IN THIS GUIDE
Start with the boundary
Connect documents to practice
Make actions usable
Keep assurance separate
Start with the boundary
Describe which activities, services, locations and responsibilities the system covers. A vague scope makes it harder to decide what evidence is relevant and who should be involved.
Connect documents to practice
For each important process, ask what the organisation actually does and what records show that it happened. Policies explain intentions; practical evidence helps explain operation.
Make actions usable
A finding needs an owner, a sensible priority and a way to judge whether the action worked. Avoid closing an action simply because a document has been updated.
Keep assurance separate
A preparation review can identify gaps within an agreed scope. It does not grant a certificate or determine the outcome of an independent certification audit.