-
Determine Scope of Activity
-
Complete the Document Review
-
Conduct Gap Analysis
-
Establish the Asset Inventory
-
Complete the Risk Assessment
-
Implement Risk Management & Assurance
-
Specify Controls & Objectives
-
Define Policies
-
Implement Procedures
-
Train Staff
-
Implement Compliance Monitoring arrangements
-
Prepare for Certification
-
integrate existing systems (See IMS).