How to write the Statement of Applicability (not required for all regulations)

Once you have identified which controls are or are not in-scope for certification/compliance, you can add a written 

statement qualifying your choice. 

1. Go to Applicability in the Compliance Module
2. Click on any of the SOA/Controls that you have identified as Applicable/Not Applicable
3. Click Edit and add your statement
4. Click Save