In the same way, don't wait for an incident or an audit finding before you act. As with your health, being proactive can decrease the likelihood of a heart attack in addition to bringing

of the compliance resources are dedicated to regulatory obligations these are managed primarily by audits

These systems are fundamentally reactive rather than proactive, concentrating on audits, compliance reporting

indicator from various sources such as performance reports, risk assessments, incident logs, and compliance audits

When companies consider compliance as a necessary evil they tend to use mostly inspections and audits

They need to ensure processes are in place for ongoing monitoring, regular audits and assessments, and

to be prescriptive written in the form of “shall statements” and subject to external inspection and audits Compliance is addressed by closing gaps found in audits or when incidents arise. 2. Behaviours Completing Actions to Optimizing Systems Creating Outputs to Advancing Outcomes Conducting Audits

In the say way, compliance is not only about audits and enforcement.

versus content behavior versus systems do it now versus do it later top down versus bottom up audit-fix

to focus compliance mostly on conformance to rules attested by surveys and monitored by occasional audits

elements only include minimum procedural requirements that could be verified using an internal or external audit This measure of effectiveness will create additional requirements although not specified in API RP 1173

Quality Assurance in Compliance Traditional Approach (Quality Control): Audit findings Customer complaints