SAP Statement of Applicability states what ISO 27001 controls and policies are being applied by the SAP Intelligent Spend and Business Network cloud solution. It benchmarks against the Annex A control set in the ISO 27001 standard.