Introduction
This document defines the scope of the Information Security Management System (ISMS) implemented in AppCan Ltd in accordance with the requirements of ISO 27001.
Scope
The ISMS applies to the entire AppCan Ltd organisation, covering all processes, systems, and assets that are relevant for ensuring the confidentiality, integrity, and availability of information. This includes, but is not limited to:
– All locations and departments of AppCan Ltd
– All information systems and networks owned or operated by AppCan Ltd
– All data processed by AppCan Ltd, regardless of the medium
– All employees and third parties who have access to AppCan Ltd information or information processing facilities
Exclusions
Any exclusions to the ISMS scope are justified and documented here. For example, certain systems or locations might be excluded if they are not under the direct control of AppCan Ltd.
Justification for Inclusions
The reasons for including certain elements within the scope are documented here. This could include legal and regulatory requirements, business needs, contractual obligations, etc.
Approval
This ISMS Scope Document is approved by the Director’s of AppCan Ltd.