Regulatory mapping · The requirement translation · Element

The owners

Who is accountable for each requirement being met.

The part

What it is

Ownership should sit with whoever performs the work rather than with the compliance function, which can only monitor.

Requirements with no owner are the ones that appear in findings, and they can be identified before an audit does it.

The smallest level

The attributes it carries

Each attribute is one of the framework’s shared types. What a date is, and how it is written, is defined once for the whole model — the note here says what it means in this particular place.