ISO/IEC 42001 — Statement of Applicability

The standalone SoA page at /reports/iso-42001-soa presents the same 38 Annex A controls in the SoA shape auditors expect: Control · Title · Applicability · Status · Justification.

Coverage chips

Header chips computed from the canonical computeSoaCoverage helper:

Total — 38 controls
Included / Excluded — based on applicability
Implemented % — % of included controls at Full status (excludes N/A)

SoA grid

Every control is listed with its applicability (Included / Excluded), status badge, and justification. Justifications are derived by the canonical justificationFor helper, which prefers the manual justification on the row and falls back to a stable default per applicability state.

Exports & audits

DOCX — sign-off-ready, gold-header table, RhindonCyber_*_SoA_*.docx
XLSX — auditor cross-walk, gold-header, via canonical brandedXlsxBuilder
Audit code: ISO_42001_SOA_EXPORTED on every export

Tier/flag gating: Pro/Enterprise + per-org iso_42001_enabled toggle.