SAP Statement of Applicability states what ISO 27001 controls and policies are being applied by the SAP Enterprise Management cloud solution. It benchmarks against the Annex A control set in the ISO 27001 standard.