ISO 27001 · Annex A · Indian BFSI
ISO 27001 Statement of Applicability: Why 40% of Indian BFSI Audits Fail at the SoA Stage
Forty percent of Indian organisations fail ISO 27001 certification on the first attempt. The most common reason is not a weak security posture — it is a poorly constructed Statement of Applicability.
93
Annex A controls in ISO 27001:2022
40%
First-attempt certification failure rate
7
SoA failure patterns flagged most often
₹15–40L
Average certification engagement cost