4.3.2

##requirement

Key6	Value
Name	Scope of the business continuity management system
Code	4.3.2
Framework	ISO22301:2019
Section	Requirements
Category	Context of the organization
Additional_Info	-

# Description The organization shall: a) establish the parts of the organization to be included in the BCMS, taking into account its location(s), size, nature and complexity; b) identify products and services to be included in the BCMS. When defining the scope, the organization shall document and explain exclusions. They shall not affect the organization�s ability and responsibility to provide business continuity, as determined by the business impact analysis or risk assessment and applicable legal or regulatory requirements.