POLICY VS ACTUAL
Corporate management implements various policies and makes changes based on changing business environments and market situations. More often than not, policies and changes are not carried out in the technology space due to its own constraints of people, time and cost. It is important to identify and record which rules and regulations of policies have not been implemented and the reasons for doing so. Such gaps need to be reported to management for their review.