Determine the compliance information that needs to be collected and the sources for the information. Review the
information to eliminate those that are not applicable to the business. Translate into business context to clarify
applicability. Take into consider the current baseline if one exists.
|