2 Documenting Compliance Obligations Free Online FlashCards

What is a compliance obligation?

A compliance obligation is a requirement an organization must meet or a commitment it has voluntarily adopted.

What information makes register changes traceable?

Make changes traceable by recording who updated an entry, when, and why; preserve prior versions as appropriate.

What are common sources of compliance obligations?

Obligations can come from laws and regulations, permits, contracts, court or regulator decisions, industry codes, and internal policies.

What practical purpose does an obligations register serve?

It helps people identify what applies, who is responsible, what action is required, and what evidence can show performance.

Does having an obligations register prove compliance?

No. It supports compliance management, but does not by itself prove that the organization is complying.

How should a source requirement become an operational obligation?

Start with an authoritative source, identify the requirement that applies, and translate it into a clear required action or outcome.

What makes an obligation testable?

State who must do what, when or how often, and what record or result will show completion.

When should duties from one source be recorded separately?

Record separate obligations when duties have different owners, deadlines, applicability, or evidence; this makes assessment more precise.

What should an applicability entry document?

Record the applicable scope—such as entity, site, activity, product, or people—and the basis for deciding what is in or out of scope.

How should a not-applicable decision be justified?

Do not mark a requirement not applicable merely because it is inconvenient or unfamiliar. Record the reason and supporting basis, and have the decision reviewed appropriately.

Why might a register assign an owner by role or function?

Assign an owner accountable for implementation. A role or function can be more durable than a named individual when personnel change.

What source details help users find an obligation's authoritative text?

It should identify the issuing authority or contracting party, document title, relevant section, and a link or location for the authoritative text.