Compliance ensures that organisational activities meet applicable laws, regulations, standards and internal requirements. This pillar examines how obligations are identified, translated into controls, monitored and continuously maintained.
To assess whether the organisation understands its obligations, assigns ownership, maintains effective controls and responds promptly to compliance gaps and regulatory change.
Obligations Register
Policies & Standards
Control Ownership
Monitoring & Testing
Reporting & Escalation
Corrective Action