To set its scope, the organization decides where the environmental management system's boundaries lie and what it applies to, taking into account the internal and external issues identified under 4.1, the compliance obligations identified under 4.2, its physical boundaries, functions and organizational units, what it does and the products and services it provides, and the extent of its power and capacity to exercise control and influence. With the scope set, every activity, product and service inside it is covered by the system. The scope is kept as documented information and made available to interested parties.
This control maps to 11 controls across 11 other frameworks. If you already hold one of them, the evidence you collected for it is the starting point here rather than new work.
Every mapping shown was judged rather than inferred from wording similarity, and the ones that failed review are published too. See the coverage reports and what was rejected.
The graph holds this control, the 11 it maps to, and the evidence behind each claim, over MCP and REST.