SAP Statement of Applicability states what ISO 27001, ISO 22301, ISO 27011, ISO 27017 and ISO 27018 controls and policies are being applied by the SAP Central Cloud Services cloud solution. It benchmarks against the Annex A control set in the corresponding ISO standard.