As always, I’ll point out that this is going to depend upon the size and complexity of your company.
Determination of Required Documents
Once you have completed mapping your documents, you want to revisit your requirements matrix. You have gone through an initial Gap Analysis where a determination was made as to what systems exist and which ones do not. Typically the Gap Analysis gives you an idea of what Level II documents and systems are required. At this point we want to look at what Level IIIs and Level IVs exist.
