Scope Statement
What is Scope Statement?
A document that defines the boundaries and applicability of a management system, audit, or compliance programme. The scope statement specifies which organisational units, processes, locations, and information assets are included.
Frameworks that govern scope statement
What the standards actually require on scope statement
Requirements naming scope statement across 6 standards, quoted from the control text.
Every facility needs a written emergency plan that is built and kept up to date. It records how the organisation, its systems and its tactics respond to emergencies, and covers prevention, preparedness, mitigation, preparing and preventing activities such as t...
as-3745-2010-planning-for-emergencies-in-facilities::3.1-3.4 · Develop a facility emergency plan from an analysis of the emergencies that could occur →Operate an information security management system aligned to ISO/IEC 27001 covering the organisational units, sites and processes that deliver the cloud service, and retain documented scope, statement of applicability and the latest management review results.
C5-OIS-01 · Information Security Management System (ISMS) →The organisation sets the boundaries and the applicability of its system, taking the issues from 4.1 and the requirements from 4.2 into account, and keeps the scope as documented information.
iso-20121-2024::4.3 · 4.3 Determining the scope of the event sustainability management system →Scoping sets where the BCMS applies and where it stops, so that every relevant product and service, activity, site, resource and supplier, and every change bearing on the BCMS, is caught.
iso-22313-2020-guidance-on-business-continuity-management-systems::4.3.1 · 4.3.1 Determining the scope of the BCMS: general →The organization fixes the boundaries of the SMS and what it applies to. In doing so it takes account of the issues found under 4.1, the requirements found under 4.2 and the services it delivers.
iso-iec-20000-1-2018::4.3 · 4.3 Determining the scope of the service management system →A community needs a common interest or other relationship that defines the scope of the sensitive information shared, such as one market sector with membership limited to that sector, a geographical location or common ownership, and it needs trust between memb...
iso-iec-27010-2015::4.2 · Information sharing communities →Questions people ask about scope statement
What is Scope Statement?
Why is Scope Statement important for compliance?
Which compliance frameworks address Scope Statement?
Where can I learn more about Scope Statement?
See how Scope Statement applies across compliance frameworks
Our platform maps 1,016 frameworks with 316K cross-framework control mappings. Explore how this concept is addressed across standards.