Tool for defining the ISO 27001 ISMS scope