[SSP] scope: System Boundary and Scope
The boundary comprises one file server (NWD-FS01), the ERP application server, eleven engineering workstations, the Entra ID tenant and the perimeter gateway. The shop-floor kiosk is out of scope by policy: no CUI is opened on it, and the policy is enforced by share permissions. The conference-room camera is a specialized asset.

