it is also possible to construct regulatory compliance indicators using these
13
measures. Audits identified both applicable and non-applicable regulatory
requirements. For applicable requirements, various states are possible: ‘Compliant’
when the regulatory requirement is met, ‘Non-compliant’, when the obligation is not
met, and ‘Evidence to be provided’ when the status of the requirement could not be
identified.