The Compliance Gap Analysis

Compare our current practice against the requirements below.

Requirements:
[PASTE — extracted from the regulation]

Our current practice:
[DESCRIBE]

Produce:
1. A requirement-by-requirement table: requirement | current state
   | compliant / partial / gap | evidence we could produce
2. Gaps ranked by exposure
3. For each gap: what closing it requires, effort, and owner
4. Quick wins achievable in under a month
5. Where we are compliant but could not prove it — a documentation
   gap, which fails an audit just as surely
6. A remediation plan with sequencing

Do not assert regulatory positions beyond the pasted requirements.