What Goes Into a Scope Statement
- Organization — the legal entity being certified
- Site(s) — the specific physical location(s) covered
- Activities — what the organization actually does
- Products / services — what's delivered to customers within scope
- Processes — the core processes included in the QMS
- Outsourced activities — any processes performed by external parties but still controlled within your QMS
- Applicability — any clauses of the standard determined not to apply, and why
Scope vs Marketing Statement
Your certification scope is a precise, auditable statement — not the same thing as how you describe your business on your website or in sales materials. A common and problematic mistake is a marketing description that implies broader certified activities than the actual scope covers. If a customer assumes a service is certified because of how the certificate is described publicly, and it isn't actually in scope, that's a real credibility risk when it surfaces.
Common Scope Mistakes
- Too broad — covering activities the QMS doesn't actually control effectively yet.
- Too narrow — excluding a core activity customers assume is covered.
- Missing location — a site that's operationally part of the business but left out of the certificate.
- Missing activity — a service quietly added to the business without updating the scope.
- Marketing wording inconsistent with actual operations — public descriptions that don't match the certified scope.
Practical Consultant Note
Scope should be revisited whenever your business changes meaningfully — a new site, a new product line, a discontinued service. Scope drift, where the real business quietly moves away from what's written, is one of the more common issues we see during renewal audits.
Unsure Whether Your Certification Scope Is Correct?
Send us your specific scope question and get a focused, professional read — US$19, one-time.
Start a $19 Quick CheckFrequently Asked Questions
Can I expand my scope after certification?
A: Yes, typically through a scope extension process with your certification body, which usually involves an additional audit of the new scope area.
Does every site need to be certified?
A: Only if you want that site's activities covered by the certificate — multi-site certification has its own rules, which your certification body can explain for your specific structure.
Who decides if a clause doesn't apply to us?
A: Your organization determines applicability, with justification, and the certification body's auditor reviews whether that determination is reasonable.