In-scope systems are directly connected to, influencing, or involved with cardholder data or its security, whereas out-of-scope systems have no access to the cardholder data environment or any of its networks or components.