The assessment is the first step. Full compliance requires ongoing action and management beyond the assessment.