Its purpose is to evaluate whether the following have occurred: - Compliance policies and procedures have been implemented, - Employees have been trained on these policies and procedures, and - Management is providing sufficient oversight of business processes and related results to support compliance with company policies, standards, and government laws and regulations.