ThalewynThalewyn
  • Inside Thalewyn
  • Services
  • Packs
  • Encyclopedia
  • FAQ
FeedbackSign inGet started
  • Inside Thalewyn
  • Services
  • Packs
  • Encyclopedia
  • FAQ
  • Share feedback
  • Sign in
Thalewyn

Governance, risk, compliance and IT operations services whose deliverables feed each other.

Product

  • Inside Thalewyn
  • Services
  • Packs
  • Encyclopedia
  • FAQ
  • About
  • Free tools

Frameworks

  • ISO/IEC 27001
  • GDPR
  • NIS2
  • DORA
  • HIPAA
  • PCI DSS

Legal

  • Terms
  • Privacy
  • Legal notice

© Thalewyn

  • Inside Thalewyn
  • Services
  • Packs
  • Encyclopedia
  • FAQ

Run Scope Definition

No account needed. Answer the questions, pay securely, and receive your deliverable.

Name shown on the deliverable

Name shown on the deliverable

Shown on the deliverable.

Keep this field from the AI: its content is replaced before the AI provider receives it, then restored in your deliverable.

Deliverable

Deliverable

You set its title, author and structure.

Keep this field from the AI: its content is replaced before the AI provider receives it, then restored in your deliverable.

As it will appear on the result.

Keep this field from the AI: its content is replaced before the AI provider receives it, then restored in your deliverable.

Shown as the author of the deliverable; never filled in by the AI.

Purpose of the scope

Purpose of the scope

What this scope is for, and who answers for it.

Keep this field from the AI: its content is replaced before the AI provider receives it, then restored in your deliverable.

It decides the vocabulary of the document.

Keep this field from the AI: its content is replaced before the AI provider receives it, then restored in your deliverable.

Keep this field from the AI: its content is replaced before the AI provider receives it, then restored in your deliverable.

Keep this field from the AI: its content is replaced before the AI provider receives it, then restored in your deliverable.

What the certificate or programme has to prove, and to whom.

Keep this field from the AI: its content is replaced before the AI provider receives it, then restored in your deliverable.

Function of the person who keeps it up to date.

Keep this field from the AI: its content is replaced before the AI provider receives it, then restored in your deliverable.

Keep this field from the AI: its content is replaced before the AI provider receives it, then restored in your deliverable.

What the scope takes into account

What the scope takes into account

Clause 4.3 asks you to consider your issues and the requirements of interested parties.

Keep this field from the AI: its content is replaced before the AI provider receives it, then restored in your deliverable.

What in your market, your rules and your structure affects this scope.

Interested partyRequirementWhere it comes from

Keep this field from the AI: its content is replaced before the AI provider receives it, then restored in your deliverable.

One row per entry, e.g. “Bank partners; ISO/IEC 27001 certificate covering the gateway; Partner contracts”

What is in scope

What is in scope

Name what is covered; anything not named is outside.

Keep this field from the AI: its content is replaced before the AI provider receives it, then restored in your deliverable.

Offices, warehouses, data centres, cloud regions.

Keep this field from the AI: its content is replaced before the AI provider receives it, then restored in your deliverable.

E.g. “Merchant onboarding”.

Keep this field from the AI: its content is replaced before the AI provider receives it, then restored in your deliverable.

E.g. “Payment gateway”, “Microsoft 365”.

Keep this field from the AI: its content is replaced before the AI provider receives it, then restored in your deliverable.

Categories only, never the data itself.

Interfaces and exclusions

Interfaces and exclusions

Where the scope stops, and what it still depends on.

Party or activityWhat it does for the scopeWho is responsible for whatContract or control at the boundary

Keep this field from the AI: its content is replaced before the AI provider receives it, then restored in your deliverable.

One row per entry, e.g. “Hosting provider; Hosts the platform; Provider for infrastructure, we for configuration; Contract, SOC 2 report”

What is left outWhyEffect on what stays in scope

Keep this field from the AI: its content is replaced before the AI provider receives it, then restored in your deliverable.

One row per entry, e.g. “Payroll; Outsourced and unrelated to the platform; HR data stays with the provider”

Keep this field from the AI: its content is replaced before the AI provider receives it, then restored in your deliverable.

Anything the service should take into account.

What the AI provider receives

Your answers, to write this deliverable.

Replaced first, then put back in your deliverable: Email addresses, People's names, Company names.

€1.00

What a free account adds

  • Your details filled in for you on every form
  • Every deliverable saved and reusable as input to any service
Create a free account