Determining the scope of the information security management system
4.3
-
Last updated
Mandatory
Catalog reference
Define and document the boundaries and applicability of the ISMS, taking account of the context, interested parties, interfaces, and dependencies with other organisations.
Narrative — how we satisfy this requirement
The ISMS scope statement names the services, the Utrecht office, and the two data centre suites, and says what stays outside it. The Management Board has approved it.