One of the common themes we find when working in this industry is a lack of knowledge related to the types of actions required to adhere to compliance. Currently, most regulatory bodies highlight four key action types: Documentation, Operational, Privacy, and Technical.
Documentation entails compiling evidence that support processes and policies related to compliance requirements.
Operational planning and preparation of actions required to ensure compliance objectives are being actively met.
Privacy addresses seclusion concerns associated with content.
Technical entails systems, applications, processes, and/or tools used in daily business operations that are subject to regulations.