The scope should cover your whole organisation and doing so makes it much easier to answer the questions. However, we recognise that some organisations are complex and so you can describe a scope that relates to a particular subsidiary or business area of an organisation if necessary. It is important that it is a coherent entity that is logically separate from the wider organisation. It must also be technically isolated from the wider organisation, normally by using separate servers, applications and networks with boundary firewalls. If you choose a scope that is not the whole organisation, it is up to you to provide a clear scope description that is acceptable to the assessor. The scope description will appear on the certificate you receive.