Clause 6.1.1.c Consider using the Statement of Applicability (SoA) that the organization created from Annex A for risk documentation.