The results will indicate gaps or deficiencies in your company’s compliance program, such as potential operational / process / documentation risks , regulatory violations and incomplete data /information security requirements. By identifying gaps, you can take corrective action and mitigate risks to the business by :