Compliance

Make policies easy for all employees to find and understand. 4. Assign Responsibility (Governance)

Make training mandatory and document participation. 6. Monitor and Audit Compliance

Review non-binding best practices that, if followed, improve credibility. 2. Conduct a Risk Assessment Make policies easy for all employees to find and understand

Create step-by-step instructions for employees to adhere to policies. Compliance