“The organisation shall determine external and internal issues that are relevant to its purpose and that affect its ability to achieve the intended outcome(s) of its information security management system.”
As an organisation, you need to understand all internal and external issues that may be relevant to your business goals and the achievement of the information security management system (ISMS) objectives.
Internal issues include organisational structure, policies and guidelines, roles and responsibilities of inter alia staff, management and stakeholders.
External issues include the political environment, laws and regulations, technological advancements, economic trends etc.
Understanding the organisation's context and related issues will give you a clearer view of the organisation, allowing you to properly define the scope of the ISMS and effectively implement.
