Get to know the business first. List all the relavant roles and the permissions. List the as-is process or if there's an old system that they are using. Check if there's edge sinarios or hidden process. Clarify the dependencies. Define data and relevant systems. Confirm the data updated frequency. Deal with the history data.