# Clause 4.3: Determining the scope of the business continuity management system

Fix and document the boundaries of the BCMS, deciding which parts of the organization and which products and services fall inside it and justifying whatever is left outside.

Cloud: The scope of the continuity system decides whether a cloud outage is inside or outside your plan. If the provider is named but its service and region are not, the plan will argue about coverage on the day it is needed.

Evidence: Approved scope statement held as documented information; Rationale for the boundary drawn; Documented exclusions with justification.

Test: Read the scope statement and ask whether a provider outage in the named region is inside it.

Citation: ISO 22301:2019, clause 4.3. Source: https://compliance.theartofservice.com/frameworks/iso-22301-2019. Last updated: 2026-10-20.