The Statement of Applicability is the ISO 27001 document listing every Annex A control, whether it applies to the organization, the justification for including or excluding it, and its implementation status. It is the central artifact a certification auditor works from.