SAP Statement of Applicability states what ISO 27001 controls and policies are being applied by the SAP Enterprise Cloud Services cloud solution. It benchmarks against the Annex A control set in the ISO 27001 standard.