Four steps, one file.

Processes, scope, interested parties, sites, products. If you arrive with a half-finished manual, an old policy or a risk spreadsheet, they are loaded and reused: the first run gives you a documentation readiness index, so you complete instead of starting over.

The result is the context of the organization (clause 4) written in your manager's own words.

TAoI goes through the chosen standard's catalogue and marks each requirement as compliant, in progress, gap or observation. Every gap gets an owner, a date and the evidence that would close it. The onboard panel summarizes progress by clause and by standard.

If you work with two standards, the shared core is measured only once.

Policies, procedures, process characterizations, the Statement of Applicability, the internal audit plan. TAoI drafts them from your context and traces them to the requirement they meet. You review, adjust and approve them; the approval record (who, when, which version) is what the auditor asks for under clause 7.5.

Nothing is published without a human sign-off. It is the house rule.

Before the certification body arrives, TAoI walks through your system the way an auditor would: asks for evidence, samples records and writes each finding with criterion, evidence and statement. You close the findings with actions and owners, and the rehearsal repeats until no findings remain open.

After the certificate, the same file supports annual surveillance audits and recertification.