How to set ISO 27001 scope

[@JackHellson]

Very good and clear explanation

[@DejanKosutic]

Thanks :)

[@MsVersatileTej]

If mother company operat es majority of process for child company but client want to do certification for child company is it possible to do so?

[@DejanKosutic]

Yes, this is possible - in this case, the mother company is treated as a third-party supplier since they would be out of ISMS scope. This means that the child company needs to sign an agreement with the mother company where they specify clauses with security rules that the mother company needs to comply with.

[@MsVersatileTej]

@DejanKosutic thanks for explanation.