Scribd
Upload
239 views1 page

9-ISMS Scope Example

The scope of the ISMS applies to the provision of telephony services from its Birmingham head office, as outlined in the ISMS Statement of Applicability dated September 21, 20xx. The scope includes head office staff and assets that support this function, as well as XXX's assets at a third party data center in Wembley that are covered through a contractual agreement specifying XXX's security requirements. The physical security and utilities of the third party data center are not included in the scope.

Uploaded by

carmine evangelista
Copyright
© © All Rights Reserved
We take content rights seriously. If you suspect this is your content, claim it here.
Available Formats
Download as PDF, TXT or read online on Scribd
239 views1 page

9-ISMS Scope Example

The scope of the ISMS applies to the provision of telephony services from its Birmingham head office, as outlined in the ISMS Statement of Applicability dated September 21, 20xx. The scope includes head office staff and assets that support this function, as well as XXX's assets at a third party data center in Wembley that are covered through a contractual agreement specifying XXX's security requirements. The physical security and utilities of the third party data center are not included in the scope.

Uploaded by

carmine evangelista
Copyright
© © All Rights Reserved
We take content rights seriously. If you suspect this is your content, claim it here.
Available Formats
Download as PDF, TXT or read online on Scribd

Reference Toolkit

9. An ISMS Scope - Example


The scope of the XXX ISMS applies to the provision of telephony services to customers from
its head office in Birmingham. It covers the management of information and business
activities that support these services; in accordance with the ISMS Statement of Applicability
revision 03, dated 21/Sept/20xx.
The scope includes staff and assets that support this function based at the head office.
The scope also includes XXX’s assets that support this function based at the following third
party data centre:
• Data Hosting, Wembley
The third party Data Centre is covered by virtue of contractual agreement which specifies
XXX’s security requirements; therefore any aspect relating to the physical location (i.e.
security and utilities) of this Data Centre will not form part of the scope.

ISM02201ENGX v1.0(AD03) Jan 2022 ©The British Standards Institution 2022 1 of 1

You might also like