The Statement of Applicability documents which Annex A controls are applied, excluded, and justified based on risk assessment. It links risk decisions to implemented safeguards and is a central document reviewed during certification audits.