Solution : The SoA need to involve a list of your security controls from Annex A of ISO/IEC 27001. It also needs to demonstrate the steps to implement Every control, which includes any modifications or exclusions and references regarding policies, procedures, or documents. Some organizations choose to implement the standard https://lindseyj678sqn7.oneworldwiki.com/user