
]
},
{
"control-id": "iso27001-a.7.2",
"props": [
{
"name": "iso-id",
"value": "A.7.2"
},
{
"name": "applicability",
"value": "applicable"
},
{
"name": "evidence-layer",
"value": "documented"
},
{
"name": "implementation-status-raw",
"value": "Implemented"
},
{
"name": "control-owner",
"value": "Facilities Manager"
},
{
"name": "evidence-status",
"value": "Partial"
},
{
"name": "unresolved-evidence",
"value": "PHY-ACCESS-2026"
}
],
"links": [
{
"rel": "cites",
"text": "SOA"
},
{
"rel": "cites",
"text": "ISOCTRL"
}
]
},
{
"control-id": "iso27001-a.7.3",
"props": [
{
"name": "iso-id",
"value": "A.7.3"
},
{
"name": "applicability",
"value": "applicable"
},
{
"name": "evidence-layer",
"value": "documented"
},
{
"name": "implementation-status-raw",
"value": "Implemented"
},
{
"name": "control-owner",
"value": "Facilities Manager"
},
{
"name": "evidence-status",
"value": "Partial"
},
{
"name": "unresolved-evidence",
"value": "PHY-OFFICE-2026"
}
],
"links": [
{
"rel": "cites",
"text": "SOA"
},
{
"rel": "cites",
"text": "ISOCTRL"
}
]
},
{
"control-id": "iso27001-a.7.4",
"props": [
{
"name": "iso-id",
"value": "A.7.4"
},
{
"name": "applicability",
"value": "applicable"
},
{
"name": "evidence-layer",
"value": "documented"
},
{
"name": "implementation-status-raw",
"value": "In progress"
},
{
"name": "control-owner",
"value": "Facilities Manager"
},
{
"name": "evidence-status",
"value": "Partial"
},
{
"name": "unresolved-evidence",
"value": "PHY-MON-2026-Q3"
}
],
"links": [
{
"rel": "cites",
"text": "SOA"
},
{
"rel": "cites",
"text": "ISOCTRL"
}
]
},
{
"control-id": "iso27001-a.7.5",
"props": [
{
"name": "iso-id",
"value": "A.7.5"
},
{
"name": "applicability",
"value": "applicable"
},
{
"name": "evidence-layer",
"value": "documented"
},
{
"name": "implementation-status-raw",
"value": "Planned"
},
{
"name": "control-owner",
"value": "Facilities Manager"
},
{
"name": "evidence-status",
"value": "Partial"
},
{
"name": "unresolved-evidence",
"value": "BCP"
}
],
"links": [
{
"rel": "cites",
"text": "SOA"
},
{
"rel": "cites",
"text": "ISOCTRL"
}
]
},
{
"control-id": "iso27001-a.7.6",
"props": [
{
"name": "iso-id",
"value": "A.7.6"
},
{
"name": "applicability",
"value": "not-applicable"
},
{
"name": "evidence-layer",
"value": "not-applicable"
},
{
"name": "implementation-status-raw",
"value": "Not applicable"
},
{
"name": "control-owner",
"value": "Facilities Manager"
},
{
"name": "evidence-status",
"value": "Not applicable"
}
],
"links": [
{
"rel": "field-ref",
"text": "SOA"
},
{
"rel": "cites",
"text": "ISOCTRL"
}
]
},
{
"control-id": "iso27001-a.7.7",
"props": [
{
"name": "iso-id",
"value": "A.7.7"
},
{
"name": "applicability",
"value": "applicable"
},
{
"name": "evidence-layer",
"value": "documented"
},
{
"name": "implementation-status-raw",
"value": "Implemented"
},
{
"name": "control-owner",
"value": "HR Manager"
},
{
"name": "evidence-status",
"value": "Partial"
},
{
"name": "unresolved-evidence",
"value": "AUP-ACK-2026-Q3"
}
],
"links": [
{
"rel": "cites",
"text": "SOA"
},
{
"rel": "cites",
"text": "ISOCTRL"
}
]
},
{
"control-id": "iso27001-a.7.8",
"props": [
{
"name": "iso-id",
"value": "A.7.8"
},
{
"name": "applicability",
"value": "applicable"
},
{
"name": "evidence-layer",
"value": "linked"
},
{
"name": "implementation-status-raw",
"value": "Implemented"
},
{
"name": "control-owner",
"value": "IT Operations"
},
{
"name": "evidence-status",
"value": "Partial"
}
],
"links": [
{
"rel": "field-ref",
"text": "AI"
},
{
"rel": "cites",
"text": "SOA"
},
{
"rel": "cites",
"text": "ISOCTRL"
}
]
},
{
"control-id": "iso27001-a.7.9",
"props": [
{
"name": "iso-id",
"value": "A.7.9"
},
{
"name": "applicability",
"value": "applicable"
},
{
"name": "evidence-layer",
"value": "documented"
},
{
"name": "implementation-status-raw",
"value": "Implemented"
},
{
"name": "control-owner",
"value": "IT Operations"
},
{
"name": "evidence-status",
"value": "Partial"
},
{
"name": "unresolved-evidence",
"value": "MDM-2026-Q3"
}
],
"links": [
{
"rel": "cites",
"text": "SOA"
},
{
"rel": "cites",
"text": "ISOCTRL"
}
]
},
{
"control-id": "iso27001-a.7.10",
"props": [
{
"name": "iso-id",
"value": "A.7.10"
},
{
"name": "applicability",
"value": "applicable"
},
{
"name": "evidence-layer",
"value": "documented"
},
{
"name": "implementation-status-raw",
"value": "Implemented"
},
{
"name": "control-owner",
"value": "IT Operations"
},
{
"name": "evidence-status",
"value": "Partial"
},
{
"name": "unresolved-evidence",
"value": "MDM-2026-Q3"
}
],
"links": [
{
"rel": "cites",
"text": "SOA"
},
{
"rel": "cites",
"text": "ISOCTRL"
}
]
},
{
"control-id": "iso27001-a.7.11",
"props": [
{
"name": "iso-id",
"value": "A.7.11"
},
{
"name": "applicability",
"value": "not-applicable"
},
{
"name": "evidence-layer",
"value": "not-applicable"
},
{
"name": "implementation-status-raw",
"value": "Not applicable"
},
{
"name": "control-owner",
"value": "Facilities Manager"
},
{
"name": "evidence-status",
"value": "Not applicable"
},
{
"name": "unresolved-evidence",
"value": "SINV"
}
],
"links": [
{
"rel": "cites",
"text": "SOA"
},
{
"rel": "cites",
"text": "ISOCTRL"
}
]
},
{
"control-id": "iso27001-a.7.12",
"props": [
{
"name": "iso-id",
"value": "A.7.12"
},
{
"name": "applicability",
"value": "not-applicable"
},
{
"name": "evidence-layer",
"value": "not-applicable"
},
{
"name": "implementation-status-raw",
"value": "Not applicable"
},
{
"name": "control-owner",
"value": "Facilities Manager"
},
{
"name": "evidence-status",
"value": "Not applicable"
}
],
"links": [
{
"rel": "field-ref",
"text": "SOA"
},
{
"rel": "cites",
"text": "ISOCTRL"
}
]
},
{
"control-id": "iso27001-a.7.13",
"props": [
{
"name": "iso-id",
"value": "A.7.13"
},
{
"name": "applicability",
"value": "applicable"
},
{
"name": "evidence-layer",
"value": "documented"
},
{
"name": "implementation-status-raw",
"value": "Implemented"
},
{
"name": "control-owner",
"value": "IT Operations"
},
{
"name": "evidence-status",
"value": "Partial"
},
{
"name": "unresolved-evidence",
"value": "MDM-2026-Q3"
}
],
"links": [
{
"rel": "cites",
"text": "SOA"
},
{
"rel": "cites",
"text": "ISOCTRL"
}
]
},
{
"control-id": "iso27001-a.7.14",
"props": [
{
"name": "iso-id",
"value": "A.7.14"
},
{
"name": "applicability",
"value": "applicable"
},
{
"name": "evidence-layer",
"value": "documented"
},
{
"name": "implementation-status-raw",
"value": "Implemented"
},
{
"name": "control-owner",
"value": "IT Operations"
},
{
"name": "evidence-status",
"value": "Partial"
},
{
"name": "unresolved-evidence",
"value": "OFC"
}
],
"links": [
{
"rel": "cites",
"text": "SOA"
},
{
"rel": "cites",
"text": "ISOCTRL"
}
]
},
{
"control-id": "iso27001-a.8.1",
"props": [
{
"name": "iso-id",
"value": "A.8.1"
},
{
"name": "applicability",
"value": "applicable"
},
{
"name": "evidence-layer",
"value": "documented"
},
{
"name": "implementation-status-raw",
"value": "Implemented"
},
{
"name": "control-owner",
"value": "IT Operations"
},
{
"name": "evidence-status",
"value": "Partial"
},
{
"name": "unresolved-evidence",
"value": "MDM-2026-Q3"
}
],
"links": [
{
"rel": "cites",
"text": "SOA"
},
{
"rel": "cites",
"text": "ISOCTRL"
}
]
},
{
"control-id": "iso27001-a.8.2",
"props": [
{
"name": "iso-id",
"value": "A.8.2"
},
{
"name": "applicability",
"value": "applicable"
},
{
"name": "evidence-layer",
"value": "documented"
},
{
"name": "implementation-status-raw",
"value": "In progress"
},
{
"name": "control-owner",
"value": "IT Operations"
},
{
"name": "evidence-status",
"value": "Partial"
},
{
"name": "unresolved-evidence",
"value": "ACC-REV-2026-Q3"
}
],
"links": [
{
"rel": "cites",
"text": "SOA"
},
{
"rel": "cites",
"text": "ISOCTRL"
}
]
},
{
"control-id": "iso27001-a.8.3",
"props": [
{
"name": "iso-id",
"value": "A.8.3"
},
{
"name": "applicability",
"value": "applicable"
},
{
"name": "evidence-layer",
"value": "linked"
},
{
"name": "implementation-status-raw",
"value": "Implemented"
},
{
"name": "control-owner",
"value": "IT Operations"
},
{
"name": "evidence-status",
"value": "Partial"
}
],
"links": [
{
"rel": "field-ref",
"text": "ACM"
},
{
"rel": "cites",
"text": "SOA"
},
{
"rel": "cites",
"text": "ISOCTRL"
}
]
},
{
"control-id": "iso27001-a.8.4",
"props": [
{
"name": "iso-id",
"value": "A.8.4"
},
{
"name": "applicability",
"value": "applicable"
},
{
"name": "evidence-layer",
"value": "documented"
},
{
"name": "implementation-status-raw",
"value": "Implemented"
},
{
"name": "control-owner",
"value": "Engineering Lead"
},
{
"name": "evidence-status",
"value": "Partial"
},
{
"name": "unresolved-evidence",
"value": "SI"
}
],
"links": [
{
"rel": "cites",
"text": "SOA"
},
{
"rel": "cites",
"text": "ISOCTRL"
}
]
},
{
"control-id": "iso27001-a.8.5",
"props": [
{
"name": "iso-id",
"value": "A.8.5"
},
{
"name": "applicability",
"value": "applicable"
},
{
"name": "evidence-layer",
"value": "documented"
},
{
"name": "implementation-status-raw",
"value": "Implemented"
},
{
"name": "control-owner",
"value": "IT Operations"
},
{
"name": "evidence-status",
"value": "Complete"
},
{
"name": "unresolved-evidence",
"value": "IAM-CTRL-2026-Q3"
}
],
"links": [
{
"rel": "cites",
"text": "SOA"
},
{
"rel": "cites",
"text": "ISOCTRL"
}
]
},
{
"control-id": "iso27001-a.8.6",
"props": [
{
"name": "iso-id",
"value": "A.8.6"
},
{
"name": "applicability",
"value": "applicable"
},
{
"name": "evidence-layer",
"value": "documented"
},
{
"name": "implementation-status-raw",
"value": "Planned"
},
{
"name": "control-owner",
"value": "IT Operations"
},
{
"name": "evidence-status",
"value": "Partial"
},
{
"name": "unresolved-evidence",
"value": "MON-2026-Q3"
}
],
"links": [
{
"rel": "cites",
"text": "SOA"
},
{
"rel": "cites",
"text": "ISOCTRL"
}
]
},
{
"control-id": "iso27001-a.8.7",
"props": [
{
"name": "iso-id",
"value": "A.8.7"
},
{
"name": "applicability",
"value": "applicable"
},
{
"name": "evidence-layer",
"value": "documented"
},
{
"name": "implementation-status-raw",
"value": "Implemented"
},
{
"name": "control-owner",
"value": "IT Operations"
},
{
"name": "evidence-status",
"value": "Partial"
},
{
"name": "unresolved-evidence",
"value": "EDR-2026-Q3"
}
],
"links": [
{
"rel": "cites",
"text": "SOA"
},
{
"rel": "cites",
"text": "ISOCTRL"
}
]
},
{
"control-id": "iso27001-a.8.8",
"props": [
{
"name": "iso-id",
"value": "A.8.8"
},
{
"name": "applicability",
"value": "applicable"
},
{
"name": "evidence-layer",
"value": "documented"
},
{
"name": "implementation-status-raw",
"value": "In progress"
},
{
"name": "control-owner",
"value": "Security Lead"
},
{
"name": "evidence-status",
"value": "Partial"
},
{
"name": "unresolved-evidence",
"value": "VULN-2026-Q3"
}
],
"links": [
{
"rel": "cites",
"text": "SOA"
},
{
"rel": "cites",
"text": "ISOCTRL"
}
]
},
{
"control-id": "iso27001-a.8.9",
"props": [
{
"name": "iso-id",
"value": "A.8.9"
},
{
"name": "applicability",
"value": "applicable"
},
{
"name": "evidence-layer",
"value": "linked"
},
{
"name": "implementation-status-raw",
"value": "In progress"
},
{
"name": "control-owner",
"value": "IT Operations"
},
{
"name": "evidence-status",
"value": "Partial"
},
{
"name": "unresolved-evidence",
"value": "CFG-BASE-2026"
}
],
"links": [
{
"rel": "cites",
"text": "SOA"
},
{
"rel": "cites",
"text": "ISOCTRL"
},
{
"rel": "cites",
"text": "CSS"
},
{
"rel": "cites",
"text": "MDR"
},
{
"rel": "cites",
"text": "DR"
},
{
"rel": "cites",
"text": "RRS"
},
{
"rel": "cites",
"text": "AI"
},
{
"rel": "cites",
"text": "UAI"
}
]
},
{
"control-id": "iso27001-a.8.10",
"props": [
{
"name": "iso-id",
"value": "A.8.10"
},
{
"name": "applicability",
"value": "applicable"
},
{
"name": "evidence-layer",
"value": "linked"
},
{
"name": "implementation-status-raw",
"value": "In progress"
},
{
"name": "control-owner",
"value": "Data Owner"
},
{
"name": "evidence-status",
"value": "Partial"
}
],
"links": [
{
"rel": "field-ref",
"text": "RRS"
},
{
"rel": "cites",
"text": "SOA"
},
{
"rel": "cites",
"text": "ISOCTRL"
}
]
},
{
"control-id": "iso27001-a.8.11",
"props": [
{
"name": "iso-id",
"value": "A.8.11"
},
{
"name": "applicability",
"value": "applicable"
},
{
"name": "evidence-layer",
"value": "documented"
},
{
"name": "implementation-status-raw",
"value": "Planned"
},
{
"name": "control-owner",
"value": "Engineering Lead"
},
{
"name": "evidence-status",
"value": "Missing"
},
{
"name": "unresolved-evidence",
"value": "TBD-DMASK-2026"
}
],
"links": [
{
"rel": "cites",
"text": "SOA"
},
{
"rel": "cites",
"text": "ISOCTRL"
}
]
},
{
"control-id": "iso27001-a.8.12",
"props": [
{
"name": "iso-id",
"value": "A.8.12"
},
{
"name": "applicability",
"value": "applicable"
},
{
"name": "evidence-layer",
"value": "documented"
},
{
"name": "implementation-status-raw",
"value": "Planned"
},
{
"name": "control-owner",
"value": "Security Lead"
},
{
"name": "evidence-status",
"value": "Partial"
},
{
"name": "unresolved-evidence",
"value": "DLP-PLAN-2026"
}
],
"links": [
{
"rel": "cites",
"text": "SOA"
},
{
"rel": "cites",
"text": "ISOCTRL"
}
]
},
{
"control-id": "iso27001-a.8.13",
"props": [
{
"name": "iso-id",
"value": "A.8.13"
},
{
"name": "applicability",
"value": "applicable"
},
{
"name": "evidence-layer",
"value": "documented"
},
{
"name": "implementation-status-raw",
"value": "Implemented"
},
{
"name": "control-owner",
"value": "IT Operations"
},
{
"name": "evidence-status",
"value": "Complete"
},
{
"name": "unresolved-evidence",
"value": "BKP-CRM-001"
}
],
"links": [
{
"rel": "cites",
"text": "SOA"
},
{
"rel": "cites",
"text": "ISOCTRL"
}
]
},
{
"control-id": "iso27001-a.8.14",
"props": [
{
"name": "iso-id",
"value": "A.8.14"
},
{
"name": "applicability",
"value": "applicable"
},
{
"name": "evidence-layer",
"value": "documented"
},
{
"name": "implementation-status-raw",
"value": "Implemented"
},
{
"name": "control-owner",
"value": "IT Operations"
},
{
"name": "evidence-status",
"value": "Partial"
},
{
"name": "unresolved-evidence",
"value": "SINV"
}
],
"links": [
{
"rel": "cites",
"text": "SOA"
},
{
"rel": "cites",
"text": "ISOCTRL"
}
]
},
{
"control-id": "iso27001-a.8.15",
"props": [
{
"name": "iso-id",
"value": "A.8.15"
},
{
"name": "applicability",
"value": "applicable"
},
{
"name": "evidence-layer",
"value": "linked"
},
{
"name": "implementation-status-raw",
"value": "Implemented"
},
{
"name": "control-owner",
"value": "Security Lead"
},
{
"name": "evidence-status",
"value": "Partial"
},
{
"name": "unresolved-evidence",
"value": "LOG-2026-Q3"
}
],
"links": [
{
"rel": "cites",
"text": "SOA"
},
{
"rel": "cites",
"text": "ISOCTRL"
},
{
"rel": "cites",
"text": "CSS"
},
{
"rel": "cites",
"text": "MDR"
},
{
"rel": "cites",
"text": "DR"
},
{
"rel": "cites",
"text": "RRS"
},
{
"rel": "cites",
"text": "AI"
},
{
"rel": "cites",
"text": "UAI"
}
]
},
{
"control-id": "iso27001-a.8.16",
"props": [
{
"name": "iso-id",
"value": "A.8.16"
},
{
"name": "applicability",
"value": "applicable"
},
{
"name": "evidence-layer",
"value": "linked"
},
{
"name": "implementation-status-raw",
"value": "In progress"
},
{
"name": "control-owner",
"value": "Security Lead"
},
{
"name": "evidence-status",
"value": "Partial"
},
{
"name": "unresolved-evidence",
"value": "MON-2026-Q3"
}
],
"links": [
{
"rel": "cites",
"text": "SOA"
},
{
"rel": "cites",
"text": "ISOCTRL"
},
{
"rel": "cites",
"text": "CSS"
},
{
"rel": "cites",
"text": "MDR"
},
{
"rel": "cites",
"text": "DR"
},
{
"rel": "cites",
"text": "RRS"
},
{
"rel": "cites",
"text": "AI"
},
{
"rel": "cites",
"text": "UAI"
}
]
},
{
"control-id": "iso27001-a.8.17",
"props": [
{
"name": "iso-id",
"value": "A.8.17"
},
{
"name": "applicability",
"value": "applicable"
},
{
"name": "evidence-layer",
"value": "documented"
},
{
"name": "implementation-status-raw",
"value": "Implemented"
},
{
"name": "control-owner",
"value": "IT Operations"
},
{
"name": "evidence-status",
"value": "Partial"
},
{
"name": "unresolved-evidence",
"value": "CFG-BASE-2026"
}
],
"links": [
{
"rel": "cites",
"text": "SOA"
},
{
"rel": "cites",
"text": "ISOCTRL"
}
]
},
{
"control-id": "iso27001-a.8.18",
"props": [
{
"name": "iso-id",
"value": "A.8.18"
},
{
"name": "applicability",
"value": "applicable"
},
{
"name": "evidence-layer",
"value": "documented"
},
{
"name": "implementation-status-raw",
"value": "In progress"
},
{
"name": "control-owner",
"value": "IT Operations"
},
{
"name": "evidence-status",
"value": "Partial"
},
{
"name": "unresolved-evidence",
"value": "ACC-REV-2026-Q3"
}
],
"links": [
{
"rel": "cites",
"text": "SOA"
},
{
"rel": "cites",
"text": "ISOCTRL"
}
]
},
{
"control-id": "iso27001-a.8.19",
"props": [
{
"name": "iso-id",
"value": "A.8.19"
},
{
"name": "applicability",
"value": "applicable"
},
{
"name": "evidence-layer",
"value": "documented"
},
{
"name": "implementation-status-raw",
"value": "Implemented"
},
{
"name": "control-owner",
"value": "IT Operations"
},
{
"name": "evidence-status",
"value": "Partial"
},
{
"name": "unresolved-evidence",
"value": "CMP"
}
],
"links": [
{
"rel": "cites",
"text": "SOA"
},
{
"rel": "cites",
"text": "ISOCTRL"
}
]
},
{
"control-id": "iso27001-a.8.20",
"props": [
{
"name": "iso-id",
"value": "A.8.20"
},
{
"name": "applicability",
"value": "applicable"
},
{
"name": "evidence-layer",
"value": "documented"
},
{
"name": "implementation-status-raw",
"value": "Implemented"
},
{
"name": "control-owner",
"value": "IT Operations"
},
{
"name": "evidence-status",
"value": "Partial"
},
{
"name": "unresolved-evidence",
"value": "NSP"
}
],
"links": [
{
"rel": "cites",
"text": "SOA"
},
{
"rel": "cites",
"text": "ISOCTRL"
}
]
},
{
"control-id": "iso27001-a.8.21",
"props": [
{
"name": "iso-id",
"value": "A.8.21"
},
{
"name": "applicability",
"value": "applicable"
},
{
"name": "evidence-layer",
"value": "documented"
},
{
"name": "implementation-status-raw",
"value": "Implemented"
},
{
"name": "control-owner",
"value": "IT Operations"
},
{
"name": "evidence-status",
"value": "Partial"
},
{
"name": "unresolved-evidence",
"value": "SINV"
}
],
"links": [
{
"rel": "cites",
"text": "SOA"
},
{
"rel": "cites",
"text": "ISOCTRL"
}
]
},
{
"control-id": "iso27001-a.8.22",
"props": [
{
"name": "iso-id",
"value": "A.8.22"
},
{
"name": "applicability",
"value": "applicable"
},
{
"name": "evidence-layer",
"value": "documented"
},
{
"name": "implementation-status-raw",
"value": "In progress"
},
{
"name": "control-owner",
"value": "IT Operations"
},
{
"name": "evidence-status",
"value": "Partial"
},
{
"name": "unresolved-evidence",
"value": "NET-SEG-2026"
}
],
"links": [
{
"rel": "cites",
"text": "SOA"
},
{
"rel": "cites",
"text": "ISOCTRL"
}
]
},
{
"control-id": "iso27001-a.8.23",
"props": [
{
"name": "iso-id",
"value": "A.8.23"
},
{
"name": "applicability",
"value": "applicable"
},
{
"name": "evidence-layer",
"value": "documented"
},
{
"name": "implementation-status-raw",
"value": "Planned"
},
{
"name": "control-owner",
"value": "IT Operations"
},
{
"name": "evidence-status",
"value": "Missing"
},
{
"name": "unresolved-evidence",
"value": "TBD-WEBFILTER-2026"
}
],
"links": [
{
"rel": "cites",
"text": "SOA"
},
{
"rel": "cites",
"text": "ISOCTRL"
}
]
},
{
"control-id": "iso27001-a.8.24",
"props": [
{
"name": "iso-id",
"value": "A.8.24"
},
{
"name": "applicability",
"value": "applicable"
},
{
"name": "evidence-layer",
"value": "documented"
},
{
"name": "implementation-status-raw",
"value": "Implemented"
},
{
"name": "control-owner",
"value": "Security Lead"
},
{
"name": "evidence-status",
"value": "Complete"
},
{
"name": "unresolved-evidence",
"value": "CKMP"
}
],
"links": [
{
"rel": "cites",
"text": "SOA"
},
{
"rel": "cites",
"text": "ISOCTRL"
}
]
},
{
"control-id": "iso27001-a.8.25",
"props": [
{
"name": "iso-id",
"value": "A.8.25"
},
{
"name": "applicability",
"value": "applicable"
},
{
"name": "evidence-layer",
"value": "documented"
},
{
"name": "implementation-status-raw",
"value": "Implemented"
},
{
"name": "control-owner",
"value": "Engineering Lead"
},
{
"name": "evidence-status",
"value": "Partial"
},
{
"name": "unresolved-evidence",
"value": "SSDLC"
}
],
"links": [
{
"rel": "cites",
"text": "SOA"
},
{
"rel": "cites",
"text": "ISOCTRL"
}
]
},
{
"control-id": "iso27001-a.8.26",
"props": [
{
"name": "iso-id",
"value": "A.8.26"
},
{
"name": "applicability",
"value": "applicable"
},
{
"name": "evidence-layer",
"value": "documented"
},
{
"name": "implementation-status-raw",
"value": "In progress"
},
{
"name": "control-owner",
"value": "Product Owner"
},
{
"name": "evidence-status",
"value": "Partial"
},
{
"name": "unresolved-evidence",
"value": "APPSEC-REQ-2026"
}
],
"links": [
{
"rel": "cites",
"text": "SOA"
},
{
"rel": "cites",
"text": "ISOCTRL"
}
]
},
{
"control-id": "iso27001-a.8.27",
"props": [
{
"name": "iso-id",
"value": "A.8.27"
},
{
"name": "applicability",
"value": "applicable"
},
{
"name": "evidence-layer",
"value": "documented"
},
{
"name": "implementation-status-raw",
"value": "Planned"
},
{
"name": "control-owner",
"value": "Engineering Lead"
},
{
"name": "evidence-status",
"value": "Partial"
},
{
"name": "unresolved-evidence",
"value": "ARCH-SEC-2026"
}
],
"links": [
{
"rel": "cites",
"text": "SOA"
},
{
"rel": "cites",
"text": "ISOCTRL"
}
]
},
{
"control-id": "iso27001-a.8.28",
"props": [
{
"name": "iso-id",
"value": "A.8.28"
},
{
"name": "applicability",
"value": "applicable"
},
{
"name": "evidence-layer",
"value": "documented"
},
{
"name": "implementation-status-raw",
"value": "Implemented"
},
{
"name": "control-owner",
"value": "Engineering Lead"
},
{
"name": "evidence-status",
"value": "Partial"
},
{
"name": "unresolved-evidence",
"value": "SSDLC"
}
],
"links": [
{
"rel": "cites",
"text": "SOA"
},
{
"rel": "cites",
"text": "ISOCTRL"
}
]
},
{
"control-id": "iso27001-a.8.29",
"props": [
{
"name": "iso-id",
"value": "A.8.29"
},
{
"name": "applicability",
"value": "applicable"
},
{
"name": "evidence-layer",
"value": "documented"
},
{
"name": "implementation-status-raw",
"value": "In progress"
},
{
"name": "control-owner",
"value": "Engineering Lead"
},
{
"name": "evidence-status",
"value": "Partial"
},
{
"name": "unresolved-evidence",
"value": "TEST-SEC-2026"
}
],
"links": [
{
"rel": "cites",
"text": "SOA"
},
{
"rel": "cites",
"text": "ISOCTRL"
}
]
},
{
"control-id": "iso27001-a.8.30",
"props": [
{
"name": "iso-id",
"value": "A.8.30"
},
{
"name": "applicability",
"value": "not-applicable"
},
{
"name": "evidence-layer",
"value": "not-applicable"
},
{
"name": "implementation-status-raw",
"value": "Not applicable"
},
{
"name": "control-owner",
"value": "Engineering Lead"
},
{
"name": "evidence-status",
"value": "Not applicable"
}
],
"links": [
{
"rel": "field-ref",
"text": "SOA"
},
{
"rel": "cites",
"text": "ISOCTRL"
}
]
},
{
"control-id": "iso27001-a.8.31",
"props": [
{
"name": "iso-id",
"value": "A.8.31"
},
{
"name": "applicability",
"value": "applicable"
},
{
"name": "evidence-layer",
"value": "documented"
},
{
"name": "implementation-status-raw",
"value": "Implemented"
},
{
"name": "control-owner",
"value": "Engineering Lead"
},
{
"name": "evidence-status",
"value": "Partial"
},
{
"name": "unresolved-evidence",
"value": "ENV-SEP-2026"
}
],
"links": [
{
"rel": "cites",
"text": "SOA"
},
{
"rel": "cites",
"text": "ISOCTRL"
}
]
},
{
"control-id": "iso27001-a.8.32",
"props": [
{
"name": "iso-id",
"value": "A.8.32"
},
{
"name": "applicability",
"value": "applicable"
},
{
"name": "evidence-layer",
"value": "documented"
},
{
"name": "implementation-status-raw",
"value": "Implemented"
},
{
"name": "control-owner",
"value": "Change Manager"
},
{
"name": "evidence-status",
"value": "Partial"
},
{
"name": "unresolved-evidence",
"value": "CMP"
}
],
"links": [
{
"rel": "cites",
"text": "SOA"
},
{
"rel": "cites",
"text": "ISOCTRL"
}
]
},
{
"control-id": "iso27001-a.8.33",
"props": [
{
"name": "iso-id",
"value": "A.8.33"
},
{
"name": "applicability",
"value": "applicable"
},
{
"name": "evidence-layer",
"value": "documented"
},
{
"name": "implementation-status-raw",
"value": "Planned"
},
{
"name": "control-owner",
"value": "Engineering Lead"
},
{
"name": "evidence-status",
"value": "Missing"
},
{
"name": "unresolved-evidence",
"value": "TBD-TESTDATA-2026"
}
],
"links": [
{
"rel": "cites",
"text": "SOA"
},
{
"rel": "cites",
"text": "ISOCTRL"
}
]
},
{
"control-id": "iso27001-a.8.34",
"props": [
{
"name": "iso-id",
"value": "A.8.34"
},
{
"name": "applicability",
"value": "applicable"
},
{
"name": "evidence-layer",
"value": "linked"
},
{
"name": "implementation-status-raw",
"value": "Implemented"
},
{
"name": "control-owner",
"value": "Internal Auditor"
},
{
"name": "evidence-status",
"value": "Partial"
}
],
"links": [
{
"rel": "field-ref",
"text": "IAP"
},
{
"rel": "cites",
"text": "SOA"
},
{
"rel": "cites",
"text": "ISOCTRL"
}
]
}
]
}
Close
