Answer for the devices, accounts and services covered by this assessment, including remote work and applicable personal devices. “Yes” means every applicable check in the description is in place. Choose “Not sure” when evidence is missing; use “Not applicable” only when its stated reason is true. This questionnaire does not inspect your systems.
Question 1 of 260% Complete
Control Area: Scope
Have you defined the organisation, locations and internet-connected systems covered?
Include end-user devices and all organisational cloud services. Any partial scope needs a justified, separately managed boundary agreed with the certification body; this questionnaire does not approve exclusions.