After a compliance officer develops a base of knowledge of regulations, he or she must begin the art of applying regulations in a risk management environment.
Which of the following is NOT out of a few things to be kept in mind when determining what to do FIRST?