Compliance
Authorities such as RBI would want to see what is the actual implementation of stated policies. Financial institutions have been penalized for not implementing mandated policies.
Corporate management implements various policies and makes changes based on changing business environments and market situations. More often than not, policies and changes are not carried out in the technology space due to its own constraints of people, time and cost. It is important to identify and record which rules and regulations of policies have not been implemented and the reasons for doing so. Such gaps need to be reported to management for their review.