Skip to content

Certification Scope

What is Certification Scope?

The defined boundaries of what a certification covers, including the organizational units, processes, locations, and standards included.

Audit and Assurance

What the standards actually require on certification scope

Requirements naming certification scope across 5 standards, quoted from the control text.

A certified organization may use the FSSC 22000 logo solely in marketing, for example printed matter, its website and promotional material, requesting the latest logo from their certification body and complying with the colour specifications (green PMS 348 U,...

fssc-22000::2.5.5 · Logo use →

Those who review audit reports and decide on certification shall know enough to check that the certification scope, and any change to it, is appropriate and to judge how that affects how effective the audit is, above all whether the interfaces, dependencies an...

iso-iec-27006-1-2024::7.1.3.3.1 · Report review and decision: general →

Category A must hold independent certification against iRAP (the ISM) or ISO/IEC 27001 (the questionnaire names the 2022 edition); categories B and C may choose independent certification, and it is optional but recommended for category D.

ato-digital-service-provider-dsp-operational-security-framework::CERT.IND · Independent certification (iRAP or ISO/IEC 27001) where the category requires it →

The certification scope must include the whole organisation or a clearly defined sub set with documented network and trust boundaries, and the scope must be reaffirmed at each annual cycle.

CEP-SCP-01 · Scope Definition and Whole Organisation Boundary →

The governing body should call for one or more ISMSs to be designed in support of what the entity is trying to achieve. Each ISMS's objectives either match the entity's or differ in size, scale and structure while staying aligned, and each ISMS is designed to...

iso-iec-27014-2020::8.1 · Organization and ISMS →

Questions people ask about certification scope

What is Certification Scope?
The defined boundaries of what a certification covers, including the organizational units, processes, locations, and standards included.
Why is Certification Scope important for compliance?
Certification Scope is a key concept in Audit and Assurance. Understanding certification scope helps organizations meet regulatory requirements, reduce risk, and demonstrate due diligence during audits. Our compliance platform maps 1,016 frameworks with 316K cross-framework control mappings.
Which compliance frameworks address Certification Scope?
Certification Scope appears in the requirement text of FSSC 22000 - Food Safety System Certification, ISO/IEC 27006-1:2024, ATO Digital Service Provider (DSP) Operational Security Framework, Cyber Essentials Plus, ISO/IEC 27014:2020. Across these standards we have identified 7 controls that name it directly, each linked to the control text on the compliance platform.
Where can I learn more about Certification Scope?
Explore our compliance framework pages to see how certification scope applies across different standards and regulations. Our implementation guides provide step-by-step guidance, and the compliance platform offers AI-powered analysis of how this concept maps across 1,016 frameworks.

See how Certification Scope applies across compliance frameworks

Our platform maps 1,016 frameworks with 316K cross-framework control mappings. Explore how this concept is addressed across standards.

Written and maintained by Gerard Blokdyk, The Art of Service.