RAG pipeline for Internal Audit

Hello everyone,

I was wondering how to start working on a RAG pipeline for internal audit purposes and where to start collecting and organizing the data. I want to start with the IIA's standard and move forward from there.

All sorts of assistance would be appreciated.