Useful starting inputs include the target standard, business activities, sites, headcount, existing management-system documents, prior audit findings, legal or customer requirements, key process owners and the desired audit stage. Missing inputs should be identified openly rather than filled with assumptions.