You are absolutely correct Salmon0904. THe URS should be in place prior to purchase. But this isn’t always the case, and is very hard to get all departments to do. Often people move too fast or aren’t aware of the requirements.
In my experience, the best thing to do is to close the gap as soon as you find it. If they have a draft URS, then that is better than nothing. Just go ahead and move that through the system.
THe URS, at this point, is useful to communicate to the internal team what to expect moving forward. You might have some user requirements that groups have, that the IT department didn’t think of. So it is a useful collaboration and communication tool, and it meets regulatory needs.