{"id":9930,"date":"2022-12-07T13:16:07","date_gmt":"2022-12-07T12:16:07","guid":{"rendered":"https:\/\/compleye.io\/?p=9930"},"modified":"2026-10-02T11:14:28","modified_gmt":"2026-10-02T09:14:28","slug":"iso-27001-declaracion-de-alcance","status":"publish","type":"post","link":"https:\/\/compleye.io\/es\/articulos\/iso-27001-declaracion-de-alcance\/","title":{"rendered":"C\u00f3mo redactar una declaraci\u00f3n de alcance de la norma ISO 27001 (+3 ejemplos)"},"content":{"rendered":"<div data-elementor-type=\"wp-post\" data-elementor-id=\"9930\" class=\"elementor elementor-9930\" data-elementor-post-type=\"post\">\n\t\t\t\t<div class=\"elementor-element elementor-element-f23b361 e-flex e-con-boxed e-con e-parent\" data-id=\"f23b361\" data-element_type=\"container\">\n\t\t\t\t\t<div class=\"e-con-inner\">\n\t\t\t\t<div class=\"elementor-element elementor-element-268e9b8 elementor-widget elementor-widget-text-editor\" data-id=\"268e9b8\" data-element_type=\"widget\" data-widget_type=\"text-editor.default\">\n\t\t\t\t\t\t\t\t\t\n<p class=\"wp-block-paragraph\">Declaraci\u00f3n del alcance de la norma ISO 27001... suena mucho m\u00e1s grande de lo que es. En realidad, crear una es bastante sencillo. En esta gu\u00eda de declaraci\u00f3n del alcance, le explicamos el qu\u00e9, el c\u00f3mo y el por qu\u00e9 de redactar una declaraci\u00f3n del alcance de la norma ISO 27001.\u00a0<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">Hemos a\u00f1adido unos cuantos ejemplos, una plantilla descargable y un v\u00eddeo superguay e informativo protagonizado por nuestra propia innovadora en materia de cumplimiento, Mari E. Curious.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">\u00bfQu\u00e9 m\u00e1s se puede pedir?<\/p>\n\n\n\n<figure class=\"wp-block-embed is-type-video is-provider-youtube wp-block-embed-youtube wp-embed-aspect-16-9 wp-has-aspect-ratio\"><div class=\"wp-block-embed__wrapper\">\n<iframe title=\"C\u00f3mo redactar declaraciones de alcance de ISO 27001\" width=\"750\" height=\"422\" src=\"https:\/\/www.youtube.com\/embed\/aAR-ARyChns?feature=oembed&enablejsapi=1&origin=https:\/\/compleye.io\" frameborder=\"0\" allow=\"accelerometer; autoplay; clipboard-write; encrypted-media; gyroscope; picture-in-picture; web-share\" allowfullscreen><\/iframe>\n<\/div><figcaption class=\"wp-element-caption\">Meri E. Curiosidad sobre las declaraciones de alcance de la norma ISO 27001<\/figcaption><\/figure>\n\n\n\n<h2 class=\"wp-block-heading\">\u00bfPor qu\u00e9 necesita una declaraci\u00f3n de alcance?<\/h2>\n\n\n\n<p class=\"wp-block-paragraph\">En su art\u00edculo '<a href=\"https:\/\/www.tuvsud.com\/en\/services\/auditing-and-system-certification\/iso-27001\" target=\"_blank\" rel=\"noreferrer noopener\">Certificaci\u00f3n ISO IEC 27001<\/a>TUV afirma que las organizaciones implantan un SGSI para:<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">\"Proteger los datos cruciales para la empresa, mitigar los riesgos y garantizar la estabilidad de las operaciones, ofrecer confianza a las partes interesadas y a los clientes\".<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">La declaraci\u00f3n del alcance de la norma ISO 27001 es un compromiso y un reflejo de esta ambici\u00f3n. Adem\u00e1s, no solo es la \u00fanica informaci\u00f3n obligatoria que debe proporcionar dentro del segmento de alcance de la norma, sino tambi\u00e9n la m\u00e1s importante.&nbsp;<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">Seg\u00fan <a href=\"https:\/\/bestpractice.biz\/\" target=\"_blank\" rel=\"noreferrer noopener\">Buenas pr\u00e1cticas<\/a>El concepto que subyace a la declaraci\u00f3n del \u00e1mbito de aplicaci\u00f3n es que entiendas lo siguiente:<\/p>\n\n\n\n<ul class=\"wp-block-list\">\n<li>Leyes y reglamentos que debe cumplir<\/li>\n\n\n\n<li>Interfaces y dependencias que tiene con otros modelos<\/li>\n\n\n\n<li>Cuestiones internas y externas relevantes para la seguridad de la informaci\u00f3n de su SGSI<\/li>\n\n\n\n<li>Procesos y controles de seguridad necesarios para el funcionamiento de su empresa<\/li>\n<\/ul>\n\n\n\n<p class=\"wp-block-paragraph\">La declaraci\u00f3n del alcance de la norma ISO 27001 define:<\/p>\n\n\n\n<ul class=\"wp-block-list\">\n<li>A qu\u00e9 se dedica su empresa.<\/li>\n\n\n\n<li>Qu\u00e9 informaci\u00f3n importante cubre el SGSI.&nbsp;<\/li>\n\n\n\n<li>Por qu\u00e9 la seguridad es importante para su organizaci\u00f3n.<\/li>\n\n\n\n<li>Qu\u00e9 partes de su empresa est\u00e1n certificadas.&nbsp;<\/li>\n<\/ul>\n\n\n\n<p class=\"wp-block-paragraph\">Es lo que aparece en su certificado ISO 27001 para todo el mundo (bueno, no <em>todos<\/em> el mundo, pero ya sabe a qu\u00e9 nos referimos) para ver.&nbsp;<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">En resumen, es lo que les importa a sus clientes cuando se trata de seguridad.<\/p>\n\n\n\n<h2 class=\"wp-block-heading\">\u00bfCu\u00e1l es el alcance de la norma ISO 27001?<\/h2>\n\n\n\n<p class=\"wp-block-paragraph\">El propio alcance de la norma ISO 27001 define todo lo que est\u00e1 protegido por su SGSI, desde los datos hasta los productos, desde los procesos hasta los servicios, desde los sistemas hasta las zonas geogr\u00e1ficas. Tambi\u00e9n define todo lo que no est\u00e1 protegido.&nbsp;<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">Para compilar correctamente el alcance de su organizaci\u00f3n, debe determinar los l\u00edmites y la aplicabilidad del SGSI.&nbsp;<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">Esto significa examinar todos los problemas externos e internos que encontrar\u00e1 definidos en la cl\u00e1usula 4.1 de <a href=\"https:\/\/www.iso.org\/standard\/82875.html\">la norma ISO 27001<\/a>Comprender las necesidades y expectativas de las partes interesadas (4.2) y determinar los v\u00ednculos entre las actividades realizadas por su organizaci\u00f3n y las organizaciones externas.&nbsp;<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">Examinar y comprender qu\u00e9 partes de la empresa participan en la creaci\u00f3n, el acceso o el procesamiento de sus valiosos activos de informaci\u00f3n, y llevar a cabo una evaluaci\u00f3n de riesgos le mantendr\u00e1 en el buen camino a la hora de definir el alcance de su SGSI.<\/p>\n\n\n\n<h2 class=\"wp-block-heading\">\u00bfPor qu\u00e9 es tan importante definir el alcance de la norma ISO 27001?<\/h2>\n\n\n\n<p class=\"wp-block-paragraph\">Todo lo que entre en su \u00e1mbito de aplicaci\u00f3n debe estar cubierto por su SGSI; todo lo que quede fuera del \u00e1mbito de aplicaci\u00f3n no tiene por qu\u00e9 estar cubierto por su SGSI. <\/p>\n\n\n\n<p class=\"wp-block-paragraph\">Por tanto, si deja fuera del alcance algo que deber\u00eda haber estado en \u00e9l, podr\u00eda acabar con algunos problemas de seguridad no deseados, datos desprotegidos y clientes y\/o partes interesadas insatisfechos.&nbsp;<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">Si incluyes en el alcance algo que no es necesario, est\u00e1s dando m\u00e1s trabajo a tu equipo y, potencialmente, gastando dinero que realmente no necesitas. Adem\u00e1s, un alcance demasiado amplio no es \u00e1gil en t\u00e9rminos de permitir cambios en tecnolog\u00edas y caracter\u00edsticas.&nbsp;<\/p>\n\n\n\n<h2 class=\"wp-block-heading\">\u00bfC\u00f3mo se redacta una declaraci\u00f3n de alcance para la norma ISO 27001?<\/h2>\n\n\n\n<p class=\"wp-block-paragraph\">Su declaraci\u00f3n de alcance es un resumen de su alcance y debe dejar claro a sus clientes que lo que le est\u00e1n comprando, ya sea un producto o un servicio, est\u00e1 cubierto por su SGSI.&nbsp;<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">Adem\u00e1s, al redactar su declaraci\u00f3n de alcance, responda a las siguientes preguntas:<\/p>\n\n\n\n<ol class=\"wp-block-list\">\n<li>\u00bfQu\u00e9 hace mi organizaci\u00f3n?<\/li>\n\n\n\n<li>\u00bfQu\u00e9 productos o servicios entran en el \u00e1mbito de aplicaci\u00f3n?<\/li>\n\n\n\n<li>\u00bfQu\u00e9 informaci\u00f3n debemos proteger?<\/li>\n\n\n\n<li>\u00bfQu\u00e9 procesos est\u00e1n asociados a esa informaci\u00f3n?<\/li>\n\n\n\n<li>\u00bfHay exclusiones (lugares, procesos, etc.) que puedan quedar fuera del \u00e1mbito de aplicaci\u00f3n?<\/li>\n<\/ol>\n\n\n\n<p class=\"wp-block-paragraph\">Apliquemos estas preguntas a una empresa ficticia para ver c\u00f3mo funcionan para dar forma a una declaraci\u00f3n de alcance. Llamaremos a la empresa FindMyPet.<\/p>\n\n\n\n<ol class=\"wp-block-list\">\n<li>\u00bfQu\u00e9 hace mi organizaci\u00f3n?<\/li>\n<\/ol>\n\n\n\n<p class=\"wp-block-paragraph\">FindMyPet re\u00fane a mascotas y due\u00f1os...<\/p>\n\n\n\n<ol class=\"wp-block-list\" start=\"2\">\n<li>\u00bfQu\u00e9 productos o servicios entran en el \u00e1mbito de aplicaci\u00f3n?<\/li>\n<\/ol>\n\n\n\n<p class=\"wp-block-paragraph\">... utilizando tecnolog\u00eda de esc\u00e1ner y microchips...<\/p>\n\n\n\n<ol class=\"wp-block-list\" start=\"3\">\n<li>\u00bfQu\u00e9 informaci\u00f3n debemos proteger?<\/li>\n<\/ol>\n\n\n\n<p class=\"wp-block-paragraph\">...que almacenan datos personales de los clientes (nombre, direcci\u00f3n f\u00edsica, n\u00famero de tel\u00e9fono)...<\/p>\n\n\n\n<ol class=\"wp-block-list\" start=\"4\">\n<li>\u00bfQu\u00e9 procesos est\u00e1n asociados a esa informaci\u00f3n?<\/li>\n<\/ol>\n\n\n\n<p class=\"wp-block-paragraph\">...que tambi\u00e9n se almacena en una base de datos central ubicada en nuestras oficinas de Dogtown...<\/p>\n\n\n\n<ol class=\"wp-block-list\" start=\"5\">\n<li>\u00bfHay exclusiones (lugares, procesos, etc.) que puedan quedar fuera del \u00e1mbito de aplicaci\u00f3n?<\/li>\n<\/ol>\n\n\n\n<p class=\"wp-block-paragraph\">...al que s\u00f3lo puede acceder nuestro departamento inform\u00e1tico.&nbsp;<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">Todos juntos ahora:<\/p>\n\n\n\n<p class=\"wp-block-paragraph\"><em>FindMyPet re\u00fane a mascotas y due\u00f1os utilizando tecnolog\u00eda de esc\u00e1ner y microchips que almacenan los datos personales de los clientes (nombre, direcci\u00f3n f\u00edsica, n\u00famero de tel\u00e9fono) que se guardan en una base de datos central situada en nuestras oficinas de Dogtown a la que s\u00f3lo puede acceder nuestro departamento inform\u00e1tico.&nbsp;<\/em><\/p>\n\n\n\n<h2 class=\"wp-block-heading\">Errores comunes a los que debe prestar atenci\u00f3n al crear su declaraci\u00f3n de alcance<\/h2>\n\n\n\n<p class=\"wp-block-paragraph\">Como con todo lo relacionado con la ISO, siempre debe tener en cuenta lo siguiente <a href=\"https:\/\/compleye.io\/es\/articulos\/iso-27001-certification-common-pitfalls\/\">posibles escollos<\/a>. Aunque la declaraci\u00f3n del \u00e1mbito de aplicaci\u00f3n es un trabajo sencillo y breve, debe ser precisa y clara, excluyendo los elementos superfluos e incluyendo todo lo que considere digno de protecci\u00f3n del SGSI.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">No saber qu\u00e9 informaci\u00f3n almacena, procesa y gestiona su organizaci\u00f3n puede llevarle a omitir un elemento vital de su declaraci\u00f3n. <\/p>\n\n\n\n<p class=\"wp-block-paragraph\">Para asegurarse de que sabe todo lo que hay que saber sobre los datos que maneja su empresa, puede que le interese asistir a <a href=\"https:\/\/compleye.io\/es\/sessions\/\">sesiones de cumplimiento profesional.<\/a>&nbsp;<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">Todo lo que queda fuera del \u00e1mbito definido se considera inseguro, por lo que dejar fuera cualquier cosa que su cliente no quiera comprar porque no ha sido certificada no es un buen plan.&nbsp;<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">Su declaraci\u00f3n de alcance no debe ser ni demasiado ambiciosa ni demasiado ambigua. No apunte demasiado alto e incluya todos los departamentos, todas las personas y hasta el \u00faltimo dato. Al mismo tiempo, no intentes reducir los costes de implantaci\u00f3n limitando el alcance.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\"><em>Lea tambi\u00e9n: <a href=\"https:\/\/compleye.io\/es\/articulos\/top-iso-27001-certification-software-tools\/\">Las 10 mejores herramientas de software para la certificaci\u00f3n ISO 27001<\/a><\/em><\/p>\n\n\n\n<h2 class=\"wp-block-heading\">Ejemplos de buenas declaraciones de alcance ISO 27001<\/h2>\n\n\n\n<p class=\"wp-block-paragraph\">Para ayudarle a iniciar su propia declaraci\u00f3n de alcance, aqu\u00ed tiene algunos ejemplos de buenas declaraciones de alcance. Como puede ver, aparecen en el certificado ISO 27001 y remiten a la declaraci\u00f3n de aplicabilidad.<\/p>\n\n\n\n<h3 class=\"wp-block-heading\">1. Declaraci\u00f3n del alcance de la norma ISO 27001 de BSI<\/h3>\n\n\n\n<figure class=\"wp-block-image size-full\"><img fetchpriority=\"high\" decoding=\"async\" width=\"588\" height=\"832\" src=\"https:\/\/compleye.io\/wp-content\/uploads\/2022\/11\/BSI-example-good-ISO-27001-scope-statement.webp\" alt=\"\" class=\"wp-image-9931\" srcset=\"https:\/\/compleye.io\/wp-content\/uploads\/2022\/11\/BSI-example-good-ISO-27001-scope-statement.webp 588w, https:\/\/compleye.io\/wp-content\/uploads\/2022\/11\/BSI-example-good-ISO-27001-scope-statement-212x300.webp 212w\" sizes=\"(max-width: 588px) 100vw, 588px\" \/><figcaption class=\"wp-element-caption\">Certificado ISO 27001 de BSI y declaraci\u00f3n de alcance<\/figcaption><\/figure>\n\n\n\n<p class=\"wp-block-paragraph\">En nuestro primer ejemplo se puede ver claramente que el SGSI de Online Computer Library Center se aplica a las actividades de seguridad de la informaci\u00f3n asociadas a los servicios de gesti\u00f3n, compartici\u00f3n de recursos, servicios de metadatos, descubrimiento y referencia e informe de infraestructura interna de la empresa. Observe c\u00f3mo se hace referencia a la Declaraci\u00f3n de Aplicabilidad.<\/p>\n\n\n\n<h3 class=\"wp-block-heading\">2. Declaraci\u00f3n de alcance ISO 27001 de MGM Technology Partners<\/h3>\n\n\n\n<figure class=\"wp-block-image size-large\"><img decoding=\"async\" width=\"721\" height=\"1024\" src=\"https:\/\/compleye.io\/wp-content\/uploads\/2022\/11\/MGM-example-good-ISO-27001-scope-statement-721x1024.webp\" alt=\"\" class=\"wp-image-9932\" srcset=\"https:\/\/compleye.io\/wp-content\/uploads\/2022\/11\/MGM-example-good-ISO-27001-scope-statement-721x1024.webp 721w, https:\/\/compleye.io\/wp-content\/uploads\/2022\/11\/MGM-example-good-ISO-27001-scope-statement-211x300.webp 211w, https:\/\/compleye.io\/wp-content\/uploads\/2022\/11\/MGM-example-good-ISO-27001-scope-statement-768x1091.webp 768w, https:\/\/compleye.io\/wp-content\/uploads\/2022\/11\/MGM-example-good-ISO-27001-scope-statement-600x852.webp 600w, https:\/\/compleye.io\/wp-content\/uploads\/2022\/11\/MGM-example-good-ISO-27001-scope-statement.webp 770w\" sizes=\"(max-width: 721px) 100vw, 721px\" \/><figcaption class=\"wp-element-caption\">Certificado ISO 27001 de MGM<\/figcaption><\/figure>\n\n\n\n<p class=\"wp-block-paragraph\">MGM expone la naturaleza de su actividad (asesoramiento a clientes del sector p\u00fablico, seguros y comercio electr\u00f3nico sobre la digitalizaci\u00f3n de sus procesos empresariales e inform\u00e1ticos; desarrollo de software para aplicaciones cr\u00edticas para la empresa, consultor\u00eda de gesti\u00f3n para departamentos especializados e inform\u00e1ticos y pruebas e implantaci\u00f3n de seguridad web).&nbsp;<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">Sin embargo, no indican expl\u00edcitamente a qu\u00e9 se aplica el SGSI. Podemos suponer, por tanto, que su SGSI abarca todo lo relacionado con todas sus actividades y productos.<\/p>\n\n\n\n<h3 class=\"wp-block-heading\">3. Declaraci\u00f3n del alcance de la norma ISO 27001 de Monday.com<\/h3>\n\n\n\n<figure class=\"wp-block-image size-large\"><img decoding=\"async\" width=\"1024\" height=\"740\" src=\"https:\/\/compleye.io\/wp-content\/uploads\/2022\/11\/Monday-com-good-example-ISO-27000-scope-statement-1024x740.webp\" alt=\"\" class=\"wp-image-9933\" srcset=\"https:\/\/compleye.io\/wp-content\/uploads\/2022\/11\/Monday-com-good-example-ISO-27000-scope-statement-1024x740.webp 1024w, https:\/\/compleye.io\/wp-content\/uploads\/2022\/11\/Monday-com-good-example-ISO-27000-scope-statement-300x217.webp 300w, https:\/\/compleye.io\/wp-content\/uploads\/2022\/11\/Monday-com-good-example-ISO-27000-scope-statement-768x555.webp 768w, https:\/\/compleye.io\/wp-content\/uploads\/2022\/11\/Monday-com-good-example-ISO-27000-scope-statement-600x434.webp 600w, https:\/\/compleye.io\/wp-content\/uploads\/2022\/11\/Monday-com-good-example-ISO-27000-scope-statement.webp 1379w\" sizes=\"(max-width: 1024px) 100vw, 1024px\" \/><figcaption class=\"wp-element-caption\">Certificado ISO 27001 de Monday.com<\/figcaption><\/figure>\n\n\n\n<p class=\"wp-block-paragraph\">La declaraci\u00f3n de alcance de Monday.com es muy clara. Su SGSI se aplica al departamento de operaciones de TI relacionadas con el desarrollo, la comercializaci\u00f3n, la venta, la promoci\u00f3n, el soporte y el dise\u00f1o de un sistema operativo de trabajo para gestionar el trabajo en equipo, ejecutar flujos de trabajo y procesos, y alojar contenidos y archivos.<\/p>\n\n\n\n<h2 class=\"wp-block-heading\">Plantilla de declaraci\u00f3n del alcance de la norma ISO 27001 (descargar)<\/h2>\n\n\n\n<p class=\"wp-block-paragraph\">Hemos elaborado una plantilla b\u00e1sica de declaraci\u00f3n del alcance de la norma ISO 27001 que puede utilizar. <\/p>\n\n\n\n<figure class=\"wp-block-image size-large\"><img loading=\"lazy\" decoding=\"async\" width=\"699\" height=\"1024\" src=\"https:\/\/compleye.io\/wp-content\/uploads\/2022\/11\/Template-ISO-27001-scope-statement-699x1024.webp\" alt=\"\" class=\"wp-image-9934\" srcset=\"https:\/\/compleye.io\/wp-content\/uploads\/2022\/11\/Template-ISO-27001-scope-statement-699x1024.webp 699w, https:\/\/compleye.io\/wp-content\/uploads\/2022\/11\/Template-ISO-27001-scope-statement-205x300.webp 205w, https:\/\/compleye.io\/wp-content\/uploads\/2022\/11\/Template-ISO-27001-scope-statement-768x1126.webp 768w, https:\/\/compleye.io\/wp-content\/uploads\/2022\/11\/Template-ISO-27001-scope-statement-600x880.webp 600w, https:\/\/compleye.io\/wp-content\/uploads\/2022\/11\/Template-ISO-27001-scope-statement.webp 966w\" sizes=\"(max-width: 699px) 100vw, 699px\" \/><figcaption class=\"wp-element-caption\">Un modelo b\u00e1sico de declaraci\u00f3n del alcance de la norma ISO 27001<\/figcaption><\/figure>\n\n\n\n<p class=\"wp-block-paragraph\">Este modelo puede utilizarse como plantilla para \"rellenar los huecos\" o como gu\u00eda para crear su propia declaraci\u00f3n de alcance.<\/p>\n\n\n\n<h2 class=\"wp-block-heading\">No se demore, redacte hoy mismo el alcance de la norma ISO 27001.&nbsp;<\/h2>\n\n\n\n<p class=\"wp-block-paragraph\">Por \u00faltimo, se necesita tiempo para ser breve, as\u00ed que empiece a elaborar su declaraci\u00f3n de alcance lo antes posible. Recuerda no ser demasiado ambicioso ni demasiado ambiguo y aseg\u00farate de que entiendes qu\u00e9 informaci\u00f3n maneja tu empresa.\u00a0<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">Para obtener ayuda de profesionales o empezar a utilizar la mejor herramienta de cumplimiento DIY del mercado actual, <a href=\"https:\/\/compleye.io\/es\/demo\/?month=2022-11\">reserve una demostraci\u00f3n con Compleye<\/a>.&nbsp;<\/p>\n\t\t\t\t\t\t\t\t<\/div>\n\t\t<div class=\"elementor-element elementor-element-023fc33 e-con-full e-flex e-con e-child\" data-id=\"023fc33\" data-element_type=\"container\">\n\t\t\t\t<div class=\"elementor-element elementor-element-c8f9d68 elementor-widget elementor-widget-heading\" data-id=\"c8f9d68\" data-element_type=\"widget\" data-widget_type=\"heading.default\">\n\t\t\t\t\t<h2 class=\"elementor-heading-title elementor-size-default\">Frequently Asked Questions<\/h2>\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-1ca472b elementor-widget elementor-widget-n-accordion\" data-id=\"1ca472b\" data-element_type=\"widget\" data-settings=\"{&quot;default_state&quot;:&quot;expanded&quot;,&quot;max_items_expended&quot;:&quot;one&quot;,&quot;n_accordion_animation_duration&quot;:{&quot;unit&quot;:&quot;ms&quot;,&quot;size&quot;:400,&quot;sizes&quot;:[]}}\" data-widget_type=\"nested-accordion.default\">\n\t\t\t\t\t\t\t<div class=\"e-n-accordion\" aria-label=\"Accordion. Open links with Enter or Space, close with Escape, and navigate with Arrow Keys\">\n\t\t\t\t\t\t<details id=\"e-n-accordion-item-3000\" class=\"e-n-accordion-item\" open>\n\t\t\t\t<summary class=\"e-n-accordion-item-title\" data-accordion-index=\"1\" tabindex=\"0\" aria-expanded=\"true\" aria-controls=\"e-n-accordion-item-3000\" >\n\t\t\t\t\t<span class='e-n-accordion-item-title-header'><h2 class=\"e-n-accordion-item-title-text\"> What is an ISO 27001 scope statement? <\/h2><\/span>\n\t\t\t\t\t\t\t<span class='e-n-accordion-item-title-icon'>\n\t\t\t<span class='e-opened' ><svg aria-hidden=\"true\" class=\"e-font-icon-svg e-fas-minus\" viewbox=\"0 0 448 512\" xmlns=\"http:\/\/www.w3.org\/2000\/svg\"><path d=\"M416 208H32c-17.67 0-32 14.33-32 32v32c0 17.67 14.33 32 32 32h384c17.67 0 32-14.33 32-32v-32c0-17.67-14.33-32-32-32z\"><\/path><\/svg><\/span>\n\t\t\t<span class='e-closed'><svg aria-hidden=\"true\" class=\"e-font-icon-svg e-fas-plus\" viewbox=\"0 0 448 512\" xmlns=\"http:\/\/www.w3.org\/2000\/svg\"><path d=\"M416 208H272V64c0-17.67-14.33-32-32-32h-32c-17.67 0-32 14.33-32 32v144H32c-17.67 0-32 14.33-32 32v32c0 17.67 14.33 32 32 32h144v144c0 17.67 14.33 32 32 32h32c17.67 0 32-14.33 32-32V304h144c17.67 0 32-14.33 32-32v-32c0-17.67-14.33-32-32-32z\"><\/path><\/svg><\/span>\n\t\t<\/span>\n\n\t\t\t\t\t\t<\/summary>\n\t\t\t\t<div role=\"region\" aria-labelledby=\"e-n-accordion-item-3000\" class=\"elementor-element elementor-element-98f80a2 e-con-full e-flex e-con e-child\" data-id=\"98f80a2\" data-element_type=\"container\">\n\t\t\t\t<div class=\"elementor-element elementor-element-dc55bf1 elementor-widget elementor-widget-text-editor\" data-id=\"dc55bf1\" data-element_type=\"widget\" data-widget_type=\"text-editor.default\">\n\t\t\t\t\t\t\t\t\t<p>An ISO 27001 scope statement is a short summary of what an organisation&#8217;s information security management system (ISMS) covers: what the business does, which products, services and information are protected, and which parts of the business are certified. The scope statement appears on the ISO 27001 certificate, so customers can see exactly what the certification applies to.<\/p>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t<\/details>\n\t\t\t\t\t\t<details id=\"e-n-accordion-item-3001\" class=\"e-n-accordion-item\" >\n\t\t\t\t<summary class=\"e-n-accordion-item-title\" data-accordion-index=\"2\" tabindex=\"-1\" aria-expanded=\"false\" aria-controls=\"e-n-accordion-item-3001\" >\n\t\t\t\t\t<span class='e-n-accordion-item-title-header'><h2 class=\"e-n-accordion-item-title-text\"> What should an ISO 27001 scope statement include? <\/h2><\/span>\n\t\t\t\t\t\t\t<span class='e-n-accordion-item-title-icon'>\n\t\t\t<span class='e-opened' ><svg aria-hidden=\"true\" class=\"e-font-icon-svg e-fas-minus\" viewbox=\"0 0 448 512\" xmlns=\"http:\/\/www.w3.org\/2000\/svg\"><path d=\"M416 208H32c-17.67 0-32 14.33-32 32v32c0 17.67 14.33 32 32 32h384c17.67 0 32-14.33 32-32v-32c0-17.67-14.33-32-32-32z\"><\/path><\/svg><\/span>\n\t\t\t<span class='e-closed'><svg aria-hidden=\"true\" class=\"e-font-icon-svg e-fas-plus\" viewbox=\"0 0 448 512\" xmlns=\"http:\/\/www.w3.org\/2000\/svg\"><path d=\"M416 208H272V64c0-17.67-14.33-32-32-32h-32c-17.67 0-32 14.33-32 32v144H32c-17.67 0-32 14.33-32 32v32c0 17.67 14.33 32 32 32h144v144c0 17.67 14.33 32 32 32h32c17.67 0 32-14.33 32-32V304h144c17.67 0 32-14.33 32-32v-32c0-17.67-14.33-32-32-32z\"><\/path><\/svg><\/span>\n\t\t<\/span>\n\n\t\t\t\t\t\t<\/summary>\n\t\t\t\t<div role=\"region\" aria-labelledby=\"e-n-accordion-item-3001\" class=\"elementor-element elementor-element-db9f021 e-con-full e-flex e-con e-child\" data-id=\"db9f021\" data-element_type=\"container\">\n\t\t\t\t<div class=\"elementor-element elementor-element-2aa25c7 elementor-widget elementor-widget-text-editor\" data-id=\"2aa25c7\" data-element_type=\"widget\" data-widget_type=\"text-editor.default\">\n\t\t\t\t\t\t\t\t\t<p>An ISO 27001 scope statement should state what the organisation does, which products or services are in scope, which information needs protecting, which processes handle that information, and any exclusions such as locations or departments. Answering these five questions in one or two clear sentences produces a scope statement that customers and auditors can understand.<\/p>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t<\/details>\n\t\t\t\t\t\t<details id=\"e-n-accordion-item-3002\" class=\"e-n-accordion-item\" >\n\t\t\t\t<summary class=\"e-n-accordion-item-title\" data-accordion-index=\"3\" tabindex=\"-1\" aria-expanded=\"false\" aria-controls=\"e-n-accordion-item-3002\" >\n\t\t\t\t\t<span class='e-n-accordion-item-title-header'><h2 class=\"e-n-accordion-item-title-text\"> What are the most common mistakes when writing an ISO 27001 scope statement? <\/h2><\/span>\n\t\t\t\t\t\t\t<span class='e-n-accordion-item-title-icon'>\n\t\t\t<span class='e-opened' ><svg aria-hidden=\"true\" class=\"e-font-icon-svg e-fas-minus\" viewbox=\"0 0 448 512\" xmlns=\"http:\/\/www.w3.org\/2000\/svg\"><path d=\"M416 208H32c-17.67 0-32 14.33-32 32v32c0 17.67 14.33 32 32 32h384c17.67 0 32-14.33 32-32v-32c0-17.67-14.33-32-32-32z\"><\/path><\/svg><\/span>\n\t\t\t<span class='e-closed'><svg aria-hidden=\"true\" class=\"e-font-icon-svg e-fas-plus\" viewbox=\"0 0 448 512\" xmlns=\"http:\/\/www.w3.org\/2000\/svg\"><path d=\"M416 208H272V64c0-17.67-14.33-32-32-32h-32c-17.67 0-32 14.33-32 32v144H32c-17.67 0-32 14.33-32 32v32c0 17.67 14.33 32 32 32h144v144c0 17.67 14.33 32 32 32h32c17.67 0 32-14.33 32-32V304h144c17.67 0 32-14.33 32-32v-32c0-17.67-14.33-32-32-32z\"><\/path><\/svg><\/span>\n\t\t<\/span>\n\n\t\t\t\t\t\t<\/summary>\n\t\t\t\t<div role=\"region\" aria-labelledby=\"e-n-accordion-item-3002\" class=\"elementor-element elementor-element-57a705e e-con-full e-flex e-con e-child\" data-id=\"57a705e\" data-element_type=\"container\">\n\t\t\t\t<div class=\"elementor-element elementor-element-e581a56 elementor-widget elementor-widget-text-editor\" data-id=\"e581a56\" data-element_type=\"widget\" data-widget_type=\"text-editor.default\">\n\t\t\t\t\t\t\t\t\t<p>The most common ISO 27001 scope statement mistakes are making the scope too broad, making it too narrow, and not knowing what information the organisation actually handles. A scope that is too broad adds cost and work. A scope that is too narrow leaves out products or data that customers expect to be certified.<\/p>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t<\/details>\n\t\t\t\t\t\t<details id=\"e-n-accordion-item-3003\" class=\"e-n-accordion-item\" >\n\t\t\t\t<summary class=\"e-n-accordion-item-title\" data-accordion-index=\"4\" tabindex=\"-1\" aria-expanded=\"false\" aria-controls=\"e-n-accordion-item-3003\" >\n\t\t\t\t\t<span class='e-n-accordion-item-title-header'><h2 class=\"e-n-accordion-item-title-text\"> What is the difference between an ISO 27001 scope statement and a Statement of Applicability? <\/h2><\/span>\n\t\t\t\t\t\t\t<span class='e-n-accordion-item-title-icon'>\n\t\t\t<span class='e-opened' ><svg aria-hidden=\"true\" class=\"e-font-icon-svg e-fas-minus\" viewbox=\"0 0 448 512\" xmlns=\"http:\/\/www.w3.org\/2000\/svg\"><path d=\"M416 208H32c-17.67 0-32 14.33-32 32v32c0 17.67 14.33 32 32 32h384c17.67 0 32-14.33 32-32v-32c0-17.67-14.33-32-32-32z\"><\/path><\/svg><\/span>\n\t\t\t<span class='e-closed'><svg aria-hidden=\"true\" class=\"e-font-icon-svg e-fas-plus\" viewbox=\"0 0 448 512\" xmlns=\"http:\/\/www.w3.org\/2000\/svg\"><path d=\"M416 208H272V64c0-17.67-14.33-32-32-32h-32c-17.67 0-32 14.33-32 32v144H32c-17.67 0-32 14.33-32 32v32c0 17.67 14.33 32 32 32h144v144c0 17.67 14.33 32 32 32h32c17.67 0 32-14.33 32-32V304h144c17.67 0 32-14.33 32-32v-32c0-17.67-14.33-32-32-32z\"><\/path><\/svg><\/span>\n\t\t<\/span>\n\n\t\t\t\t\t\t<\/summary>\n\t\t\t\t<div role=\"region\" aria-labelledby=\"e-n-accordion-item-3003\" class=\"elementor-element elementor-element-84c569f e-con-full e-flex e-con e-child\" data-id=\"84c569f\" data-element_type=\"container\">\n\t\t\t\t<div class=\"elementor-element elementor-element-d11a1c5 elementor-widget elementor-widget-text-editor\" data-id=\"d11a1c5\" data-element_type=\"widget\" data-widget_type=\"text-editor.default\">\n\t\t\t\t\t\t\t\t\t<p>An ISO 27001 scope statement defines the boundary of the ISMS: which products, services, locations and information are covered. The Statement of Applicability lists the Annex A security controls, states which ones apply within that boundary, and justifies each choice. The scope is required by clause 4.3 of ISO 27001 and the Statement of Applicability by clause 6.1.3.<\/p>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t<\/details>\n\t\t\t\t\t\t<details id=\"e-n-accordion-item-3004\" class=\"e-n-accordion-item\" >\n\t\t\t\t<summary class=\"e-n-accordion-item-title\" data-accordion-index=\"5\" tabindex=\"-1\" aria-expanded=\"false\" aria-controls=\"e-n-accordion-item-3004\" >\n\t\t\t\t\t<span class='e-n-accordion-item-title-header'><h2 class=\"e-n-accordion-item-title-text\"> Can an ISO 27001 scope cover only part of a company? <\/h2><\/span>\n\t\t\t\t\t\t\t<span class='e-n-accordion-item-title-icon'>\n\t\t\t<span class='e-opened' ><svg aria-hidden=\"true\" class=\"e-font-icon-svg e-fas-minus\" viewbox=\"0 0 448 512\" xmlns=\"http:\/\/www.w3.org\/2000\/svg\"><path d=\"M416 208H32c-17.67 0-32 14.33-32 32v32c0 17.67 14.33 32 32 32h384c17.67 0 32-14.33 32-32v-32c0-17.67-14.33-32-32-32z\"><\/path><\/svg><\/span>\n\t\t\t<span class='e-closed'><svg aria-hidden=\"true\" class=\"e-font-icon-svg e-fas-plus\" viewbox=\"0 0 448 512\" xmlns=\"http:\/\/www.w3.org\/2000\/svg\"><path d=\"M416 208H272V64c0-17.67-14.33-32-32-32h-32c-17.67 0-32 14.33-32 32v144H32c-17.67 0-32 14.33-32 32v32c0 17.67 14.33 32 32 32h144v144c0 17.67 14.33 32 32 32h32c17.67 0 32-14.33 32-32V304h144c17.67 0 32-14.33 32-32v-32c0-17.67-14.33-32-32-32z\"><\/path><\/svg><\/span>\n\t\t<\/span>\n\n\t\t\t\t\t\t<\/summary>\n\t\t\t\t<div role=\"region\" aria-labelledby=\"e-n-accordion-item-3004\" class=\"elementor-element elementor-element-36c3d72 e-con-full e-flex e-con e-child\" data-id=\"36c3d72\" data-element_type=\"container\">\n\t\t\t\t<div class=\"elementor-element elementor-element-beed716 elementor-widget elementor-widget-text-editor\" data-id=\"beed716\" data-element_type=\"widget\" data-widget_type=\"text-editor.default\">\n\t\t\t\t\t\t\t\t\t<p>Yes. An ISO 27001 scope can be limited to a single product, service, department or location, which is a common choice for companies that certify their core product first. The scope must still account for interfaces and dependencies with everything outside it, and customers will see the limited scope on the ISO 27001 certificate.<\/p>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t<\/details>\n\t\t\t\t\t<\/div>\n\t\t\t\t\t<script type=\"application\/ld+json\">{\n    \"@context\": \"https:\\\/\\\/schema.org\",\n    \"@type\": \"FAQPage\",\n    \"mainEntity\": [\n        {\n            \"@type\": \"Question\",\n            \"name\": \"What is an ISO 27001 scope statement?\",\n            \"acceptedAnswer\": {\n                \"@type\": \"Answer\",\n                \"text\": \"An ISO 27001 scope statement is a short summary of what an organisation&#8217;s information security management system (ISMS) covers: what the business does, which products, services and information are protected, and which parts of the business are certified. The scope statement appears on the ISO 27001 certificate, so customers can see exactly what the certification applies to.\"\n            }\n        },\n        {\n            \"@type\": \"Question\",\n            \"name\": \"What should an ISO 27001 scope statement include?\",\n            \"acceptedAnswer\": {\n                \"@type\": \"Answer\",\n                \"text\": \"An ISO 27001 scope statement should state what the organisation does, which products or services are in scope, which information needs protecting, which processes handle that information, and any exclusions such as locations or departments. Answering these five questions in one or two clear sentences produces a scope statement that customers and auditors can understand.\"\n            }\n        },\n        {\n            \"@type\": \"Question\",\n            \"name\": \"What are the most common mistakes when writing an ISO 27001 scope statement?\",\n            \"acceptedAnswer\": {\n                \"@type\": \"Answer\",\n                \"text\": \"The most common ISO 27001 scope statement mistakes are making the scope too broad, making it too narrow, and not knowing what information the organisation actually handles. A scope that is too broad adds cost and work. A scope that is too narrow leaves out products or data that customers expect to be certified.\"\n            }\n        },\n        {\n            \"@type\": \"Question\",\n            \"name\": \"What is the difference between an ISO 27001 scope statement and a Statement of Applicability?\",\n            \"acceptedAnswer\": {\n                \"@type\": \"Answer\",\n                \"text\": \"An ISO 27001 scope statement defines the boundary of the ISMS: which products, services, locations and information are covered. The Statement of Applicability lists the Annex A security controls, states which ones apply within that boundary, and justifies each choice. The scope is required by clause 4.3 of ISO 27001 and the Statement of Applicability by clause 6.1.3.\"\n            }\n        },\n        {\n            \"@type\": \"Question\",\n            \"name\": \"Can an ISO 27001 scope cover only part of a company?\",\n            \"acceptedAnswer\": {\n                \"@type\": \"Answer\",\n                \"text\": \"Yes. An ISO 27001 scope can be limited to a single product, service, department or location, which is a common choice for companies that certify their core product first. The scope must still account for interfaces and dependencies with everything outside it, and customers will see the limited scope on the ISO 27001 certificate.\"\n            }\n        }\n    ]\n}<\/script>\n\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<\/div>","protected":false},"excerpt":{"rendered":"<p>En esta gu\u00eda de declaraci\u00f3n del alcance, le explicamos el qu\u00e9, el c\u00f3mo y el por qu\u00e9 de redactar una declaraci\u00f3n del alcance de la norma ISO 27001.\u00a0<\/p>","protected":false},"author":17,"featured_media":9939,"comment_status":"closed","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[79],"tags":[],"class_list":["post-9930","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-iso27001"],"yoast_head":"<!-- This site is optimized with the Yoast SEO plugin v28.7 - https:\/\/yoast.com\/product\/yoast-seo-wordpress\/ -->\n<title>Lean Compliance Collaboration Platform | Compleye.io | ISO 27001 | ISO 9001 | SOC 2<\/title>\n<meta name=\"description\" content=\"Lean Compliance Collaboration Platform to help SaaS Companies towards their ISO 27001, ISO 9001 or SOC-2 certification and stronger performance on privacy and security.\" \/>\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<link rel=\"canonical\" href=\"https:\/\/compleye.io\/es\/articulos\/iso-27001-declaracion-de-alcance\/\" \/>\n<meta property=\"og:locale\" content=\"es_ES\" \/>\n<meta property=\"og:type\" content=\"article\" \/>\n<meta property=\"og:title\" content=\"Lean Compliance Collaboration Platform | Compleye.io | ISO 27001 | ISO 9001 | SOC 2\" \/>\n<meta property=\"og:description\" content=\"Lean Compliance Collaboration Platform to help SaaS Companies towards their ISO 27001, ISO 9001 or SOC-2 certification and stronger performance on privacy and security.\" \/>\n<meta property=\"og:url\" content=\"https:\/\/compleye.io\/es\/articulos\/iso-27001-declaracion-de-alcance\/\" \/>\n<meta property=\"og:site_name\" content=\"compleye.io\" \/>\n<meta property=\"article:published_time\" content=\"2022-12-07T12:16:07+00:00\" \/>\n<meta property=\"article:modified_time\" content=\"2026-10-02T09:14:28+00:00\" \/>\n<meta property=\"og:image\" content=\"https:\/\/compleye.io\/wp-content\/uploads\/2022\/11\/ISO-270001-Scope-Statement-blog-header-scaled.webp\" \/>\n\t<meta property=\"og:image:width\" content=\"2560\" \/>\n\t<meta property=\"og:image:height\" content=\"1707\" \/>\n\t<meta property=\"og:image:type\" content=\"image\/webp\" \/>\n<meta name=\"author\" content=\"Karolin Kruiskamp\" \/>\n<meta name=\"twitter:card\" content=\"summary_large_image\" \/>\n<meta name=\"twitter:label1\" content=\"Escrito por\" \/>\n\t<meta name=\"twitter:data1\" content=\"Karolin Kruiskamp\" \/>\n\t<meta name=\"twitter:label2\" content=\"Tiempo de lectura\" \/>\n\t<meta name=\"twitter:data2\" content=\"10 minutos\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\"@context\":\"https:\\\/\\\/schema.org\",\"@graph\":[{\"@type\":[\"Article\",\"BlogPosting\"],\"@id\":\"https:\\\/\\\/compleye.io\\\/articles\\\/iso-27001-scope-statement\\\/#article\",\"isPartOf\":{\"@id\":\"https:\\\/\\\/compleye.io\\\/articles\\\/iso-27001-scope-statement\\\/\"},\"author\":{\"name\":\"Karolin Kruiskamp\",\"@id\":\"https:\\\/\\\/compleye.io\\\/#\\\/schema\\\/person\\\/0cec6d61467336a3c2ea74f0beb84bc3\"},\"headline\":\"How to Write an ISO 27001 Scope Statement (+3 Examples)\",\"datePublished\":\"2022-12-07T12:16:07+00:00\",\"dateModified\":\"2026-10-02T09:14:28+00:00\",\"mainEntityOfPage\":{\"@id\":\"https:\\\/\\\/compleye.io\\\/articles\\\/iso-27001-scope-statement\\\/\"},\"wordCount\":1939,\"publisher\":{\"@id\":\"https:\\\/\\\/compleye.io\\\/#organization\"},\"image\":{\"@id\":\"https:\\\/\\\/compleye.io\\\/articles\\\/iso-27001-scope-statement\\\/#primaryimage\"},\"thumbnailUrl\":\"https:\\\/\\\/compleye.io\\\/wp-content\\\/uploads\\\/2022\\\/11\\\/ISO-270001-Scope-Statement-blog-header-scaled.webp\",\"articleSection\":[\"ISO27001\"],\"inLanguage\":\"es\"},{\"@type\":\"WebPage\",\"@id\":\"https:\\\/\\\/compleye.io\\\/articles\\\/iso-27001-scope-statement\\\/\",\"url\":\"https:\\\/\\\/compleye.io\\\/articles\\\/iso-27001-scope-statement\\\/\",\"name\":\"Lean Compliance Collaboration Platform | Compleye.io | ISO 27001 | ISO 9001 | SOC 2\",\"isPartOf\":{\"@id\":\"https:\\\/\\\/compleye.io\\\/#website\"},\"primaryImageOfPage\":{\"@id\":\"https:\\\/\\\/compleye.io\\\/articles\\\/iso-27001-scope-statement\\\/#primaryimage\"},\"image\":{\"@id\":\"https:\\\/\\\/compleye.io\\\/articles\\\/iso-27001-scope-statement\\\/#primaryimage\"},\"thumbnailUrl\":\"https:\\\/\\\/compleye.io\\\/wp-content\\\/uploads\\\/2022\\\/11\\\/ISO-270001-Scope-Statement-blog-header-scaled.webp\",\"datePublished\":\"2022-12-07T12:16:07+00:00\",\"dateModified\":\"2026-10-02T09:14:28+00:00\",\"description\":\"Lean Compliance Collaboration Platform to help SaaS Companies towards their ISO 27001, ISO 9001 or SOC-2 certification and stronger performance on privacy and security.\",\"breadcrumb\":{\"@id\":\"https:\\\/\\\/compleye.io\\\/articles\\\/iso-27001-scope-statement\\\/#breadcrumb\"},\"inLanguage\":\"es\",\"potentialAction\":[{\"@type\":\"ReadAction\",\"target\":[\"https:\\\/\\\/compleye.io\\\/articles\\\/iso-27001-scope-statement\\\/\"]}]},{\"@type\":\"ImageObject\",\"inLanguage\":\"es\",\"@id\":\"https:\\\/\\\/compleye.io\\\/articles\\\/iso-27001-scope-statement\\\/#primaryimage\",\"url\":\"https:\\\/\\\/compleye.io\\\/wp-content\\\/uploads\\\/2022\\\/11\\\/ISO-270001-Scope-Statement-blog-header-scaled.webp\",\"contentUrl\":\"https:\\\/\\\/compleye.io\\\/wp-content\\\/uploads\\\/2022\\\/11\\\/ISO-270001-Scope-Statement-blog-header-scaled.webp\",\"width\":2560,\"height\":1707},{\"@type\":\"BreadcrumbList\",\"@id\":\"https:\\\/\\\/compleye.io\\\/articles\\\/iso-27001-scope-statement\\\/#breadcrumb\",\"itemListElement\":[{\"@type\":\"ListItem\",\"position\":1,\"name\":\"Home\",\"item\":\"https:\\\/\\\/compleye.io\\\/\"},{\"@type\":\"ListItem\",\"position\":2,\"name\":\"How to Write an ISO 27001 Scope Statement (+3 Examples)\"}]},{\"@type\":\"WebSite\",\"@id\":\"https:\\\/\\\/compleye.io\\\/#website\",\"url\":\"https:\\\/\\\/compleye.io\\\/\",\"name\":\"compleye.io\",\"description\":\"security and privacy compliance getting done\",\"publisher\":{\"@id\":\"https:\\\/\\\/compleye.io\\\/#organization\"},\"potentialAction\":[{\"@type\":\"SearchAction\",\"target\":{\"@type\":\"EntryPoint\",\"urlTemplate\":\"https:\\\/\\\/compleye.io\\\/?s={search_term_string}\"},\"query-input\":{\"@type\":\"PropertyValueSpecification\",\"valueRequired\":true,\"valueName\":\"search_term_string\"}}],\"inLanguage\":\"es\"},{\"@type\":\"Organization\",\"@id\":\"https:\\\/\\\/compleye.io\\\/#organization\",\"name\":\"Compleye\",\"url\":\"https:\\\/\\\/compleye.io\\\/\",\"logo\":{\"@type\":\"ImageObject\",\"inLanguage\":\"es\",\"@id\":\"https:\\\/\\\/compleye.io\\\/#\\\/schema\\\/logo\\\/image\\\/\",\"url\":\"https:\\\/\\\/compleye.io\\\/wp-content\\\/uploads\\\/2023\\\/03\\\/Compleye_Logo_Logo_Black.png\",\"contentUrl\":\"https:\\\/\\\/compleye.io\\\/wp-content\\\/uploads\\\/2023\\\/03\\\/Compleye_Logo_Logo_Black.png\",\"width\":2451,\"height\":892,\"caption\":\"Compleye\"},\"image\":{\"@id\":\"https:\\\/\\\/compleye.io\\\/#\\\/schema\\\/logo\\\/image\\\/\"},\"sameAs\":[\"https:\\\/\\\/www.linkedin.com\\\/company\\\/c-board\\\/\",\"https:\\\/\\\/www.youtube.com\\\/channel\\\/UCpe1Z7aynfqWSrjgJORgKXw\"]},{\"@type\":\"Person\",\"@id\":\"https:\\\/\\\/compleye.io\\\/#\\\/schema\\\/person\\\/0cec6d61467336a3c2ea74f0beb84bc3\",\"name\":\"Karolin Kruiskamp\",\"image\":{\"@type\":\"ImageObject\",\"inLanguage\":\"es\",\"@id\":\"https:\\\/\\\/secure.gravatar.com\\\/avatar\\\/e9c574805c26ff058e494916fb42a856824ea78280afec8044becfcbddce78c7?s=96&d=mm&r=g\",\"url\":\"https:\\\/\\\/secure.gravatar.com\\\/avatar\\\/e9c574805c26ff058e494916fb42a856824ea78280afec8044becfcbddce78c7?s=96&d=mm&r=g\",\"contentUrl\":\"https:\\\/\\\/secure.gravatar.com\\\/avatar\\\/e9c574805c26ff058e494916fb42a856824ea78280afec8044becfcbddce78c7?s=96&d=mm&r=g\",\"caption\":\"Karolin Kruiskamp\"},\"url\":\"https:\\\/\\\/compleye.io\\\/es\\\/articles\\\/author\\\/karolin\\\/\"}]}<\/script>\n<!-- \/ Yoast SEO plugin. -->","yoast_head_json":{"title":"Lean Compliance Collaboration Platform | Compleye.io | ISO 27001 | ISO 9001 | SOC 2","description":"Lean Compliance Collaboration Platform to help SaaS Companies towards their ISO 27001, ISO 9001 or SOC-2 certification and stronger performance on privacy and security.","robots":{"index":"index","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"canonical":"https:\/\/compleye.io\/es\/articulos\/iso-27001-declaracion-de-alcance\/","og_locale":"es_ES","og_type":"article","og_title":"Lean Compliance Collaboration Platform | Compleye.io | ISO 27001 | ISO 9001 | SOC 2","og_description":"Lean Compliance Collaboration Platform to help SaaS Companies towards their ISO 27001, ISO 9001 or SOC-2 certification and stronger performance on privacy and security.","og_url":"https:\/\/compleye.io\/es\/articulos\/iso-27001-declaracion-de-alcance\/","og_site_name":"compleye.io","article_published_time":"2022-12-07T12:16:07+00:00","article_modified_time":"2026-10-02T09:14:28+00:00","og_image":[{"width":2560,"height":1707,"url":"https:\/\/compleye.io\/wp-content\/uploads\/2022\/11\/ISO-270001-Scope-Statement-blog-header-scaled.webp","type":"image\/webp"}],"author":"Karolin Kruiskamp","twitter_card":"summary_large_image","twitter_misc":{"Escrito por":"Karolin Kruiskamp","Tiempo de lectura":"10 minutos"},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":["Article","BlogPosting"],"@id":"https:\/\/compleye.io\/articles\/iso-27001-scope-statement\/#article","isPartOf":{"@id":"https:\/\/compleye.io\/articles\/iso-27001-scope-statement\/"},"author":{"name":"Karolin Kruiskamp","@id":"https:\/\/compleye.io\/#\/schema\/person\/0cec6d61467336a3c2ea74f0beb84bc3"},"headline":"How to Write an ISO 27001 Scope Statement (+3 Examples)","datePublished":"2022-12-07T12:16:07+00:00","dateModified":"2026-10-02T09:14:28+00:00","mainEntityOfPage":{"@id":"https:\/\/compleye.io\/articles\/iso-27001-scope-statement\/"},"wordCount":1939,"publisher":{"@id":"https:\/\/compleye.io\/#organization"},"image":{"@id":"https:\/\/compleye.io\/articles\/iso-27001-scope-statement\/#primaryimage"},"thumbnailUrl":"https:\/\/compleye.io\/wp-content\/uploads\/2022\/11\/ISO-270001-Scope-Statement-blog-header-scaled.webp","articleSection":["ISO27001"],"inLanguage":"es"},{"@type":"WebPage","@id":"https:\/\/compleye.io\/articles\/iso-27001-scope-statement\/","url":"https:\/\/compleye.io\/articles\/iso-27001-scope-statement\/","name":"Lean Compliance Collaboration Platform | Compleye.io | ISO 27001 | ISO 9001 | SOC 2","isPartOf":{"@id":"https:\/\/compleye.io\/#website"},"primaryImageOfPage":{"@id":"https:\/\/compleye.io\/articles\/iso-27001-scope-statement\/#primaryimage"},"image":{"@id":"https:\/\/compleye.io\/articles\/iso-27001-scope-statement\/#primaryimage"},"thumbnailUrl":"https:\/\/compleye.io\/wp-content\/uploads\/2022\/11\/ISO-270001-Scope-Statement-blog-header-scaled.webp","datePublished":"2022-12-07T12:16:07+00:00","dateModified":"2026-10-02T09:14:28+00:00","description":"Lean Compliance Collaboration Platform to help SaaS Companies towards their ISO 27001, ISO 9001 or SOC-2 certification and stronger performance on privacy and security.","breadcrumb":{"@id":"https:\/\/compleye.io\/articles\/iso-27001-scope-statement\/#breadcrumb"},"inLanguage":"es","potentialAction":[{"@type":"ReadAction","target":["https:\/\/compleye.io\/articles\/iso-27001-scope-statement\/"]}]},{"@type":"ImageObject","inLanguage":"es","@id":"https:\/\/compleye.io\/articles\/iso-27001-scope-statement\/#primaryimage","url":"https:\/\/compleye.io\/wp-content\/uploads\/2022\/11\/ISO-270001-Scope-Statement-blog-header-scaled.webp","contentUrl":"https:\/\/compleye.io\/wp-content\/uploads\/2022\/11\/ISO-270001-Scope-Statement-blog-header-scaled.webp","width":2560,"height":1707},{"@type":"BreadcrumbList","@id":"https:\/\/compleye.io\/articles\/iso-27001-scope-statement\/#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https:\/\/compleye.io\/"},{"@type":"ListItem","position":2,"name":"How to Write an ISO 27001 Scope Statement (+3 Examples)"}]},{"@type":"WebSite","@id":"https:\/\/compleye.io\/#website","url":"https:\/\/compleye.io\/","name":"compleye.io","description":"security and privacy compliance getting done","publisher":{"@id":"https:\/\/compleye.io\/#organization"},"potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/compleye.io\/?s={search_term_string}"},"query-input":{"@type":"PropertyValueSpecification","valueRequired":true,"valueName":"search_term_string"}}],"inLanguage":"es"},{"@type":"Organization","@id":"https:\/\/compleye.io\/#organization","name":"Compleye","url":"https:\/\/compleye.io\/","logo":{"@type":"ImageObject","inLanguage":"es","@id":"https:\/\/compleye.io\/#\/schema\/logo\/image\/","url":"https:\/\/compleye.io\/wp-content\/uploads\/2023\/03\/Compleye_Logo_Logo_Black.png","contentUrl":"https:\/\/compleye.io\/wp-content\/uploads\/2023\/03\/Compleye_Logo_Logo_Black.png","width":2451,"height":892,"caption":"Compleye"},"image":{"@id":"https:\/\/compleye.io\/#\/schema\/logo\/image\/"},"sameAs":["https:\/\/www.linkedin.com\/company\/c-board\/","https:\/\/www.youtube.com\/channel\/UCpe1Z7aynfqWSrjgJORgKXw"]},{"@type":"Person","@id":"https:\/\/compleye.io\/#\/schema\/person\/0cec6d61467336a3c2ea74f0beb84bc3","name":"Karolin Kruiskamp","image":{"@type":"ImageObject","inLanguage":"es","@id":"https:\/\/secure.gravatar.com\/avatar\/e9c574805c26ff058e494916fb42a856824ea78280afec8044becfcbddce78c7?s=96&d=mm&r=g","url":"https:\/\/secure.gravatar.com\/avatar\/e9c574805c26ff058e494916fb42a856824ea78280afec8044becfcbddce78c7?s=96&d=mm&r=g","contentUrl":"https:\/\/secure.gravatar.com\/avatar\/e9c574805c26ff058e494916fb42a856824ea78280afec8044becfcbddce78c7?s=96&d=mm&r=g","caption":"Karolin Kruiskamp"},"url":"https:\/\/compleye.io\/es\/articles\/author\/karolin\/"}]}},"_links":{"self":[{"href":"https:\/\/compleye.io\/es\/wp-json\/wp\/v2\/posts\/9930","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/compleye.io\/es\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/compleye.io\/es\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/compleye.io\/es\/wp-json\/wp\/v2\/users\/17"}],"replies":[{"embeddable":true,"href":"https:\/\/compleye.io\/es\/wp-json\/wp\/v2\/comments?post=9930"}],"version-history":[{"count":17,"href":"https:\/\/compleye.io\/es\/wp-json\/wp\/v2\/posts\/9930\/revisions"}],"predecessor-version":[{"id":25489,"href":"https:\/\/compleye.io\/es\/wp-json\/wp\/v2\/posts\/9930\/revisions\/25489"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/compleye.io\/es\/wp-json\/wp\/v2\/media\/9939"}],"wp:attachment":[{"href":"https:\/\/compleye.io\/es\/wp-json\/wp\/v2\/media?parent=9930"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/compleye.io\/es\/wp-json\/wp\/v2\/categories?post=9930"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/compleye.io\/es\/wp-json\/wp\/v2\/tags?post=9930"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}