Update Details: This file has been updated to include an additional column on the controls table to detail the reason for a control being included.The table still includes a column with the heading ‘Comments (Overview of implementation / Justification for inclusion or exclusion if not applicable)’  to allow a description for why the control was included to be detailed but the new column allows a simple code-based justification for inclusion.The default reason-for-inclusion codes added to the form are; L - Legislative, C - Contractual, B - Business Management, S - Security Best Practice - these can be modified as required. 

Files Updated: F-IMS26 Statement of Applicability