Risk Management, Compliance & Quality
Incorporate links to your regulatory obligations and company policies, then map them to the processes and procedures they govern and influence. Doing so ensures that operational and change personnel understand non negotiable obligations they must remain compliant with.
Identify and capture risks within the model, and define corresponding controls. Embed those controls into operational business processes and procedures to ensure that they implemented.