• Assess Regulations and Standards
• Audit Contract Compliance
• Define Overall Security Objectives
• Evaluate Supplier Compliance
• Finalize Supplier Contract
• Negotiate Supplier Contract
• Refine And Verify Compliance Context
• Review Standards and Regulations
• Specify Process Purpose, Scope, Goals, and Capabilities
• Specify Process Purpose, Scope, Goals, and Capabilities

• Review Facility Planning Inputs and Define Facility Plans and Specifications

External official rules (typically driven by government) that call for business compliance, as well as established 'good practice' standards from formal and informal bodies. Includes:

• Generally Accepted Accounting Principles
• Legal requirements, such Sarbanes-Oxley and its COSO (Framework for Financial Management)