Deficiencies found during ongoing monitoring or through separate evaluations should be communicated to the individual responsible for the function and also to at least one level of management above that individual.
Deficiencies should be reported to the person responsible for the function and to at least one person in a management level about that person.