Clause 5.2.c Organizations should review in Annex A and their ‘Statement of Applicability’ (SoA) to see if these requirements have been addressed.