If the 'Regulatory Requirement' is 'Y' then data to be filled in this column should be taken from the 'Compliance Procedure' of the corresponding Compliance Matrix item.
If the Regulatory Requirement if 'N' then a description of existing risk mitigation process controls should be filled in here.