ISP02 - Determining the Scope of the ISMS