It is extremely important to ensure that all activities for Information Security And Compliance are accomplished as per Client’s requirements and contractual obligations before the Information Security and Compliance Lead should approach stakeholders for the sign-offs as per agreements. In case of any activity which is pending or has dependencies (as agreed by stakeholders), a detailed action plan must be developed to accomplish it.

Risks and challenges observed, if any, during the implementation must be resolved and should have a corrective and preventive action plan in place agreed by all the relevant stakeholders.

Information Security and Compliance Lead must ensure the Service Engagement Risk Log is updated and the status is shared with all the relevant stakeholders. The lessons learnt repository must be updated, if needed and stored in a common location.