Use this checklist as a starting point for your internal preparation or your discussion with BDTECH.
- Identify the systems and processes in the proposed review scope.
- Gather policies, procedures, and relevant system documentation.
- List control owners and the people who can explain each process.
- Collect access approval and change management records where available.
- Outline backup, recovery, and continuity arrangements.
- Share known gaps and previous findings so the scope can be discussed.
The details will depend on your organization and the engagement scope. This guide is general preparation material and does not replace a scoped assessment.