The Process
We followed a ridged process to both ensure accurate, understandable, and operational-level requirement sets and, do so in a manner we could enter the requirements into our comprehensive requirements database (now containing around 4,000 compliance requirements)
The primary steps in our process are as follows:
1. Download relevant checklists, guidelines, and standards, usually in PDF format. As appropriate, the documents were purchased (e.g., ISO Standards).
2. Convert PDF and/or Text files into Word files.
3. Clean the converted text, eliminating any non-requirements section(s) (e.g. scope, appendices)
4. Restate, as necessary, requirements from their provided format, often with multiple requirements within paragraphs and sentences, into single-sentence, operational -level compliance requirement statements.
5. Reword, as necessary, the restated requirements to clarify the requirement while maintaining its intent and context.
6. Reword, as appropriate, the restated requirements to incorporate the wording of related or subsequent requirements where, in our opinion, the rewording adds depth and clarity.
7. Regroup requirements where, in our opinion, the regrouping presents a more logical, operational-level requirement set that may be assessed by differing organizational groups.
8. Assign unique, 3- to 4-level requirement IDs, usually defined as “section”, “sub-section”, and 1- or 2-level ”Requirement Statement”. Where possible, the source numbering system, if any, is maintained in total or in part.
9. Grammatically restate requirements into “Statements of Requirement” format (e.g., “The organization shall…”, “The organization must…”).
10. Grammatically restate requirements into “Assessment Response” format (e.g., “The organization has/is/does.…”) with appropriate response options (e.g., “Yes”, “No”, “N/A” , “U”ncertain”).
11. Build a Word file, using templates, containing Statements of Requirement, incorporating a print format with cover page and Table of Content.
11. Build an Excel file containing Assessment Response, incorporating a print format.
12. Conduct a final grammatical and spelling check of content and check for proper pagination of reports.