2. Evaluate the existing control plan to determine whether it covers legal and regulatory compliance requirements.
3. If the existing control plan does not cover legal compliance items, new control measures need to be formulated to ensure compliance. These controls can include training employees, establishing internal audit procedures and formulating compliance policies.
4. Integrate new control measures into the existing control plan. Ensure that each control measure has a clear responsible person and implementation plan, and is coordinated with existing processes and procedures.
5. After the implementation of the control plan, users need to regularly monitor and review its effectiveness. This can be done through internal audit, compliance assessment or third-party audit.
6. According to the results of monitoring and review, continuously improve the control plan to ensure that it always meets the changes of laws, regulations and compliance requirements.