Q4 Single choice Flag According to ISO/IEC 27000, which of the following best describes the possible scope of a management system? A It should cover the entire organization without exceptions B It can vary to include the entire organization or specific sections, depending on the needs C It is limited to IT infrastructure and cannot include non-technical departments Correct answer