Talking about goals and reviewing what is already known
We start from what has to change — not from which systems you own. We agree how we will know the audit paid off and what is out of scope. We go through documentation, supplier contracts and whatever somebody already tried to fix.
- Goals and scope
- System inventory
- History of earlier attempts