AppFolk, a software development company, is seeking certification against ISO/IEC 27001.

No, the audit scope should reflect all of the organization's divisions that are covered by the ISMS. If the ISMS scope stated that it includes the whole company, the audit scope should align with this unless specifically justified and agreed upon by all stakeholders.

References: ISO/IEC 27001:2013, Clause 4.3 (Determining the scope of the information security management system)