Compliance Catalog: Identify and review internal compliance policies and procedures. Note all applicable laws and regulations.
Identify applicable regulators.
Industry guidelines. Determine whether contractual relationships and agreements provide additional legal requirements that may not otherwise apply, i.e. “flow-down” requirements.