ISO 27001:2024 Applicability Statement

Information security plan

The ISO 27001 Applicability Statement has become one of the most powerful information security communication tools in recent years.

In the WINPLE KIT management system, the document is also called Information Security Plan .

Provided by point 6 of the Standard, it allows the organization, and in particular the legal representative, to:

  • Declare all security controls, from Annex A , that the organization has applied
  • Provide objective documentary evidence of their integration into the organization’s processes

Declaration of applicability ISO 27001:2024 and opportunities for use

  1. Participation in public or private tenders
  2. Communication with existing or potential customers
  3. Corporate partnerships or collaborations
  4. Requests for certifications or accreditations
  5. Compliance report or audit
  6. Press releases or public communications
  7. Submissions to regulatory bodies or government authorities
  8. Involvement in research or development projects
  9. Requests for financing or investments
  10. Participation in industry events or conferences
  11. Due diligence processes for mergers or acquisitions
  12. Responses to requests for information or requests for proposals
  13. Public hearings or legislative hearings
  14. Risk Assessment or Privacy Impact Analysis (PIA)
  15. Third-party security control reviews
  16. Data access requests from customers or partners
  17. Responses to security incidents or data breaches
  18. Industry-specific regulatory compliance needs
  19. Reviews of services or products by supervisory bodies
  20. Design and development of new products or services with integrated information security requirements.


ISO 27001:2024


Complete package of manual, management procedures, safety procedures, forms, management applications, checklists and attachments.

All ready-made and fully editable and customizable content. System with integrated management of information security controls provided for in Annex A of ISO 27001 in its new 2024 version. Declaration of applicability and Information security plan.