Evidence for 93 controls, ready every single year
Guidant AI ships with ISO/IEC 27001:2022 built in — from the Statement of Applicability through evidence, internal audit and annual surveillance, without starting over.
Screenshot: ISO 27001 Annex A controls and Statement of Applicability
New to ISO 27001? Read the guide →
What the framework asks of you
01
Decide which controls apply
For all 93 Annex A controls, record whether they're adopted or excluded and why (the Statement of Applicability, SoA).
02
Keep controls operating, with records
Certification checks that the policy is running, not just that it exists.
03
Internal audit and management review every year
Surveillance audits annually, recertification every three years.
Read more: What is ISO 27001
How Guidant AI maps to it
| Framework requirement | Guidant AI |
|---|---|
| Annex A, 93 controls | Built-in ISO/IEC 27001:2022 framework, four themes, assessment objectives per control |
| Statement of Applicability | Each control's applicability and rationale recorded in the SSP; exportable |
| Operating evidence | Tasks assigned to owners; recurring tasks reopen quarterly; evidence attached to tasks |
| A.8 technological controls | Scanning agent runs vulnerability and configuration checks; reports become evidence |
| Internal audit | Audit plan, verdicts, nonconformities and corrective actions on one platform |
| Management review | Closing report and GRC overview for the management review meeting |
| Annual surveillance | New cycle inherits the last; only changed evidence is refreshed |
Workflow
- Scope and risk assessment
- Statement of Applicability
- Implement controls and collect evidence
- Internal audit
- Corrective action
- Certification audit
- Annual surveillance
Frequently asked questions
The consultant designs and coaches the ISMS; the platform keeps it running and keeps the evidence. Most consultants use Guidant AI to serve several clients at once.
Related guides
Go to the compliance guides →