This process serves a dual purpose: (that the company maintains compliance with internal and external requirements; and (2) it establishes systems of verifi cations to demonstrate that safeguards are in place and functioning when they are most needed, thereby reducing the risk of incidents.