Audit readiness is not a project you do once before an external audit. It is a set of habits that make every audit, every renewal, and every leadership transition easier.
Start with the basics that every auditor will ask about: user access reviews, change management for production systems, regular backups with documented restore tests, and a clear incident response process.
Document who owns what. Which person approves new ERP users. Which person can change production data. Which person reviews the backup logs. Roles do not need to be elaborate, but they do need to be written down.
Set a quarterly rhythm to review access, test backups, and update documentation. Companies that do this rarely fail audits, and the ones that skip it almost always find out the hard way.