Statements of Applicability

Define here the terminology you will use to define the status of the controls (e.g. 1 = fully operational; 2 = in progress of being deployed; 3 = not yet deployed)

To complete the SOA: In the "applicable" column, simply say "Y" or "N" (or "Yes" or "No"). In the "status" column, give the status in accordance with the above scheme. In the "rationale" column, explain why the control is not applicable or reference at least one policy statement or event if it is. In the "summary of control" column, summarise the control, perhaps with a link to a documented procedure or state "N/A" if the control was not applicable (N or No in the applicable column)