specific processes or organizational units to be excluded from the assessment;
the quantity and type of objective evidence to be examined in the assessment
the ownership of the assessment outputs and any restrictions on their use;
controls on information resulting from a confidentiality agreement.>