- Has the organization fully evaluated its compliance with legal and regulatory requirements and implemented corrective action where necessary?
- Are records of the results of these periodic evaluations retained?
" - Evaluation of Compliance with Other Requirements
- Does the organization evaluate compliance with other requirements to which it subscribes?
"
- Are records of the results of these periodic evaluations retained?