Clause 4 - Context of the Organization

Clause 4 in ISO 28000:2022 requires an organization to determine the internal and external factors that affect its security and resilience objectives, identify relevant interested parties and their needs, and define the scope of its security management system, establishing the contextual basis for all subsequent requirements.