Here’s a question I get surprisingly often from people preparing for ISO 27001 certification: “Does our certificate have to cover our entire organization?”
The answer is: not necessarily — and that’s completely fine.
There are t…
Your ISMS Scope and Your Certification Scope Are Not the Same Thing
