Management System Scope Statement
Mandatory scope statement (first doc auditors ask for)
使用方法: Write first, audit-defensive: every exclusion needs a justification an auditor can't poke through. The scope paragraph is copied verbatim onto the certificate.
预览
Management System Scope Statement
Mandatory document – ISO 9001:2015 cl.4.3 / ISO 27001:2022 cl.4.3. The scope defines what the management system covers and is the first document auditors ask for.
| Field | Value |
|---|---|
| Document ID | DOC-[QMS |
| Standard | ISO XXXXX:YYYY |
| Version | N.N |
| Approved by | Top management |
| Effective date | YYYY-MM-DD |
1. Organization
Legal entity name, locations covered.
2. Scope statement
One paragraph, quotable verbatim in the certificate:
The [QMS/ISMS] of [organization] covers [products/services/processes] delivered by [sites/departments], including [key activities and information types].
3. Boundaries
- Included: sites, processes, products, information assets
- Interfaces: dependencies on external parties at the boundary
4. Exclusions & justification
| Excluded item | Clause | Justification |
|---|---|---|
| Process/site not covered | e.g., 8.3 design | Why exclusion does not affect conformity |
5. Applicable requirements
- Statutory/regulatory requirements applying to the scope
- Contractual requirements
- Internal policies
6. Context & interested parties (ref cl.4.1/4.2)
| Interested party | Need/expectation | Addressed how |
|---|---|---|
| Customers | quality/security | processes |
| Regulators | compliance | controls |
| Staff | clarity | procedures |