Evaluate records, reports, and logs that function as a means to control compliance. Assess the information which is intended to demonstrate that controls have been established and adhered to. Map to compliance requirements. Indicate which requirements are met, and possibly to what degree.