This document is classified confidential. It contains sensitive information, unauthorized distribution could harm the organization.
If you have been busy implementing ISO 27001, but have not yet been certified, the Assurance statement can be used as a declaration to your customers. It does not have the same value as a certificate combined with the Statement of Applicability, but it will demonstrate the efforts you have taken towards information security!
This statement contains a list of all Annex A controls, justification for inclusions and exclusion and the way we have implemented them.
The information security management system applies to all internal and external employees and includes development, sales and hosting of software solutions, on the following location(s):
- Location 1: Elm Street
- Location 2: Memory Lane
- Data center 1: One Way Street
- Data center 2: Magic Roundabout