Map all regulatory obligations and controls in place.