Generally it is observed that a top down approach to QA and procedural definition rarely is the best way to go (ie pinching someone else's tailored work means that your folk have to change their ways of doing business and that is always a rough road).
The better approach is to run things bottom up .. viz., document how you do business at the moment and then check that against the rules and recommended practices from authoritative sources. One then makes a much smaller change to the approach .. which is easier to implement.
As this is getting to a commercial request, I am obliged to move it to admin for assessment. However, I will leave it here for a day or two so that anyone wishing to respond in the short term can do so.