Annex A controls

Try to include as many controls as possible in your Statement of Applicability, as this increases the value of your certification.

Not all controls need to have a risk associated with them. You can also include them because of Legal and contractual requirements, or just because it is considered a Best practice.