Category selection, MTCTE registration, choosing a lab, hardening, then a 16-week window that includes your own remediation time — the ITSAR process, laid out in the order you’ll meet it.