4.3 Determining the scope of the BCMS

It outlines how organizations define the boundaries and applicability of their Business Continuity Management System, considering internal and external issues, products, services, and locations. The scope must be documented, aligned with the organization's context, and reviewed for relevance and compliance.