We use this compliance checklist at the very beginning of a consultancy engagement to find out what documentation and controls are already in place and determine how much work there is to do.