1Define

ISO 27001Governance Scope

ISO 42001AIMS Scope

AIMS Scope

Purpose

Organisational and technical boundaries of the ISMS or AIMS, including systems, activities, sites, suppliers and exclusions.

Role

ISO/IEC 27001 and 42001 Clause 4.3 require determining the boundaries and applicability of the management system. A Governance Twin is scoped to a sensitive activity; this artefact records the enterprise (or programme) boundary those twins sit inside. ISO/IEC 27001 names this Governance Scope.

This page is a stub: fields, examples and schema are still to be specified.

Links upstream

• Organisation Context
• Party Register

Links downstream

• Governed Resource
• AI System
• Applicability Profile
• Sensitive Activity

Related factors

• Govern Sensitive Activities
• Build a Governance Twin

References

• ISO/IEC 27001 Analysis — Clause 4.3
• ISO/IEC 42001 Analysis — Clause 4.3
• ISO/IEC 27001 Guidance Catalog (iso27001-4.3)