Procedures (rules) that must be in place to run the company in compliance with the standard; Documentation (records or evidence necessary for auditors to prove that the procedures are in place); Frequency of auditing; Internal audits; Training for internal auditors; External audits (from registrars).