CenturyLink ensures that internal and external matters, including authority and ability to control and influence, organizational units, physical boundaries, legal requirements, and contractual obligations are considered when determining the scope of the EMS.