Skip to content

Glossary · Foundations

Scope

The boundaries of a management system: the parts of the organisation, locations, assets, and activities it covers.

Put the term into practice: Risk management software

The scope defines what a management system applies to and, by implication, what it does not. It names the organisational units, sites, services, and technologies that are inside the system, taking account of internal and external issues and the needs of interested parties.

A clear scope is essential for certification, because the audit and the certificate apply only to what the scope describes. A scope that is too narrow can leave real risks ungoverned.

In KaitoSec everyone works with the same terms.

Security, IT and leadership share terms, data and evidence in one system. We show you in thirty minutes.