The scope of ISO 27001:2013 is: “Development, implementation and maintenance of in-house ICT solutions for insurance services”