thinQmaster Virtual testing partner Adaptive practice exams that find your weak spots and drill them. Every answer explained. From $69
Enroll

thinQmaster

Find your exam

Five questions free, before you decide.

Step 1 · choose a vendor

In one of our camps? Your practice exams come with the tuition — they are on your study page already.

Governance, Risk, Audit & Privacy · Intermediate

Scoping

Determining which controls or requirements apply to a system, process, or assessment.

Definition

In control selection, scoping removes controls that are not applicable based on technology, environment, or mission. In compliance and audit, scoping defines which systems, locations, and data are covered. Reducing scope, such as through network segmentation for PCI DSS, can reduce cost and risk.

Example

Segmenting payment systems reduces PCI DSS scope to a single network segment.

Exam tip

On CISSP, scoping is a subset of tailoring.

Related terms