ISO/IEC 27031:2025
Testing, exercise, and auditing – ISO/IEC 27031:2025

ISO/IEC 27031:2025 11.2.3: Scope of exercises

What does 11.2.3 require?

The organization should define the scope of each exercise: the services, plans, teams, sites and suppliers involved, the scenario and the disruption it simulates, the objectives and performance criteria to be measured, and the boundaries that protect live operations, so that an exercise tests what it is meant to test without causing the disruption it rehearses.

Maintained by Gerard Blokdyk

Other controls in Testing, exercise, and auditing – ISO/IEC 27031:2025

Query this from an agent

The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.