SPRING DISCOUNT
Get 30% off on toolkits, course exams, and Conformio yearly plans.
Limited-time offer – ends April 25, 2024
Use promo code:
SPRING30

Expert Advice Community

Define Locations if all staff are remote

  Quote
TracyS Created:   Jul 19, 2021 Last commented:   Jul 20, 2021

Define Locations if all staff are remote

I am unsure how to define/explain a location if all staff are working from home in the Scope. Would you simply state locations as 'Various remote locations' or something different?

Assign topic to the user

ISO 27001 RISK ASSESSMENT TABLE

Implement risk register using catalogues of vulnerabilities and threats.

ISO 27001 RISK ASSESSMENT TABLE

Implement risk register using catalogues of vulnerabilities and threats.

Expert
Rhand Leal Jul 20, 2021

In terms of scope definition, you can state as location (company's headquarters) the home address of the founder / CEO of the company or the address of the office where the people accountable for the company can be found. You can define this address as the company's scope.

Regarding the remote workers, normally you do not control the environment where they are, so these are kept out of the scope, and you treat remote access as a risk in your assessment.

These articles will provide you a further explanation about defining scope:

Quote
0 0

Comment as guest or Sign in

HTML tags are not allowed

Jul 19, 2021

Jul 20, 2021