Documentation was removed earlier to hit a delivery deadline, and that gap has just surfaced while formalising governance. What is the most appropriate next step?
Select an answer to reveal the explanation.
Short Explanation
You can still close a missing mapping, so do it now before the system moves on. Leaving it open just waits for an audit or incident to make it your problem.
Full Explanation
The appropriate next step is to reconstruct and complete the mapping between governance activities and applicable laws, standards and policies before the system proceeds further. The gap left by removing documentation can and should be closed by reconstructing the specific mapping between activities and requirements, before the system is allowed to advance. Proceeding to production and addressing the documentation gap only if it is raised in a future audit is incorrect because waiting for an audit to surface the gap means the system operates without demonstrable compliance in the meantime. Accepting the gap permanently because the deadline that caused it has already passed is incorrect because the deadline having passed does not make the underlying compliance gap acceptable to leave unresolved. Replacing the missing documentation with a general statement that the system complies with all applicable law is incorrect because a general compliance statement does not show which specific requirements apply or how each is met. For the exam, treat a documentation gap as something to remediate immediately, not accept or defer.