Capture scope → stakeholders → risks → controls → KPIs → lifecycle → comms/feedback → improvement for ISO/IEC 42001 alignment.