SoA should be anyways approved every year by ISMS team. That would be great to make it as a mandatory policy to be approved on platform