Start with writing a System Description Document. The Development Plan and Preliminary Audit are optional components but quite valuable for new development teams.
If you already have code and your auditor sent you here. Create a System Description, then jump down to Software Requirements, and finish up with an Audit Prep Report.
Copyright and related rights waived via CC0