Assess a Requirement

This guide explains how compliance officers evaluate requirements and record authoritative compliance determinations in the Requirement Workspace (/requirements).

---

Step-by-Step Procedure

1. Navigate to Regulatory Compliance > Requirements (/requirements).
2. Filter or search for the obligation to evaluate (e.g., UAE-IA::5.1.2).
3. Click on the requirement to open the Requirement Workspace:
   • Obligation Details: Review statutory text, framework name, and applicability status.
   • Mapped Controls Panel: Verify that mapped controls adequately cover the requirement's mandate. Check each control's operational effectiveness.
   • Evidence Sufficiency Panel: Review attached evidence documents. Ensure they cover the required time period and are not expired.
   • Key Blockers Card: Inspect any active blockers, such as open findings, missing mappings, or expired evidence.
4. Select the Compliance Determination:
   • Compliant: All controls adequate, effective, and backed by valid evidence.
   • Partially Compliant: Minor gaps identified.
   • Non-Compliant: Substantial gaps or missing controls.
5. Provide a detailed Determination Rationale.
6. Click Save Determination to record the authoritative state and update the audit log.