Group regulatory expectations into a small set of stable control families and types, then run your program around those, not around clauses, articles and acronyms.
When it comes to acronyms, the U.S. Army's Next Generation Command and Control program got the short end of the stick. Named ...